Ponemon To Present Failed Trust Report at 2013 RSA Conference

“The Ponemon Institute recently released its 2013 Annual Cost of Failed Trust Report: Threats & Attacks that was underwritten by Venafi and underscores the risks that organizations take in failing to secure both internal and external trust. Dr. Larry Ponemon will present on the key findings from the report at the 2013 RSA Conference tomorrow, Thurs., Feb. 28. Ponemon will explain how digital certificates and cryptography are critical to enterprise trust and how poor key and certificate management can be extremely damaging to organizations’ budgets.”

Read More

Digital Certificates Chaos Could Cost Companies $398 Million

“’When the printer in the executive office gets hacked, people can just watch the stream,’ says Jeff Hudson, CEO of Salt Lake City-based Enterprise Key and Certificate Management (EKCM) provider Venafi. ‘Those executives might not want to put sensitive documents in email because they feel email is too insecure, but they might as well just email it directly to the people who want to manipulate the stock price,’ Hudson says. ‘Nobody’s looking. The criminals will figure out how to get into the stream.’”

Read More

Digital Certificates Chaos Could Cost Companies $398 Million

“’When the printer in the executive office gets hacked, people can just watch the stream,” says Jeff Hudson, CEO of Salt Lake City-based Enterprise Key and Certificate Management (EKCM) provider Venafi. ‘Those executives might not want to put sensitive documents in email because they feel email is too insecure, but they might as well just email it directly to the people who want to manipulate the stock price,’ Hudson says. ‘Nobody’s looking. The criminals will figure out how to get into the stream.’”

Read More

Digital Certificates Chaos Could Cost Companies US$398 Million

“’When the printer in the executive office gets hacked, people can just watch the stream,’ says Jeff Hudson, CEO of Salt Lake City-based Enterprise Key and Certificate Management (EKCM) provider Venafi. ‘Those executives might not want to put sensitive documents in email because they feel email is too insecure, but they might as well just email it directly to the people who want to manipulate the stock price,’ Hudson says. ‘Nobody’s looking. The criminals will figure out how to get into the stream.’”

Read More

Digital Certificates Chaos Could Cost Companies $398 Million

“’When the printer in the executive office gets hacked, people can just watch the stream,’ says Jeff Hudson, CEO of Salt Lake City-based Enterprise Key and Certificate Management (EKCM) provider Venafi. ‘Those executives might not want to put sensitive documents in email because they feel email is too insecure, but they might as well just email it directly to the people who want to manipulate the stock price,’ Hudson says. ‘Nobody’s looking. The criminals will figure out how to get into the stream.’”

Read More

Java Exploit Signed with Digital Certificate Stolen from Texas-Based Firm

“’Cybercriminals increasingly operate in the same way legitimate businesses do; they look for the quickest and easiest means to a desired end. From Stuxnet and Flame to targeted attacks on Bit9 and Adobe, attacks leveraging digital certificates have accelerated,’ Jeff Hudson, CEO of enterprise key and certificate management (EKCM) solutions provider Venafi, told Softpedia. ‘The criminals have learned that leveraging flaws in the way trust is managed is among the fastest and most effective ways to infiltrate networks, take over machines, and inflict damage and steal data – without detection,’ Hudson added.”

Read More

Consensus at RSA Conference 2013: PKI is Under Attack

“In the weeks leading up to RSA, criminals obtained valid digital certificates to spread banking malware. And the week before RSA, keys used by Bit9 to digitally sign whitelisted applications were misused, enabling subsequent attacks on Bit9 customer. These and other trust exploits were covered in detail in an educational webcast delivered by Paul Turner, Venafi’s VP of Products and Strategy.”

Read More

2013 Annual Cost of Failed Trust Report: Threat & Attacks

“For the first time, Ponemon Institute has quantified the staggering costs of failures in cryptographic key and digital certificate management. The First Annual Cost of Failed Trust Report, underwritten by Venafi, reveals findings such as: Hundreds of millions lost due to failure to control trust; Serious exploits of common, easy-to-fix issues; Clear and present danger to the cloud; Gaps that manual management cannot close; General understanding that things must change.”

Read More

Date: March 21, 2013
Location: Boston Marriott Newton, Newton, MA
Details: http://www.dataconnectors.com/events/2013/03Boston/agenda.asp

About Venafi

Venafi is the inventor of and market leader in enterprise key and certificate management (EKCM). Venafi delivered the first enterprise-class solution to discover all digital certificates and cryptographic keys within an organization, connect these assets to the people responsible for them, report on and audit their use to prove compliance, enforce policy, and automate operations to eliminate security risks, unplanned outages and compliance failures. Designed specifically for the enterprise, Venafi Director helps organizations regain control over trust in the data center, on desktops and mobile devices, and in the cloud by managing Any Key. Any Certificate. Anywhere™. Venafi also publishes best practices for effective key and certificate management. Venafi customers include the world’s most prestigious Global 2000 organizations in financial services, insurance, high tech, telecommunications, aerospace, healthcare and retail. Venafi is backed by top-tier venture capital funds, including Foundation Capital, Pelion Venture Partners and Origin Partners. For more information, visit www.venafi.com.

Date: April 4, 2013
Location: Hyatt Regency McCormick Place, Chicago, IL
Details: http://www.dataconnectors.com/events/2013/04Chicago/agenda.asp

About Venafi

Venafi is the inventor of and market leader in enterprise key and certificate management (EKCM). Venafi delivered the first enterprise-class solution to discover all digital certificates and cryptographic keys within an organization, connect these assets to the people responsible for them, report on and audit their use to prove compliance, enforce policy, and automate operations to eliminate security risks, unplanned outages and compliance failures. Designed specifically for the enterprise, Venafi Director helps organizations regain control over trust in the data center, on desktops and mobile devices, and in the cloud by managing Any Key. Any Certificate. Anywhere™. Venafi also publishes best practices for effective key and certificate management. Venafi customers include the world’s most prestigious Global 2000 organizations in financial services, insurance, high tech, telecommunications, aerospace, healthcare and retail. Venafi is backed by top-tier venture capital funds, including Foundation Capital, Pelion Venture Partners and Origin Partners. For more information, visit www.venafi.com.

Date: April 23 – 25, 2013
Location: Earls Court, London, UK
Details: http://www.infosec.co.uk/

About Venafi

Venafi is the inventor of and market leader in enterprise key and certificate management (EKCM). Venafi delivered the first enterprise-class solution to discover all digital certificates and cryptographic keys within an organization, connect these assets to the people responsible for them, report on and audit their use to prove compliance, enforce policy, and automate operations to eliminate security risks, unplanned outages and compliance failures. Designed specifically for the enterprise, Venafi Director helps organizations regain control over trust in the data center, on desktops and mobile devices, and in the cloud by managing Any Key. Any Certificate. Anywhere™. Venafi also publishes best practices for effective key and certificate management. Venafi customers include the world’s most prestigious Global 2000 organizations in financial services, insurance, high tech, telecommunications, aerospace, healthcare and retail. Venafi is backed by top-tier venture capital funds, including Foundation Capital, Pelion Venture Partners and Origin Partners. For more information, visit www.venafi.com.

Date: May 13 – 15, 2013
Location: St. Paul RiverCentre, St. Paul, MN
Details: http://secure360.org/conference/

About Venafi

Venafi is the inventor of and market leader in enterprise key and certificate management (EKCM). Venafi delivered the first enterprise-class solution to discover all digital certificates and cryptographic keys within an organization, connect these assets to the people responsible for them, report on and audit their use to prove compliance, enforce policy, and automate operations to eliminate security risks, unplanned outages and compliance failures. Designed specifically for the enterprise, Venafi Director helps organizations regain control over trust in the data center, on desktops and mobile devices, and in the cloud by managing Any Key. Any Certificate. Anywhere™. Venafi also publishes best practices for effective key and certificate management. Venafi customers include the world’s most prestigious Global 2000 organizations in financial services, insurance, high tech, telecommunications, aerospace, healthcare and retail. Venafi is backed by top-tier venture capital funds, including Foundation Capital, Pelion Venture Partners and Origin Partners. For more information, visit www.venafi.com.

Date: May 16, 2013
Location: Toronto, ON
Details: http://www.dataconnectors.com/events/2013/05Toronto/agenda.asp

About Venafi

Venafi is the inventor of and market leader in enterprise key and certificate management (EKCM). Venafi delivered the first enterprise-class solution to discover all digital certificates and cryptographic keys within an organization, connect these assets to the people responsible for them, report on and audit their use to prove compliance, enforce policy, and automate operations to eliminate security risks, unplanned outages and compliance failures. Designed specifically for the enterprise, Venafi Director helps organizations regain control over trust in the data center, on desktops and mobile devices, and in the cloud by managing Any Key. Any Certificate. Anywhere™. Venafi also publishes best practices for effective key and certificate management. Venafi customers include the world’s most prestigious Global 2000 organizations in financial services, insurance, high tech, telecommunications, aerospace, healthcare and retail. Venafi is backed by top-tier venture capital funds, including Foundation Capital, Pelion Venture Partners and Origin Partners. For more information, visit www.venafi.com.

Date: May 30, 2013
Location: Philadelphia, PA
Details: http://www.dataconnectors.com/events/2013/05Philadelphia/agenda.asp

About Venafi

Venafi is the inventor of and market leader in enterprise key and certificate management (EKCM). Venafi delivered the first enterprise-class solution to discover all digital certificates and cryptographic keys within an organization, connect these assets to the people responsible for them, report on and audit their use to prove compliance, enforce policy, and automate operations to eliminate security risks, unplanned outages and compliance failures. Designed specifically for the enterprise, Venafi Director helps organizations regain control over trust in the data center, on desktops and mobile devices, and in the cloud by managing Any Key. Any Certificate. Anywhere™. Venafi also publishes best practices for effective key and certificate management. Venafi customers include the world’s most prestigious Global 2000 organizations in financial services, insurance, high tech, telecommunications, aerospace, healthcare and retail. Venafi is backed by top-tier venture capital funds, including Foundation Capital, Pelion Venture Partners and Origin Partners. For more information, visit www.venafi.com.

Date: June 10 – 13, 2013
Location: National Harbor, MD
Details: http://www.gartner.com/technology/summits/na/security/

About Venafi

Venafi is the inventor of and market leader in enterprise key and certificate management (EKCM). Venafi delivered the first enterprise-class solution to discover all digital certificates and cryptographic keys within an organization, connect these assets to the people responsible for them, report on and audit their use to prove compliance, enforce policy, and automate operations to eliminate security risks, unplanned outages and compliance failures. Designed specifically for the enterprise, Venafi Director helps organizations regain control over trust in the data center, on desktops and mobile devices, and in the cloud by managing Any Key. Any Certificate. Anywhere™. Venafi also publishes best practices for effective key and certificate management. Venafi customers include the world’s most prestigious Global 2000 organizations in financial services, insurance, high tech, telecommunications, aerospace, healthcare and retail. Venafi is backed by top-tier venture capital funds, including Foundation Capital, Pelion Venture Partners and Origin Partners. For more information, visit www.venafi.com.

Date: July 27 – August 1, 2013
Location: Ceasars Palace, Las Vegas, NV
Details: http://www.blackhat.com/us-13/

About Venafi

Venafi is the inventor of and market leader in enterprise key and certificate management (EKCM). Venafi delivered the first enterprise-class solution to discover all digital certificates and cryptographic keys within an organization, connect these assets to the people responsible for them, report on and audit their use to prove compliance, enforce policy, and automate operations to eliminate security risks, unplanned outages and compliance failures. Designed specifically for the enterprise, Venafi Director helps organizations regain control over trust in the data center, on desktops and mobile devices, and in the cloud by managing Any Key. Any Certificate. Anywhere™. Venafi also publishes best practices for effective key and certificate management. Venafi customers include the world’s most prestigious Global 2000 organizations in financial services, insurance, high tech, telecommunications, aerospace, healthcare and retail. Venafi is backed by top-tier venture capital funds, including Foundation Capital, Pelion Venture Partners and Origin Partners. For more information, visit www.venafi.com.

Earlier this week Amazon Web Services announced their new CloudHSM offering. Essentially the service is a Luna SA appliances offered by SafeNet for each tenant, and can take at least two days to provision once ordered. The cryptographic assets are not accessible to AWS as they hold the admin credentials and the customer keeps both the HSM Admin and HSM Partition Owner credentials.

You can choose from multiple availability zones in the US East and EU West regions. The Cloud HSM is meant specifically for use in the AWS Virtual Private Cloud (VPC).

Ref: AWS CloudHSM

The addition of the AWS CloudHSM is a welcome evolution in making the cloud more secure. However it still leaves many problems. In a recent publication about the “Cost of Failed Trust” by the Ponemon Institute, the average global 2000 organization has in excess of 17,000 encryption keys and certificates spread across their network. A network that spans the enterprises datacenter into virtual private clouds such as the AWS offering, and mobile devices.

Organizations need to be weary of silo management of encryption keys and certs. The Cloud HSM is only available for AWS Virtual Private Cloud workloads. Thus creating silo management of keys and certificates for your AWS deployment, your datacenter deployment and mobile devices. You need to make sure you implement a centralized key management solution in order to gain full visibility into your entire key and certificate inventory.

The only key difference whether or not you are using an HSM on-premise or the AWS CloudHSM is the location of the HSM. You still need to be able to manage your entire key and certificate inventory. The CloudHSM is not going to provide you with this.

Make sure you deploy a key and certificate management platform, that from a single pane of glass can manage the encryption keys stored within the HSM—be it AWS CloudHSM or a locally installed one.
Venafi Encryption Director manages any key, any certificate, anywhere.

Date: March 27 – 28, 2013
Location: Hynes Convention Center, Boston, MA
Details: http://secureworldexpo.com/event/index.php/2013-boston-home

About Venafi

Venafi is the inventor of and market leader in enterprise key and certificate management (EKCM). Venafi delivered the first enterprise-class solution to discover all digital certificates and cryptographic keys within an organization, connect these assets to the people responsible for them, report on and audit their use to prove compliance, enforce policy, and automate operations to eliminate security risks, unplanned outages and compliance failures. Designed specifically for the enterprise, Venafi Director helps organizations regain control over trust in the data center, on desktops and mobile devices, and in the cloud by managing Any Key. Any Certificate. Anywhere™. Venafi also publishes best practices for effective key and certificate management. Venafi customers include the world’s most prestigious Global 2000 organizations in financial services, insurance, high tech, telecommunications, aerospace, healthcare and retail. Venafi is backed by top-tier venture capital funds, including Foundation Capital, Pelion Venture Partners and Origin Partners. For more information, visit www.venafi.com.

Date: April 15 – 17, 2013
Location: Walt Disney World Swan and Dolphin, Orlando, FL
Details: http://www.misti.com/default.asp?page=65&Return=70&ProductID=5539&LS=infosecworld

About Venafi

Venafi is the inventor of and market leader in enterprise key and certificate management (EKCM). Venafi delivered the first enterprise-class solution to discover all digital certificates and cryptographic keys within an organization, connect these assets to the people responsible for them, report on and audit their use to prove compliance, enforce policy, and automate operations to eliminate security risks, unplanned outages and compliance failures. Designed specifically for the enterprise, Venafi Director helps organizations regain control over trust in the data center, on desktops and mobile devices, and in the cloud by managing Any Key. Any Certificate. Anywhere™. Venafi also publishes best practices for effective key and certificate management. Venafi customers include the world’s most prestigious Global 2000 organizations in financial services, insurance, high tech, telecommunications, aerospace, healthcare and retail. Venafi is backed by top-tier venture capital funds, including Foundation Capital, Pelion Venture Partners and Origin Partners. For more information, visit www.venafi.com.