the bitglass blog

The cloud access security broker (CASB) market has changed drastically over the last few years. As more and more organizations move to the cloud and make use of cloud applications, they are faced with the reality that their IT departments are ultimately responsible for protecting data at rest in the cloud and on endpoints that have access to that data. Unfortunately, while many cloud apps feature improved infrastructure security and rapid application updates, gaps in native security features still exist. 

As has been widely reported, Verizon is the latest enterprise to be hit with a large-scale data breach. Over 14 million customer records were left exposed due to a misconfiguration in Verizon’s Amazon Web Services (AWS) instance. Among the leaked information were logs containing customer names, cell phone numbers, and account PINs. Had this data fallen into the hands of hackers, even the most security conscious users – those with two-step authentication enabled – could have been bypassed, allowing hackers to hijack a customer's account and phone number.

Cyber attacks on sensitive data have made far too many headlines in the recent weeks. Each attack differs in execution, but one thing is often the same - malware is making its way into the network and it's spreading like wildfire.

Box introduced their new client sync app today called Box Drive. The desktop app will allow enterprise users to access all Box files directly from the desktop, saving time and money. While apps like Box Drive make accessing data easier, they introduce a major means of data leakage if not properly secured. Enterprises using these apps have few means of controlling which users and devices are able to access data. Unmanaged device access in particular poses a major threat to the organization.