Bitglass
Turns out everyone has budget for a CASB
This post was originally published here by Salim Hafid. Cloud security represents a fast growing part of most organizations’ budgets, but many CISOs are left deciding between costly point solutions. Fortunately, cloud access security brokers have emerged as a means of bundling critical capabilities across data protection, threat protection, identity management, and visibilityat a relatively low […]
Saturday Morning Security Spotlight: Jail Breaks and Cyberattacks
This post was originally published here by Jacob Serpa. Here are the top cybersecurity stories of recent weeks: Man attempts prison break through cyberattacks Mailsploit allows for perfect phishing attacks 1.4 billion credentials found in dark web database Starbucks WiFi hijacks connected devices Hackers target cryptocurrency employees for bitcoins Man attempts prison break through cyberattacks […]
The Ins and Outs of Shadow IT
This post was originally published here by Paul Sullivan. Shadow IT refers to the unsanctioned applications used by employees who disregard IT’s app approval processes. By definition, this means that IT departments lack complete visibility into what is being used to store and process data. This invites risks like data exfiltration from malicious insiders, upload of sensitive data to […]
Bitglass the Sole Visionary in Gartner Magic Quadrant for CASB
This post was originally published here by Rich Campagna. If you haven’t yet seen it, Gartner recently released the very first Magic Quadrant for Cloud Access Security Brokers,1 and Bitglass was honored to be named the sole Visionary. According to Gartner, “Visionaries invest in leading-edge/”bleeding”-edge features that will be significant in next-generation products, and that give buyers […]
Private App Cloud Migration Requires CASB
This post was originally published here by Rich Campagna. Cloud Access Security Brokers (CASB) have gotten a lot of adoption over the past couple of years, with Gartner recently publishing their first Magic Quadrant for CASBs. Since Cloud is in the name, most organizations think of CASB when trying to achieve their security and compliance goals for public SaaS […]
Insider Threats, Machine Learning, and the Next-Gen CASB
This post was originally published here by Kevin Gee. One of the biggest dangers to application security is that of the insider threat. This ranges from users who unknowingly expose credentials and sensitive data to external parties, to disgruntled employees who act against the company’s interests. These threats are difficult to prevent with common security configurations and are big reasons why user and entity behavior analytics (UEBA) is such a common buzzword within the security industry. It is absolutely critical for any […]
CASBs in K12: Agents Need Not Apply
This post was originally published here by Rich Campagna. After hundreds of CASB deployments in the nearly 5 years since Bitglass was founded, we have customers in every major industry vertical. Regulated industries like healthcare and financial services rely heavily on Bitglass, but cloud security problems are fairly horizontal in nature, impacting everyone. With such a diverse customer base, it’s fascinating […]
Can a CASB Thwart the Uber Hack?
This post was originally published here by Rich Campagna. Another day, another massive data breach, this one involving Uber and the theft of data on more than 57 million drivers and customers. Like the recent high profile AWS S3 misconfigurations leading to unwanted exposure of sensitive data, the Uber hack could have been prevented with basic Cloud Access […]
Exact Match Cures Healthcare’s DLP Woes
This post was originally published here by Rich Campagna. We recently hosted a Bitglass customer roundtable during one of our training classes. The roundtable included several large healthcare organizations, and the topic quickly veered towards Data Leakage Prevention and using standard keyword and regular expression patterns to detect Protected Health Information (PHI). I was shocked […]
Next-Gen CASB: Zero-Day Protection
This post was originally published here by Salim Hafid. Many organizations struggle with unknown apps. Whether it’s a new EFSS service, a messaging platform, or any other web-based service, new apps are driving corporate data outside the firewall and oftentimes beyond managed “sanctioned” cloud applications like Office 365. To manually identify new upload paths is an impossible task […]
