CyberArk Workforce Password Management Delivers Advanced Protections for Enterprise Users

-

New Capabilities for Securing Access to High-Risk, High-Value Business Applications Help Organizations Improve Security and Reduce Risk

NEWTON, Mass. and PETACH TIVKA, Israel – March 14, 2023 – CyberArk (NASDAQ: CYBR), the global leader in Identity Security, announced enhancements to Workforce Password Management. CyberArk’s cloud-based enterprise password management solution enables organizations to securely capture, store and manage password-based applications and other secrets. New capabilities provide administrators with greater flexibility and control to reduce risk and improve security for web applications.

Unlike personal password managers, Workforce Password Management is designed for business environments and provides the privacy, availability and security enterprises demand, including support for modern passwordless authentication controls and corporate directories. New features include:

  • Application Access Controls Based on Usernames: Administrators can now prevent end users from adding sensitive and privileged accounts like *root*, *admin* and *dba* to the Workforce Password Management vault. This provides administrators greater control over the types of credentials stored by end users and can reduce the risk of highly privileged accounts being added, accessed and shared.
  • Support for CAPTCHA-Enabled Web Apps: New enhancements allow end users to seamlessly access websites that require CAPTCHA at login and solve third party-enforced CAPTCHA challenges during the login process.
  • Enhanced Reporting for User-Added Applications: Out-of-the-box reports provide detailed information about all user-added applications, enabling Workforce Password Management administrators to perform periodic audits of user-added apps and enforce established IT security guidelines.
Workorce Password Management Schema

 Workorce Password Management Schema

In addition, Workforce Password Management can be used in conjunction with CyberArk Secure Web Sessions to further strengthen access to sensitive applications. With the newest release, Secure Web Sessions features an additional layer of protection called Session Control. Session Control allows administrators to define notification and enforcement rules for specific text fields within business apps that are accessed with credentials stored in Workforce Password Management. For instance, administrators can create a rule to prevent users from executing funds transfers that exceed a pre-set threshold within their corporate banking app and notify the IT security team of the attempt.

Pacific Dental Services, one of the leading dental support organizations in the United States, recently implemented Workforce Password Management as part of a business advancement initiative to improve access to online services and resources to its supported practices. Using the CyberArk solution, Pacific Dental Services replaced its legacy approaches to password management, integrated with its single sign-on service, and helped users gain instant access to all the web applications they are entitled to use while providing the ability to securely share passwords across internal teams. “Knowing I can manage privileges and passwords and do so at scale without impacting the business is one of the biggest benefits I get from CyberArk,” said Nemi George, vice president, information security, Pacific Dental Services.

“Traditional password managers typically lack controls and functionalities that enterprises need to secure end-user credentials, which are constantly targeted by attackers,” said Gil Rapaport, general manager, access management at CyberArk. “Password management must be dynamic to evolve with attacker innovation. We are continuously investing in new features and functionalities for Workforce Password Management to deliver greater usability, security and control for all users within an organization – from developers and business users to IT administrators.”

CyberArk applies intelligent privilege controls to all identities – human and machine – with continuous threat detection and prevention across the entire identity lifecycle. With the CyberArk Identity Security Platform, organizations can enable Zero Trust and least privilege with complete visibility, ensuring that every identity can securely access any resource, located anywhere, from everywhere.

Availability

These enhancements are part of the CyberArk Identity 23.3 release. CyberArk Workforce Password Management is available as a standalone solution starting at $5 per user per month or as part of other CyberArk Identity Security Platform bundled solutions. For more details, visit  https://www.cyberark.com/products/workforce-password-management/

Additional Resources: 

  • Video – Solutions Demo: CyberArk Workforce Password Management
  • Case Study – Pacific Dental Services Secures Access to Clinical Resources for Over 900 Dental Practices
  • On-Demand Webinar – Manage Workforce Passwords Seamlessly Across the Enterprise



A.L

Comments

Post a Comment

Popular posts from this blog

CISA and ENISA enhance their Cooperation

-
Image
  The European Union Agency for Cybersecurity (ENISA) has signed a Working Arrangement with the Cybersecurity and Infrastructure Security Agency (CISA) of the US, in the areas of capacity-building, best practices exchange and boosting situational awareness. Geopolitics have shaped the cyber threat landscape, bringing like-minded partners closer together in the wake of common cyber challenges and advances in digital technologies. Today at the EU-US Cyber Dialogue, ENISA and CISA announced the signing of their Working Arrangement as an important milestone in the overall cooperation between the United States and the European Union in the field of cybersecurity, also following the Joint Statement of European Commissioner Thierry Breton and U.S. Secretary for Homeland Security Alejandro Mayorkas of January 2023. ENISA’s International Strategy directs the Agency to be selective in engaging with international partners and to limit its overall approach in international cooperation to those...
Read more

Top Five Most Exploited Vulnerabilities in January 2024

-
Image
In January 2024, cybersecurity faced a remarkable surge in threats, with a focus on exploiting vulnerabilities in technologies from leading vendors. This spike in cyber attacks highlighted the urgent necessity for robust security posture and swift responses to mitigate these vulnerabilities.  Below is an in-depth analysis of the most critical vulnerabilities targeted during January. CVE-2023-46805 and CVE-2024-21887:   CISA Warns Against Ivanti Zero-Day Vulnerabilities On January 19, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) issued an alert regarding two critical zero-day vulnerabilities discovered in Ivanti products:  CVE-2023-46805 and  CVE-2024-21887.  Assigned CVSS scores of 8.2 (High) and 9.1 (Critical), these vulnerabilities underscore a significant risk to cybersecurity, marked by their capability for arbitrary command execution. This prompted an emergency directive for immediate mitigation within federal agencies, highlighting the...
Read more

SmartScreen Vulnerability: CVE-2024-21412 Facts and Fixes

-
Image
On Feb. 13, 2024, Microsoft issued a  patch  for CVE-2024-21412, a  Microsoft Defender SmartScreen  vulnerability revolving around internet shortcuts. Previously, we discovered that an advanced persistent threat (APT) group we track under the name Water Hydra has been exploiting CVE-2024-21412 in a sophisticated campaign targeting financial market traders, allowing the group to bypass Microsoft Defender SmartScreen and infect its victims with the DarkMe remote access trojan (RAT). Threat actors are constantly finding new ways of identifying and exploiting gaps to bypass security measures. We found that the bypass of CVE-2023-36025 (a previously patched SmartScreen vulnerability) led to the discovery and exploitation of CVE-2024-21412. This highlights how threat actors can circumvent patches by identifying new vectors of attack around a patched software component. It is important that organizations are able to identify and mitigate vulnerabilities, especiall...
Read more