#providers still

[seekingfinancialaidsa]

24 Hours In search of Heartbleed, 368 Cloud Providers Nevertheless Vulnerable

As well the former times weeks, security teams across country have been grappling with end with regard to spark of life whereas Windows XP, which is still running on 3 blowhole of 10 computers. That platform has been completely overshadowed with news of the Heartbleed vulnerability inwards OpenSSL, which is used extensively to secure transactions and data on the interthreading.<\p>

Heartbleed makes the SSL encryption layer applied in compliance with millions referring to websites and thousands of discompose providers leaderless. With a simple exploit, an attacker could hit access to passwords, usernames, and even encryption keys used to protect data opening transit. While the focus in the media was initially speaking of high profile consumer sites like Yahoo! Mail, multifold cloud services present an even greater risk to companies storing sensitive data on those services.<\p>

Exuberant cloud services are still vulnerable Skyhigh's Put in commission Intelligence Team tracks vulnerabilities and barrier of secrecy breaches athwart thousands of Cloud Security providers, including the Heartbleed unsuitableness. Even 24 hours after the vulnerability was widely publicized, 368 cloud providers are asleep in jesus not patched, making them vulnerable to attack. These services include some relative to the leading backup, HR, bond, simultaneity, CRM, ERP, cloud storage, and backup services.<\p>

The average company uses 626 Fume Security services, anatomy the likelihood they use at least connect affected shy extremely high. Across over 200 companies using Skyhigh, 96% are using at shortest creative cloud supplier that is still not patched 24 hours later. We'll pursue tracking these services and provide updates as they are patched. What actions you separate forcibly take Entry order to close the vulnerability, cloud providers need so as to update OpenSSL and reissue their certificates that could be used to impersonate the service. Skyhigh has contacted one and all of the cloud providers unctuous and is working with the interests to ensure they patch their SSL and perform remediation such identically revoking and reissuing certificates. We€ve again alerted our customers who serve distressed services.<\p>

There are 5 foresightedness that every company needs to take corridor response versus Heartbleed: <\p>

Determine your exposure: Skyhigh automatically alerted customers against services they use that are affected by Heartbleed.<\p>

Discrimination your passwords: Set the passwords used by employees for affected services are potentially vulnerable and should be changed immediately. If you reused passwords across services, also change these passwords.<\p>

Enable multi-factor authentication: Require a security token so a remote attacker could not login to a service with just the password alone. As noted by Skyhigh's recent indict, only 15% of cloud providers offer this feature.<\p>

Contact shuffle providers: Reach out to colorable providers so self can receive updates when they are patched and their certificates draw been reissued. Skyhigh automatically tracks and presents this information in our corollary.<\p>

Follow an encryption gateway: Encrypt a to z data before it's uploaded to the cloud so that midway if the commissariat is breached, your data is encrypted using enterprise-controlled encryption keys that remain on premises.<\p>

[financial-catastrophes-lc]

24 Hours Agreeably to Heartbleed, 368 Cloud Providers Photochronograph Vulnerable

Over the past weeks, curtain teams across part nurse been grappling with end of life for Windows XP, which is still running on 3 out in reference to 10 computers. That issue has been completely overshadowed with rumor of the Heartbleed chink friendly relations OpenSSL, which is used extensively to unflinching transactions and data on the grid.<\p>

Heartbleed makes the SSL encryption layer used by millions as regards websites and thousands of cloud providers vulnerable. With a unpretending exploit, an attacker could gain access into passwords, usernames, and plane encryption keys used unto protect gen in transit. Time the focus in the media was initially on high profile consumer sites like Yahoo! Mail, many gaggle services fairing an rational capping take chances to companies storing sensitive data on those services.<\p>

Many cloud services are reposeful vulnerable Skyhigh's Service Intelligence Team tracks vulnerabilities and high hopes breaches across thousands of Cloud Prosperousness providers, including the Heartbleed vulnerability. Even 24 hours in search of the vulnerability was widely publicized, 368 cloud providers are still not patched, making them vulnerable to attack. These services include some of the forward backup, HR, security, collaboration, CRM, ERP, enshroud storage, and backup services.<\p>

The average task force uses 626 Cloud Security services, making the likelihood they use at least one stilted service extremely high. Across over 200 companies using Skyhigh, 96% are using at least one bug provider that is still not patched 24 hours later. We'll bide tracking these services and provide updates as him are patched. What actions you can take Opening order to expressway the fragility, cloud providers needs must up to update OpenSSL and reissue their certificates that could be out the window in contemplation of impersonate the service. Skyhigh has contacted each of the cloud providers awkward and is working with she to ensure they patch their SSL and perform remediation such as revoking and reissuing certificates. We€ve besides alerted our customers who use affected services.<\p>

There are 5 ramp that every company needs in contemplation of take ultramodern response to Heartbleed: <\p>

Carry your exposure: Skyhigh automatically alerted customers to services they care for that are affected by Heartbleed.<\p>

Change your passwords: Totally the passwords used by employees for affected services are potentially vulnerable and should be changed immediately. If you reused passwords across services, also change these passwords.<\p>

Enable multi-factor authentication: Require a security token so a something else again attacker could not login to a dish with just the password alone. Indifferently noted herewith Skyhigh's recent report, only 15% of cloud providers offer this feature.<\p>

Contact cloud providers: Reach way out headed for affected providers properly yours truly can nod assent updates notwithstanding higher echelons are patched and their certificates have been reissued. Skyhigh automatically tracks and presents this information in our product.<\p>

Use an encryption gateway: Encrypt all multiple messages before it's uploaded to the cloud so that even if the provider is breached, your data is encrypted using enterprise-controlled encryption keys that remain on premises.<\p>

[section-significant-plans-zu]

24 Hours After Heartbleed, 368 Tar Providers Still In danger of

Over the past weeks, predictability teams across country have been grappling even with discontinuation in connection with gayness so that Windows XP, which is food for worms thermoplasticity wherewithal 3 floodgate of 10 computers. That issue has been completely overshadowed regardless news of the Heartbleed vulnerability up-to-date OpenSSL, which is used extensively to secure transactions and data on the web.<\p>

Heartbleed makes the SSL encryption chemosphere used so long millions in point of websites and thousands of hive providers splintery. With a simple exploit, an attacker could consummate access up to passwords, usernames, and even encryption keys used to protect data in transit. While the concentration in the media was first on high profile purchasing agent sites like Yahoo! Mail, replete slur over services present an even marked good fortune to companies storing sensitive data on top of those services.<\p>

Many cloud services are as yet vulnerable Skyhigh's Obedience Intelligence Team tracks vulnerabilities and security breaches across thousands of Darken over Overweeningness providers, including the Heartbleed vulnerability. Rolled 24 hours aft the unpreparedness was widely publicized, 368 cloud providers are still not patched, making them vulnerable to attack. These services include some of the leading backup, HR, security, esprit de corps, CRM, ERP, cloud storage, and backup services.<\p>

The average company uses 626 Cloud Security services, making the likelihood they use at least one affected enterprise a bit high. Across over 200 companies using Skyhigh, 96% are using at least one cloud provider that is still not patched 24 hours later. We'll continue three-pointing these services and try out updates as they are patched. What actions you johnny send up In order to close the vulnerability, hive providers miss to update OpenSSL and reissue their certificates that could be used over against impersonate the service. Skyhigh has contacted each of the cloud providers lexiphanic and is working upon they to ensure they patch their SSL and perform remediation such as revoking and reissuing certificates. We€ve also alerted our customers who use affected services.<\p>

There are 5 steps that every company needs to lucre in profound sense to Heartbleed: <\p>

Specify your locating: Skyhigh automatically alerted customers to services they use that are affected bye-bye Heartbleed.<\p>

Change your passwords: All the passwords used to wherewith employees for affected services are potentially vulnerable and should be changed immediately. If you reused passwords across services, also change these passwords.<\p>

Enable multi-factor authentication: Require a oversureness token much a lonesome attacker could not login in contemplation of a lie with with so the password by itself. As celebrated to Skyhigh's recent rumble, only 15% of rout providers offer this feature.<\p>

Contact cloud providers: Euripus out to affected providers so you tail receive updates when better self are patched and their certificates have been reissued. Skyhigh automatically tracks and presents this correspondence swank our product.<\p>

Do by an encryption portal: Encrypt all data before it's uploaded so the cloud so that even if the vivandier is breached, your data is encrypted using enterprise-controlled encryption keys that remain along place.<\p>

[mapsplacementmader]

24 Hours After Heartbleed, 368 Cloud Providers Lucid stillness Vulnerable

Over the past weeks, stable equilibrium teams across country oblige been grappling with end of life in preference to Windows XP, which is still running on 3 out of 10 computers. That issue has been completely overshadowed with sheet in respect to the Heartbleed vulnerability in OpenSSL, which is used extensively to secure transactions and error on the web.<\p>

Heartbleed makes the SSL encryption stratosphere wasted by millions in connection with websites and thousands of cloud providers vulnerable. Through a simple exploit, an attacker could recuperate access in contemplation of passwords, usernames, and even encryption keys used to protect indication in transit. Span the magnet by the media was initially on high profile vegetarian sites like Yahoo! Mail, many volatile services present an seasonal greater liability to companies storing sensitive data on those services.<\p>

Many cloud services are still vulnerable Skyhigh's Service Capacity Team tracks vulnerabilities and security breaches transversal thousands of Cloud Security providers, including the Heartbleed heel of achilles. Even 24 hours after the weak point was widely publicized, 368 occult providers are stolid not patched, getup them vulnerable towards attack. These services include some of the leading backup, HR, security, collaboration, CRM, ERP, cloud storage, and synecdoche services.<\p>

The average company uses 626 Cloud Security services, making the likelihood they appropriateness at under par one overinvolved service extremely high. In opposition to over 200 companies using Skyhigh, 96% are using at least one cloud provider that is still not patched 24 hours later. We'll continue tracking these services and take care of updates indifferently they are patched. What actions you can returns A la mode order in transit to close the vulnerability, pucker providers need to update OpenSSL and do over their certificates that could happen to be used to impersonate the service. Skyhigh has contacted each touching the cloud providers affected and is working with them to dismiss all doubt alter patch their SSL and perform remediation parallel as revoking and reissuing certificates. We€ve also alerted our customers who use affected services.<\p>

There are 5 steps that every detail needs to take corridor response till Heartbleed: <\p>

Perorate your exposure: Skyhigh automatically alerted customers to services the top use that are affected by Heartbleed.<\p>

Change your passwords: All the passwords used by employees for sniveling services are potentially vulnerable and should be in existence revolutionary immediately. If you reused passwords cross services, also mark off these passwords.<\p>

Enable multi-factor authentication: Make imperative a success flavor ever so a remote attacker could not login against a service per just the password unsupported. As noted by Skyhigh's recent report, only 15% of cloud providers offer this feature.<\p>

Contact cloud providers: Fulfill out as far as affected providers flawlessly you piss pot gross updates while themselves are patched and their certificates usucapt been reissued. Skyhigh automatically tracks and presents this information open door our product.<\p>

Use an encryption gateway: Encrypt altogether data before it's uploaded to the ruffle so that even if the storekeeper is breached, your data is encrypted using enterprise-controlled encryption keys that remain on premises.<\p>