CyberArk, the company that protects organizations from cyber attacks that have made their way inside the network perimeter, announced new capabilities for CyberArk Viewfinity that deliver privileged account security to the endpoint.
Following the acquisition of Viewfinity in Q4 2015, CyberArk Viewfinity is now available as part of the CyberArk Privileged Account Security Solution. With this release, customers can gain greater privilege management and application control features in an on-premises or software-as-a-service (SaaS)-based offering. New integration with the CyberArk Shared Technology Platform enables all privileged audit logs to be stored and reviewed centrally, as well as new flexible, customizable reporting capabilities.
Evidence shows that advanced attacks often start with phishing emails sent to non-privileged business users, and a campaign of just 10 emails will typically yield a greater than 90 percent chance that at least one person will become the criminal’s prey.1 If an organization has removed users’ administrative rights on endpoints and servers but is not monitoring and controlling which applications are allowed to run on these machines, a rogue application containing malware that does not require administrative privileges to run can enter the infrastructure and execute in the environment, giving attackers a foothold into the organization.
Our study of employee endpoints reveals that it is not uncommon to find more than 20,000 different applications across an enterprise2, meaning malicious applications can easily hide in plain sight because IT teams simply don’t have the time to manually analyze everything.
“As malware continues to be a frequently-used and successful means for hijacking credentials, organizations must realize that the endpoint problem is a privilege problem,” said Roy Adar, senior vice president, product management, CyberArk. “The fact is, motivated attackers will eventually get inside your network – it’s what happens next that matters. Establishing a foothold on endpoints and escalating privileges enables attackers to jump from endpoints, to servers, to domain controllers until they own the network. CyberArk Viewfinity extends privilege security to the endpoint to mitigate these risks without excessively restrictive controls on users.”
To effectively reduce the attack surface and support mitigating the risk of a serious data breach without impacting productivity, organizations require solutions that enforce flexible least privilege policies for business and administrative users, and control what applications are allowed to run. Enhanced CyberArk Viewfinity features include:
CyberArk Viewfinity benefits include the ability to automatically create policies based on business requirements, seamlessly elevate application privileges as needed, reduce security risks related to ‘privilege creep,’ reduce help desk costs, leverage integrations with threat detection tools to analyze unknown applications, and accelerate the remediation of threats.
“We expect the endpoint security market to continue to grow, driven in part by increasing enterprise mobile and cloud adoption. To meet new demand efficiently and cost-effectively, organizations are realizing that endpoint security can no longer be a siloed compliance or audit initiative, it must be part of a comprehensive cyber security strategy,” said Robert Westervelt, research manager, security products, IDC. “We believe innovation at the endpoint focused on flexible deployment options, improving the user experience and streamlining management will be important factors that will resonate across risk, compliance and operations stakeholders.”
CyberArk Viewfinity v5.5 is available now in a SaaS, on-premises or Microsoft Group Policy (GPO) deployment model. This offering complements the CyberArk On-Demand Privileges Manager for Unix. For more information,