January 2017 Patch Tuesday Forecast – Shavlik

Patch_Forecast01

Goodbye 2016; Hello 2017!

We have survived another year and what a year that was.

As we start off 2017, I am sure most of you have already heard about the joining of forces between LANDESK and Heat Software to further the expertise stronghold on security and patching. This marrying of the minds comes just in time for those who have not yet picked a new year’s resolution.  Now is the time to make a resolution to increase the health of your security posture and patch your systems regularly.

Even though there are no known zero days or hints of nasty exploits on the horizon, we all know that it is just a matter of time before someone will find something to hack and expose potential vulnerabilities. So, with that in mind, let’s start the year off with good habits and make sure we are following the steps to better Security Hygiene now that the holiday fun and distractions are behind us.

Steps to Better Security Hygiene

  • Make sure you have sanitized incoming email with junk mail and phishing filters. Remember that user targeted vulnerability is where some of the highest risk lies.
  • Make sure you have sanitized the machines and devices of users who have come into contact with public WiFi while traveling in and out of the office and private secured networks. Since users will likely browse the internet, open email with attachments, and in general be exposed to potential attack vectors daily, it is important to sanitize their machines with good signature, non-signature, and behavioral threat assessments.  Remember that signature based threat assessment alone is not enough anymore.
  • Make sure your systems are frequently patched, both the OS and software, and make use of least privilege rules and proper application control. Remember that preventative security measures can mitigate or eliminate 85% of the threats in today’s market.

Honorable Mentions

Chrome announced at the end of 2016 that beginning in the new year they will be identifying web pages as “Not Secure” if the page includes login or credit card fields AND the page is not served using HTTPS. For additional information on this announcement, see the following article posted on zdnet.com.

http://www.zdnet.com/article/chrome-will-begin-marking-http-pages-as-non-secure/

Your Patch Tuesday Forecast

Based on the trends we saw in 2016, the January 2017 Patch Tuesday will likely include updates for the following:

From Microsoft we are likely looking at around 1-4 installable packages:

  • OS and IE will definitely have multiple updates, but they will come in a single installable package under the new servicing model. Vista would be the only exception to this change as it still receives individual bulletin updates.
  • Office is likely since there were updates consistently pretty much every month in 2016.

From Adobe you can expect 1-3 updates:

  • Adobe typically tries to release Flash Player on Patch Tuesday and has done so pretty consistently all of 2016, so expect that update.
  • Adobe Reader and Acrobat both released an update back in October of 2016 and have been pretty consistently having an update every 2-3 months this year. Those two are a high possibility this month since they did not release last month.

From Chrome you may have 1 update this month:

  • Chrome released a beta version after last Patch Tuesday making it likely there could be an update on or around Patch Tuesday this month.

Total Update Accumulation 3-8 updates for Patch Tuesday next week.

As always, catch our Patch Tuesday blog and commentary next Tuesday and sign up for our Patch Tuesday Webinar next Wednesday, January 11th as we delve deeper into the bulletins and vulnerabilities resolved on Patch Tuesday.

12 Beers of Christmas 2016 Edition

12-Beers-of-Xmas

Happy holiday’s everyone! This marks year three of our annual 12 Beers of Christmas blog post where the team gives you recommendations of their favorite beers from 2016. This is a tradition that actually started from a now nine-year practice of doing a beer exchange in our office instead of cookies or Secret Santa. So for all you beer fans out there, here is the 2016 edition of the Shavlik 12 Beers of Christmas. Enjoy!

Brent, Software Engineer
Beer recommendation: Black Sheep Best Bitter
Style: Bitter
ABV: 3.8%
Description: Brent spent a bit of time across the pond this year after LANDESK acquired AppSense. “It was my nightly beer one trip to England during an AppSense visit. Very solid English bitter that paired well with any of the pub food.”

A well hopped, light golden session bitter with a distinctive, dry, refreshing taste enjoyed through a rich creamy head. Brewed in traditional cast iron and copper vessels using the finest ingredients.

Mark, Software Engineer
Beer Recommendation: Able BLK WLF Stout
Style: Stout
ABV: 3.8
IBU: 32
Description: It is a coffee forward stout with a satisfying finish. The best part is since it as a low ABV at 3.8%, I can have a few without having to rely on my friends to carry me home.

Clear dark brown, large creamy tan head, good retention. Aroma of chocolate, roasted malts, piney hops. The taste is citrus, roasted malts, chocolate. Medium bodied, lingering bitterness.

Neil, Manager, Territory Sales
Beer Recommendation: Weihenstephaner Original
Style: Helles
ABV: 5.1%
IBU: 21
Description: A cheeky little number from the oldest brewery in the world. Not sure if you can get this in the US but the brewery is a 15 minute drive from Munich airport. It is worth the trip!!

A good beer takes its time. The long storage makes our yellow bright lager, “Original”, a flavourful beer enjoyed with fine poured, white foam. With a mild hoppy note and its pleasant fresh spicy taste, it goes very well with salads, poultry, stews or with a hearty snack. Brewed according to our centuries-old brewing tradition on the Weihenstephan hill.

Robert, Senior Product Marketing Manager 
Beer Recommendation: Samuel Adams Nitro White Ale
Style: Witbier
ABV: 5.5%
IBU: 15
Description: From America’s largest Craft Brewer, and from the city (Boston) known for more than just the revolution of craft beer. This beer is smooth as silk, refreshingly cold, and a joy to consume year round. Crisp enough for the Summer, hearty enough to keep you warm in Winter. I enjoyed this guy while watching summer sunsets over Lake Winnipesaukee in NH this past summer.

Brad, Software Engineer
Beer Recommendation: Fitger’s Big Boat Oatmeal Stout
Style: Stout – Oatmeal
ABV: 6.6%
IBU: 45
Description: Good stout, nice chocolate and coffee combination for sipping on MN winter days.  Enough alcohol to keep you warm and toasty on the inside but not stumble out of the bar and die from hypothermia when you slip and fall on the ice.

Simon, Chief Technologist
Beer Recommendation: Peroni Original
Style: Lager – Pale
ABV: 4.7%
Description:  Served at Ultra cold temperature and great for the British summer when we get them. Added benefit is that it doesn’t seem to cause those dreadful headaches I seem to get more of as I get older. The downside is that its currently one of the most expensive you can buy.

Ken, QA Director
Beer recommendation: Surly Gose (pronounced “Go-zuh”)
Style: Kettle Sour Ale
ABV: 5.3%
Description:  Just had this at the brewery during our holiday party.  A great sour beer with a crisp taste with little surprise extra tartness in the end.  Pairs extremely well with co-workers.

The base beer for our series of kettle souref ales, surly Gose had has a light, crisp body with a refreshing tartness and a fleeting saltiness.

Randy, Manager, Software Engineering
Beer Recommendation:
Style: IPA
ABV: 7%
IBU: 74
Description: I’m going to put in my official favorite for the year as Fulton Batch 300.  I’m not sure how widely available it is, but it is a fantastic West Coast style IPA brewed right here in Minneapolis.  Like many great beers, it was originally a limited edition but was so popular they decided to brew it year-round.  It is very hoppy, but has a nice balance and smooth finish.

Batch 300 is built on a base of Weyermann Pilsner malt, and heavily hopped from start to finish with Mosaic, one of our favorite American hop varieties. At 74 IBU and just under 7% ABV, Batch 300 will delight your palate without wearing it out.

Frank, Software Engineer
Beer Recommendation:
Style: Porter – Peanut Butter
ABV: 5.3%
Description: Smells like peanuts, tastes likes peanuts and beer.  When you want a peanut butter sandwich and you also want a beer, but you can’t be bothered to get both: this is the beer for you.  Dark color with a nice full head.  Really good on nitro if you can get it.

Brian, QA Engineer
Beer Recommendation: Ballast Point Grapefruit Sculpin
Style: American IPA
ABV: 7%
Description: Bright, citrusy IPAs are becoming increasingly common and I am not complaining. The Sculpin IPA is hopped at five separate stages and has notes of apricot, peach, mango, and lemon. This award winning IPA is then complimented with grapefruit, creating a flavorful and surprisingly drinkable IPA. A perfect beer to compliment warm summer days or the bitter cold winters of Minnesota.

Derek, Manager, Cloud Operations
Beer Recommendation: Surly Darkness (2016)
Style: Imperial Stout
ABV: 9-12% (Depending on the year)
IBU: 85
Description: Knocks you on your a$$!

This massive Russian Imperial Stout brings waves of flavors; chocolate, cherries, raisins, coffee, and toffee. We add a touch of hops to make this delicious brew even tastier.

Chris, Manager, Product Management
Beer Recommendation: O’Town Triple
Style: Belgian Triple
ABV: 7.4%
IBU: 27
Description: From the fine brewer at Lamada Brewing comes fine example of a Belgian abbey style ale.  Not as dark as a St Bernardus ABT 12 or Chimay Grand Reserve.   Has a fruity aroma and complex flavors with a mix of malty, slightly bitter, and a fruity sweetness.  Actually this is my own home brew and a recipe I am continuing to perfect.  I just brewed batch three this fall and it should be ready to drink sometime around June!  Perfection takes time.  If you really want to try some you will have to come visit me in June.

Honorable Mentions:

Joe, Technical Writer
Beer Recommendation: Grain Belt Nordeast
Style: Amber Lager/Vienna
ABV: 4.7%
Description: For anyone wishing to experience some local Minnesota flavor, I highly recommend Grain Belt Nordeast. It’s a great tasting beer that meets my main requirements: it is reasonably priced and almost always available wherever I go. Unlike most of the other beers you’ll see on this list, there’s no need to take out a loan or drive 100 miles to an obscure liquor store to purchase it. And that makes Nordeast satisfying in a number of different ways.

John, Channel Account Manager
Beer Recommendation: George Killian’s Irish Red
Style: American Amber\Red Lager
ABV: 4.9%
IBU: 14
Description: A full and well-balanced American Amber / Red Lager style beer, and honestly, my go to if I’m hanging out with relatives or friends who don’t really enjoy craft beer and would rather depend on boring domestics.  Like an IPA, has a body more similar to a Scotch ale than a lager or porter, offering a blend of dark fruit, caramel, bread and toast swells in a tight bouquet. While it’s aroma is complex, it’s easy on the tongue.  A malt-forward profile flows across the palate with easy transitions:  Light bready malts pick up hints of toast, and then caramel and dark fruit as it washes back. A quiet bitterness counters the sweetness and guides this straightforward beer to a refreshingly clean finish.  Joyeaux Noël !

The Peanut Gallery (there is always a comedian in the bunch.  This year we have two.) :

Brian, QA Engineer (his first attempt that was rejected)
Beer Recommendation: Camo Black Ice High Gravity Lager
Style: Malt Liquor
ABV: 10.5%
Description: The Camo Beer Company in Lacrosse WI describes this beer as “Ice brewed for extra smooth taste”. This true star of the north is best served in a paper bag. At a size of 24 ounces, an ABV 10.5%, and a price around $2 it is truly a symbol of efficiency. Who needs hydration from six and a half 3.2 beers when you can fit the same punch into one fine paper bag?

Rob, VP Engineering (remember 2014 when he recommended Coors?  Yeah this one is worse)
Beer Recommendation: Hamms
Style: Pale Lager
ABV: 4.7%
Description: If it looks like a Coors, smells like a Coors, and tastes like a Coors then it must be a Coors….except it’s not. It’s Hamm’s American Lager and it doesn’t smell like Coors… in fact, it has no aroma at all.  But for days when you feel like punishing yourself, grab a can… or 48 of these.  This beer is very much a synthesizer of taste and takes on the taste of whatever you are pairing it with making it the perfect beer to pair with any meal that you like the taste of… be warned though, if you are using it to wash the taste of a burnt garlic meatloaf out of your mouth, all you have done is captured and amplified that tragic flavor.  I hear if you mix a little Mio in there though, you can work your way right past that.

Updates for MAC including recent Zero Day – Are you caught up?

updates for macOS Sierra

It’s December; let’s not forget about the MAC community and the recent updates available for the MAC OS.

Since the release of macOS Sierra 10.12.1, Security Update 2016-002 El Capitan, and Security Update 2016-006 Yosemite on the 24th of October 2016, there have been a number of updates to both Apple and 3rd-party products.

Here are some highlights to consider and possible updates you may want to verify you have.

November 30th – Zero Day Critical update CVE-2016-9079 for a use-after-free vulnerability in SVG Animation in Mozilla Firefox, Firefox ESR, and Thunderbird allowing attackers to execute arbitrary malicious code on a target machine.

Although there have only been documented active exploits on computers running Windows, the vulnerability is present in the Mac OS X version of the browser.

November 29th – Update CVE-2016-4780 for a null pointer de-reference issue in macOS Sierra 10.12 Thunderbolt allowing applications to execute arbitrary code with kernel privileges. This update includes improved input validation.

November 27th – 2 Updates for macOS Sierra 10.12:

  • AppleMobileFileIntegrity had a validation issue where a signed executable could substitute code with the same team ID. Update CVE-2016-7584 added additional validation.

  • FontParser had a buffer overflow in the handling of font files where a maliciously crafted font file could lead to arbitrary code execution. Update CVE-2016-4688 added improved bounds checking.

November 14th – Update CVE-2016-7580 for an issue in macOS Sierra 10.12 Mail where a malicious website could cause a denial of service. This update includes improved URL handling.

November 8th – Critical update APSB16-37 for Adobe Flash Player.  This update contains 9 different CVEs to address a vulnerability that could allow malicious native code to execute without a user being aware.

 

Cybersecurity in 2016: Predictions from Elsewhere

Cybersecurity(Own)(4)One of the best things about this time of year is the spate of predictions that accompany the season. Herewith, a look at some of the more interesting security-related predictions from various IT and security industry observers.

Forrester Research “is one of the most influential research and advisory firms in the world”—according to the company’s website. Hard to argue. On Nov. 30, 2015, Health Data Management published “5 Cyber Security Predictions for 2016,” a summary of predictions from Forrester. Here’s what Forrester predicts, according to that article.

  • We’ll see ransomware for a medical device or wearable
  • The U.S. Government will experience another significant breach
  • Security and risk pros will increase spending on prevention by five to 10 Percent
  • Defense contractors will fail to woo private industry with “military grade” security
  • HR departments will offer identity and credit protection as an employee benefit

On Dec. 15, 2015, Network World published “A Few Cybersecurity Predictions for 2016,” an article by Jon Oltsik, principal analyst at Enterprise Strategy Group (ESG). ESG is a firm with “a 360o perspective” and “remarkably detailed, nuanced views of technologies, industries, and markets”—according to the company’s website. Herewith, a summary of Mr. Oltsik’s predictions from that article.

  • Greater focus on cyber supply chain security
  • The consumerization of authentication
  • Cyber insurance continues to boom
  • A rise in ransomware

A wide range of predictions can be found in “The 2016 Websense Cybersecurity Predictions Report.” The report is produced by Raytheon|Websense Security Labs, part of a joint venture that combines Websense with Raytheon Cyber Products. The venture “brings together researchers, engineers and thought leaders from around the world to discover, investigate, report and – ultimately – protect our customers from sophisticated, evasive and evolving Web- and email-based threats,” its website says. The predictions from its report appear below.

  • The U.S. elections cycle will drive significant themed attacks
  • Mobile wallets and new payment technologies will introduce additional opportunities for credit card theft and fraud
  • The addition of the gTLD [generic top-level domains] system will provide new opportunities for attackers
  • Cybersecurity insurers will create a more definitive actuarial model of risk – changing how security is defined and implemented
  • DTP [data theft protection] adoption will dramatically increase in more mainstream companies
  • Forgotten ongoing maintenance will become a major problem for defenders [of IT security] as maintenance costs rise, manageability falls and manpower is limited
  • The Internet Of Things will help (and hurt) us all
  • Societal views of privacy will evolve, with great impact to defenders

Perhaps some of the most interesting predictions for 2016 and beyond can be found in “McAfee Labs Report 2016 Threats Predictions.” McAfee Labs, now part of Intel Security, “is one of the world’s leading sources for threat research, threat intelligence, and cybersecurity thought leadership,” according to the report’s introduction. The report begins with a five-year look into the future, created by 21 of Intel Security’s thought leaders. Here’s a summary of what they predict for the next five years.

  • The cyberattack surface will continue to grow, thanks to continuing explosive growth in users, devices, connections, data and network traffic
  • Attacks and defenses will continue and increase a shift in focus, away from systems and applications and toward firmware and chips themselves
  • Attacks will continue to become more and more difficult to detect
  • Virtualization will present more and different cybersecurity threats and opportunities, especially as network function virtualization (NFV) grows in popularity
  • New device types, including wearables and those connected to the Internet of Things (IoT), will challenge security efforts, and cyber threats will continue to evolve
  • IoT security standards will evolve and improve
  • The growing value of personal data will lead to more sophisticated thieves and markets, and more security and privacy legislation.
  • The security industry will fight back, with new and evolving tools including behavioral analytics, shared threat intelligence, cloud-integrated security and more automated detection and correction.

The range of these predictions and the common elements that link many of them provide valuable guidance and validation to any of you who are seeking to improve security at your enterprise. And of course, we at Shavlik have our own predictions to add to the mix, as well as a review of how well we did with our end-of-2014 predictions. You can download these here. We hope you’ll find all of these predictions, from Shavlik and elsewhere, helpful and inspirational. Here’s to a happy, productive, profitable and secure 2016 for you and your enterprise.

Shavlik’s 12 Beers of Christmas 2015 Edition

12-Beers-of-Xmas

Happy holiday’s everyone! Last year, we did our first 12 Beers of Christmas blog post where the team gave some recommendations of their favorite beers. This is a tradition that actually started from an eight-year practice of doing a beer exchange in our office instead of cookies or Secret Santa. So for all you beer fans out there, here is the 2015 edition of the Shavlik 12 Beers of Christmas. Enjoy!

Randy, Manager, Software Engineering
Mark, Software Engineer
Beer recommendation: Surly Todd – The Axe Man
Style: IPA
ABV: 7.2%
IBU: 100
Description: Todd – The Axe Man is a recipe created by Amager Bryghus in Denmark. The recipe was created for Todd Haug of Surly Brewing. A potent IPA loaded with fresh American aroma hops on a base of rich Golden Promise malt, Surly’s signature malt. Randy says that if you like IPAs, this one is a no brainer. Mark finds it a perfect substitute for Pliny the Elder, which is hard to come by in Minnesota.

So Todd – The Axe Man quickly became an office wide favorite, but since this is supposed to be the “12 beers of Christmas” and not the “1 beer that 12 people liked this Christmas”, I have asked the rest of the team to go down to their next picks.

Matt, Software Engineer
Beer recommendation: Toppling Goliath Pseudo Sue
Style: American Pale Ale
ABV: 7%
IBU: 50
Description: Due to the lack of availability of Pliny, and the rise in popularity of Todd – The Axe Man and by such its growing lack of availability, Matt finds Pseudo Sue the next best thing. This single hop ale showcases the Citra hop. Named for the largest T-rex fossil ever discovered, she roars with ferocious aromas of grapefruit, citrus, mango and evergreen. Delicate in body with a mild bite in the finish.

Brent, Software Engineer
Beer recommendation: Greenbush Unicorn Killer (He would have picked Todd, but Randy and Mark had already beat him to it.)
Style: Spice Beer\Pumpkin Ale
ABV: 7.4%
Description: While Brent is not normally a fan of spice beer, hey says this one is perfectly balanced. Notes of caramel, bread, cinnamon, and clove make this heavier version of the seasonal pumpkin ale a good one.

Travis, Product Support Engineer
Beer recommendation: McMenamins Hammerhead Ale
Style: American Pale Ale
ABV: 6%
Description: Travis is part of our support org out of Salt Lake City. This rich chestnut colored gem is a model of harmony between hops and malted barley. Hammerhead’s signature Cascade hop nose and intense hopped flavor blend nicely with the caramel tones from the crystal malt.

Geoffrey, Technical Support Engineer
Beer recommendation: Wasatch Brewing Ghostrider
Style: White IPA
ABV: 6%
Description: Also with our Salt Lake City team, Geoffrey recommends this as a “gateway” to the wide world of IPAs.  It is smooth and flavorful and light and perfect for any meal pairing. Plus, it goes to show that Utahn’s can make good beer. In the three years I have been with LANDESK, I have seen quite a change in SLC. The beer scene has improved greatly and Wasatch is one of the big contributors to that improvement.

Brian, QA Engineer
Beer recommendation: Dogfish Head 120 Minute IPA (not to be confused with 120 Minute Pineapple)
Style: Imperial IPA
ABV: 18%
IBU: 120 (That is a ton of hops)
Description: Now Brian is in QA, so that should be noted here. Quality Assurance is approving this beer. He says “it’s like getting voluntarily smacked in the face with a bag of hops.” Too extreme to be called beer? Brewed to a colossal 45°P, boiled for a full two hours while being continually hopped with high alpha American hops, dry-hopped every day in the fermenter for a month, and aged for a month on whole leaf hops, 120 Minute IPA is by far the strongest IPA ever brewed. And at 21% ABV and 120 IBU’s, you can see why we are calling this the Holy Grail for Hopheads.

Nick, Software Engineer
Beer recommendation: Hacker-Pschorr Oktoberfest Märzen
Style: Oktoberfest/ Märzen
ABV: 5.8%
Description: This is a decedent of the original Märzen style beer. Bavarian barley slow roasted, caramelized to a rich, red amber color combined with the purest spring waters from the Alps, exclusive yeast and the finest Hallertau hops.

Neil, Territory Sales Manager
Beer recommendation: Andechser Bergbock Hell
Style: Heller Bock
ABV: 7%
Description: From one of our Sales reps across the pond.  He says this was a staple when he lived in Germany.  He also recommends the Dunkel from Andechser.  Aromatic and mild.

Tyler, Software Engineer
Beer recommendation: New Glarus Scream
Style: Imperial IPA
ABV: 9%
IBU: 85
Description: Scream boasts an inspired 85 IBUs that reverberate cleanly though this IIPA. New Glarus Brewery grown estate hops join other Wisconsin grown hops to dominate this brew from Kettle Boil to Dry Hopping. You hold a deceptively seductive Original Gravity of 20.9 degrees Plato following the always 100% naturally bottle conditioned fermentation. Luscious Wisconsin grown and malted barley along with English Maris Otter malt is the bold heart of this lustful sensory enchantment. Surrender is inevitable so enjoy today.

Ben, Territory Sales Representative
Beer recommendation: Heritage American Expedition
Style: Wheat Ale
ABV: 4.5%
IBU: 10
Description: a light bodied American wheat ale. Bathed in farmers honey and spiced with ginger, it will give any traveler the fortitude and perseverance to carry on.

Bob, Channel Account Manager
Beer recommendation: Southern Tier 2xStout
Style: Sweet Stout
ABV: 7.5%
Description: Double Milk Stout
“2 varieties of hops & 3 types of malts”
Milk stout, also called ‘cream’ or ‘sweet’ stout, is a stout containing lactose, a sugar derived from milk. Because lactose is unfermentable by beer yeast, it adds sweetness and body to the finished beer. Milk stouts have been claimed to be nutritious, and were marketed as such in the early 1900s with claims that would make the FDA wince. One ad read, “Ideal for nursing mothers, for the healthy, for the invalid, and for the worker.” Surely! Of course, we couldn’t stop at a traditional milk stout. Ours is a double, an addition to our 2X line, and at 7.5% abv is every bit as delicious as it sounds. To your health!

Byron, Systems Administrator
Beer recommendation: Left Hand Milk Stout Nitro
Style: Sweet Stout
ABV: 6%
Description: This English style of beer, also known as Sweet Stout or Cream Stout, first appeared in London in the late 1800’s. The early brewers touted the health benefits of the milk sugar in this beer which today relates mainly to the increased amount of calories (no real health benefits…sorry). The milk sugar adds a well-rounded sweetness to this dark beer and makes it an outstanding, year ‘round stout.

And because I don’t want to be left out you get a bonus 13th Beer of Christmas!

Chris, Product Manager
Beer recommendation: Samuel Smiths Yorkshire Stingo
Style: English Strong Ale
ABV: 8%
Description: I found this in London at a pub called the Chandos.  Since then I found this is distributed in the US which is AWESOME! Bottle conditioned only. Some of the oak casks at Samuel Smith’s date back more than a century with the individual oak staves being replaced by the Old Brewery coopers over the years. Gradually the casks soak in more & more of the character of the ale fermented in stone Yorkshire squares. Yorkshire Stingo is aged for at least a year, matured in these well-used oak casks in the brewery’s underground cellars deriving fruit, raisin, treacle toffee, Christmas pudding and slight oaky flavors, before being further naturally conditioned in bottle.

Whatever holiday you may be celebrating, may it be filled with joy, family, great food, and great beer.

From all of us at Shavlik, have a happy holiday season!

Why you should #fearthetoaster!

Back to work after a long holiday weekend! I thought I would start the week off with a recap of LANDESK Interchange 2015. The show was great! The very first keynote showed off some of the new workspaces which bring together LANDESK Systems Management and Service Desk features for the user that will make life easier. The ability to use your phone to take an image of on-screen errors and have a solution presented to you, without having to contact IT directly, was pretty cool. The new security workspace was also very interesting to see, but the highlight of the keynotes for me was on day two and three.

The keynote on day two focused on Security. Rob Juncker, Tom Davis, and Steve Morton talked about how more devices are being connected to the internet every day. The Internet of Things is bringing us more innovative life experiences than ever, but with this more connected world we have larger concerns. Self driving cars, internet connected toasters, voice activated TVs (which vendor admit are spying on you), and much more are getting connected every day. Rob then scared everyone by talking about that internet connected toaster and how it may be used as an attack to potentially burn down a house. Scary realization.

The final day of the event, we had a guest keynote speaker, Marc Goodman, author of Future Crimes. Marc hit on all the topics from they keynote the day before and really opened some eyes. Marc talked about the exponential growth of technology and the proliferation of internet connected devices. And while really cool things may come of these trends, ultimately, it is leading us to a world where crime knows no borders, no boundaries, and becomes less and less personal. A good example of this is the hacking ring which reportedly has stolen up to $1 billion from banks globally. These are not street thugs walking into banks with masks on, but cybercriminals with the skills to target more than 100 banks in 30 countries.

Marc talked about the risks the future brings if we are not diligent about security. Risks like exploiting vulnerabilities in a car and he even went as far as to share this photo in reference to the previous day’s keynote conversations around toasters #fearthetoaster.

killertoaster

 

While no toaster exploits have occurred yet, the message was clear. In a future where more of our world will be connected, more of that world will be exposed to risks. Marc’s message was about awareness. We can do great things if we work together. If companies do their part in securing the customer and personal data they collect, and if the new innovators creating the next connected device do so with security in mind, we can mitigate these risks.

Check out Marc’s Update Protocol on his website and his book Future Crimes.  There are some tips here that will help you protect yourself and your company.

Happy National Beer Day!

For those of you who are followers of our team, you know that we here at Shavlik enjoy a good beer. Today we are going to go off topic and focus on National Beer Day. I have been working on a house project that is nearly complete, but didn’t make it in time for National Beer Day. I am changing over from bottling my own home brew to kegging. I have almost everything ready. Even got the first beer I plan to keg already started (Belgian Tripel). The kegerator itself is, unfortunately, on back order until end of April. **Sigh**

Kegerator

Beyond Patch: Shavlik Protect Anti-Virus

Having effective patch management and anti-virus practices are two of the most basic building blocks of network security.

However, this often requires separate software solutions that come with separate agents and most importantly, separate costs. With Shavlik Protect’s antivirus, you can bring together what all too often is separate:  patch and A/V.

Shavlik’s anti-virus solution provides:

  • Access to patch and antivirus capabilities as well as reporting from a single console
  • A single-agent for managing patch, anti-virus, and anti-spyware policies
  • The ThreatTrack Security VIPRE engine

Check out this video where Shavlik Product Evangelist John Rush walks you through the anti-virus capabilities within Shavlik Protect. For more information, please contact us at sales@shavlik.com.

Did you know … ?

Did you know?

Did you know?

Here it is my turn to contribute to the Shavlik blog, and I am stricken with “bloggers’ block.” As I try to think of insightful things to say, (those who know me know I rarely say insightful things), nothing comes to mind but questions.

So in the spirit of acceptance of things that can’t be changed, let’s just go with the questions gig.

Did you know…?

  • Shavlik is hosting two webinars this week. “Getting Started with Shavlik Patch” will help new or trial users of Shavlik Patch get up and running and optimize their third-party patching process within SCCM. “Simplified Third-Party Patching for Microsoft System Center” will explain how Shavlik can help you select and deploy third-party patches all from within SCCM. Getting Started with Shavlik Patch
    Wednesday, June 18, 2014 10:00am CDT
    Register Now

Shavlik Technical Support from Start to Finish

We recently caught up with the Shavlik technical support team to learn more about its role in solving customer issues with Shavlik products and services. The Backline Support team, which includes Chase Norton, Adam Gindt, and Charles Winning, has built a strong support staff as well as a lively online community of Shavlik users, who help each other through peer-to-peer questions and use cases.

Q: Can you tell us more about how you help customers find the support they need?