Free Privileged Account Discovery Tool: Identify & secure credentials to stop lateral movement. Download Free

BeyondTrust
  • Products
    Privileged Password Management
    Discover, manage, audit, and monitor privileged accounts
    Password Safe DevOps Secrets Safe
    Endpoint Privilege Management
    Manage privileges on Windows, Mac, Linux, and Unix endpoints
    Windows and Mac Unix and Linux Active Directory Bridge
    Secure Remote Access
    Centrally manage and secure remote access for service desks and vendors
    Remote Support Privileged Remote Access
    BeyondInsight Analytics
    See All Solutions
  • Resources

    Universal Privilege Management

    Our innovative Universal Privilege Management approach secures every user, asset, and session across your entire enterprise.

    Watch Video

    Learn

    Case Studies
    Competitor Comparisons
    Datasheets
    Glossary
    Product Demos
    Whitepapers

    Attend

    Events
    Go Beyond
    Training
    Webinars

    Support

    Changelog
    Professional Services
    Technical Documentation
  • Blog
  • Partners
  • Contact
  • Support
  • Services
  • Training
  • Events
  • Company

Missed it Live? On Demand March VEF Now Available + Live Q&A Answered

March 15, 2012

  • Blog
  • Archive
Miss our live Vulnerability Expert Forum webinar earlier this week? Never fear, I've put the recording + slides + Q&A all together here for your convenience. Take your pick. Additionally, find this month's Security Bulletin here, a list of all the Audit IDs here, and the PDF of the presentation here. If you have additional questions not listed here, please feel free to comment below and we'll get our Research Team to answer.

LIVE Q&A

During the webinar there were some great questions brought up that we wanted to get answered immediately. Below are the live audience questions and our Research Team's answers: Q: Which one is more vulnerable to attacks - .com or .net sites and client computers attached to them? DJ: Both are equally vulnerable. The domain extension, in this case, does not have a whole lot of significance. JD: It's not the name or location of the site that makes it vulnerable, it's the content. Q: Are the article sources available? DJ: Yes they're available and below. CTx:
  • Uncle Sam: If It Ends in .Com, It's .Seizable
  • Should US intelligence agency have a role in protecting electric grid?
  • Social Engineer Gets into RSA Conference for Free
  • Juniper buys web security company for $80 million
IT Admin:
  • Windows 8 Kill Switch
  • Chrome Adopted As US State Department "Alternative" Certified Browser
  • Chinese Spy on NATO Officials using Facebook
Researcher:
  • IE10 ForceASLR
  • Final Conclusion to the LulzSec Story (3 articles I referenced) - http://www.reuters.com/article/wp-content/uploads/09/us-cyber-arrests-martyn-idUSBRE82807M20120309, http://gizmodo.com/5890886/read-the-full-lulzsec-indictments-right-here, http://gizmodo.com/5890879/how-the-feds-turned-lulzsecs-leader-against-his-own
  • Duqu Mystery Language
  • Vulnerability in AMD CPUs causes Stack Corruption
Q: Is the kill switch only controllable by MS or are admins able to adminstrate that functionality? DJ: Details are scarce, but from all appearances Microsoft has sole control over that, seeing as the applications come from their app store. JD: My best guess is probably not, this isn't something you normally pass around. It will likely be kept as a last resort case for Microsoft. Killswitches in the past are known for being very rarely, if ever, used. Q: There seems to be a security update that's in Microsoft's update list but does not seem to have an associated bulletin number. Because of that, I'm having difficulty finding out more information about it. It's KB2647518, Update Rollup for ActiveX Killbits for Windows 7 for x64-based Systems. There's an Advisory for this at http://support.microsoft.com/kb/2647518, and that page (that has various downloads and installation instructions) references a page with what I'd expect to be the usual descriptive bulletin info at http://www.microsoft.com/technet/security/advisory/2647518.mspx, but this page doesn't exist. Scanning this month's list of bulletins, it's not immediately apparent whether this is a patch without a bulletin number assigned to it, or if it may be included in one of the bulletins that were published this month. Do you have a handle on this? If so, what's up? JD: This is a security update, but did not warrant a Bulletin. Try http://support.microsoft.com/kb/2647518 instead for the advisory. It basically just disables some ActiveX controls in third party software.

Sarah Lieber

Marketing Manager, Demand Generation & Strategy at BeyondTrust

Sarah is a highly dedicated and creative marketing professional with over a decade of experience in proven B2B demand-gen and campaign success in the cybersecurity space. Sarah strategically built and grew from the ground-up BeyondTrust's highly effective and successful world-wide webinar program. Yearly, the BeyondTrust webinar program involves over 100 cybersecurity experts and generates tens of thousands of attendees across the globe. See what's new with BeyondTrust webinars here: https://www.beyondtrust.com/resources/webcasts

Stay Up To Date

Get the latest news, ideas, and tactics from BeyondTrust. You may unsubscribe at any time.

I agree to receive product related communications from BeyondTrust as detailed in the Privacy Policy, and I may manage my preferences or withdraw my consent at any time.

You May Also Be Interested In:

Webcasts | February 09, 2021

Customer Webinar: Remote Support 21.1 Released!

Webcasts | February 24, 2021

Your PAM 2021 Blueprint: Securing Privileged Accounts for On-Premises and Cloud Assets

Whitepapers

Evolving Privileged Identity Management (PIM) In The 'Next Normal'

BeyondTrust Logo
  • Facebook
  • Twitter
  • LinkedIn

Keep up with BeyondTrust

I agree to receive product related communications from BeyondTrust as detailed in the Privacy Policy, and I may manage my preferences or withdraw my consent at any time.

Customer Support
Contact Sales

Products

  • Endpoint Privilege Management
  • Password Management
  • Privileged Remote Access
  • DevOps Secrets Safe
  • Remote Support

Resources

  • Blog
  • Case Studies
  • Competitor Comparisons
  • Datasheets
  • Glossary
  • Videos
  • Webcasts
  • Whitepapers

About

  • Company
  • Careers
  • Contact
  • Events
  • Leadership Team
  • Partner Program
  • Press

Languages

  • English
  • German
  • French
  • Spanish
  • Korean
  • Portuguese
  • Japanese
  • Privacy
  • Security
  • Manage Cookies
  • WEEE Compliance

Copyright © 1999 — 2020 BeyondTrust Corporation. All rights reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust Corporation is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.