Security

Report Emphasizes What Should Be Obvious: Password Security Cannot Be Overlooked

Submitted by Nathan Van Ness
April 30th, 2013

As reported by ZDNet, Verizon’s Data Breach Investigations Report shows that, “Authentication-based attacks factoredAuthentication-based security into about four of every five breaches involving hacking in 2012.”

The report states that password-protected systems were hacked using such methods as guessing, cracking, or reusing valid credentials. Of those methods, it’s obvious that the reuse of valid credentials is the most troubling in terms of everyday users unwittingly contributing to the overall data-breach threat.

“The easiest and least-detectable way to gain unauthorized access is to leverage someone’s (or something’s) authorized access,” the report stated.

But the report is more an indictment of password-based authentication in general than of user complicity (either unknowing or through carelessness) in password-based attacks.

From the report: “If we could collectively accept a suitable replacement (for passwords), it would’ve forced about 80% of these attacks to adapt or die. We’ve talked about the shortcomings of passwords for years now, and if it were an easy problem (or the pain caused by password problems was greater), it’d be fixed by now.”

What’s the Most Vulnerable Smartphone Operating System?

Submitted by Nathan Van Ness
March 26th, 2013

An interesting study conducted by SourceFire, “25 Years of Vulnerabilities,” concludes that among the major smartphone operating systems, Apple’s iOS contains more software vulnerabilities than Android, Windows and Blackberry combined.

However, as explained in this ZDNet report, there are several key factors at play that make iOS appear more vulnerable than the other operating systems.

Regardless, as enterprise businesses continue to embrace the BYOD (bring your own device) trend and implement their own workplace policies regarding employees’ usage of personal smartphones and tablets for business purposes, extra emphasis needs to be placed on ensuring that proper safeguards are in place to protect mission-critical data from outside exploitation.

Anonymous ‘Study’ Highlights Embedded Device Security Risks

Submitted by Nathan Van Ness
March 20th, 2013

An interesting story courtesy of Infoworld.com, “Researcher hijacks insecure embedded devices en masse for Internet census,” provides yet one more piece of powerful evidence in support of network printer and MFP security.

From the piece: “Even though this particular botnet doesn’t appear to have been used for malicious purposes, it highlights the potential for abuse of poorly configured embedded devices by cyber criminals…”

I believe it’s still widely unrecognized by the business world that any printer or MFP connected to the Internet is a potential point-of-entry for hackers with malicious intentions. And, as the Infoworld article shows, the threats are real, as are the vulnerabilities.

With the recent launch of our ConnectKey devices, we’ve introduced the right technology at the right time to help businesses safeguard their critical data from web-based intruders.

Check out this quick video that discusses a few of the powerful technologies built into ConnectKey devices.

Xerox® ConnectKey™: Always On Guard

Submitted by Nathan Van Ness
February 27th, 2013

In support of the recent ConnectKey launch, we produced a series of lighthearted and informative YouTube videos that demonstrate some of the key features and capabilities made possible by this groundbreaking technology.

Today we’re highlighting the ConnectKey technology’s unparalleled data security advantages. 

Second in the series, “Xerox ConnectKey: Always On Guard,” is a humorous dramatization of a real-world office scenario in
which a ConnectKey MFP protects sensitive information from the prying eyes of a particularly nosy employee.

Xerox ConnectKey MFPs include McAfee® technology integration, resulting in the industry’s first lineup of multifunction printers that protect themselves from potential outside threats. McAfee’s whitelisting technology ensures only safe, pre-approved files or functions are executed on your devices, minimizing the need to manually update software levels against new security threats. Also, seamless integration with the Xerox® MPS toolset and McAfee ePolicy (ePO) allows for easy tracking and monitoring.

Plus, automatic Cisco® TrustSec Identity Services Engine (ISE) integration provides comprehensive visibility of all ConnectKey MFPs’ endpoints to enforce IT-centric security policies and compliance.

I encourage you to watch the video and then visit our Xerox ConnectKey site to learn more.

Xerox ConnectKey™: Always There

Submitted by Nathan Van Ness
February 25th, 2013

This week we’re shining the spotlight on our recently launched Xerox ConnectKey technology, highlighting the many leading-edge advantages Xerox MFPs built on the ConnectKey platform provide businesses large and small in any industry.

In support of the ConnectKey launch, we produced a series of entertaining YouTube videos that demonstrate some of the key features and capabilities made possible by this groundbreaking technology.

First in the series, “Xerox ConnectKey: Always There,” is a humorous dramatization of a real-world office scenario in which a ConnectKey MFP helps staff simplify complex scanning workflows.

Whether you are a skilled administrator managing hundreds of devices, or one person managing a single device, Xerox gives you tools anyone can use to implement new workflow processes or other tasks. Onboard tools help you address potential issues, enabling multifunction printers built on ConnectKey to stay more productive, longer. And when help’s needed, speed is the key. That’s why we put Online Support and Embedded Help Videos that anyone can follow right on the front panel for fast assistance.

Our Remote Control Panel feature further reduces support and response times, enabling real-time training and troubleshooting from anywhere so you can resolve issues immediately and eliminate the need to wait for on-site visits. Customizing solutions is made possible by Extensible Interface Platform® (EIP) serverless technology that allows the creation of applications to run on ConnectKey MFPs, without the need for additional IT infrastructure. This allows you to simplify and personalize the usability of your device with a range of capabilities from support applications to scanning.

I encourage you to watch the video and then visit our Xerox ConnectKey site to learn more.

“It’s Time to Take Multifunction Printer Security Seriously”

Submitted by Nathan Van Ness
February 18th, 2013

The title of this post refers to a Forbes.com article, dated Feb. 7, 2013, in which the writer discusses the perils of network printers and MFPs as potential entry points for malicious activities.

To quote the Forbes article: “According to InfoTrends, there are almost 30 million printers and multifunction devices in offices and homes throughout the U.S. and Western Europe, and most are connected to a network. This means they are just as susceptible to malware and hacker attacks as PCs – but for a variety of reasons they are often overlooked by IT professionals and used without proper safeguards by employees.”

The above reinforces the fact that business owners and enterprise IT administrators need to make data security a key consideration when integrating new MFPs with their network infrastructure.

And when you look at how best to ensure your business-critical data stays safeguarded, it’s clearly one of the many important reasons why Xerox MFPs built on ConnectKey™ technology provide an unparalleled advantage.

I encourage you to read the Forbes article to gain a better understanding of the security threats that face owners of improperly protected network printers and MPFs. Then, take some time to understand the many ways Xerox ConnectKey technology is the right choice for businesses looking to simplify the way work gets done.

Visit our Xerox ConnectKey site to learn more, and check out the customer case studies we’ve posted on the Xerox YouTube channel.

Thanks for reading, and keep in mind that your comments and feedback are always appreciated!

Xerox ConnectKey in the News

Submitted by Nathan Van Ness
February 14th, 2013

Since yesterday’s (2/13) announcement of the new Xerox ConnectKey offerings, we’ve seen substantial press coverage. Here are links to some of the most prominent write-ups:

Also, be sure to check out the ConnectKey section of Xerox.com, and our Xerox YouTube channel for extensive information about the ways in which ConnectKey will redefine simplicity for businesses of all sizes in every industry.