Main navigation
Por qué CyberArk
CyberArk es el líder de referencia en Seguridad de Cuentas Privilegiadas. Más de la mitad de las empresas clasificadas en el Fortune 100 confían en nuestras soluciones para proteger sus activos fundamentales y de mayor valor.
CyberArk en la prensa
BLOGS
NEWS
EVENTS
The CyberArk Blog
Threat Research Blog
Cracking Service Account Passwords with Kerberoasting
Threat detection is a hot topic in security today. By now, most recognize it’s important to manage administrative rights and take a centralized approach to security so as not to mismanage (or lose track of) older systems and applications. However, today, there are new considerations. Keberoasting has emerged as a way attackers exploit Windows authentication […]
How to Address Vulnerabilities in Microsoft GitHub Repositories
Microsoft’s acquisition of GitHub for $7.5 billion has raised questions about the future of GitHub’s privacy and security within the developer community. Some developers are already moving to other code version control platforms like GitLab. As Microsoft works to assuage these concerns, it’s a good time to review GitHub security concerns beyond Microsoft’s responsibility. Past […]
Securing Privileged Access within Microsoft’s Enhanced Security Administrative Environments (ESAE)
The Microsoft Enhanced Security Administrative Environment (ESAE) is a secured, bastion forest reference architecture designed to manage the Active Directory (AD) infrastructure. This methodology focuses on “Tier 0” assets and identities, which have direct or indirect administrative control over a given AD forest and all of the assets within it, such as domain controllers, domain […]
Cryptocurrency Evolution: The Rise of Monero and Its Impact on Cyber Security
This article is part of a series of blog posts on cryptomining from the CyberArk Red Team. It explores the evolution of cryptocurrency – from the birth of Bitcoin and the utility of blockchain to the rise of Monero and the hacker economy – and what organizations need to know about the connection between cryptocurrency […]
WannaBe Ready for the Next WannaCry?
We recently passed the one year anniversary NotPetya – one of the most devastating outbreaks of ransomware in recent memory. By exploiting the EternalBlue vulnerability first exposed by WannaCry, NotPetya ravaged business systems and caused billions in damage globally. Recently, Ukrainian government officials warned that businesses were finding increasing amounts of malware planted on computer […]
Weakness Within: Kerberos Delegation
During a Black Hat USA 2015 presentation, Sean Metcalf noted the security risks of Kerberos unconstrained delegation. Inspired by his talk and additional delegation articles including this one, CyberArk Labs conducted further research on the delegation mechanism. In this article, we highlight the potential risks of misconfigured delegation services or users, offer possible mitigations and […]
07/08/2018 - 09/08/2018
Black Hat
03/12/2018 - 05/12/2018