Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cloud Security

eEye Digital Security Releases Free Configuration Check Tool

eEye Digital Security released a new piece of freeware today for checking system configurations in the name of security.

The tool was released on the back of research by eEye about best practices. Among the company’s findings, disabling WebDAV and Microsoft Office document converters prevented 20 percent of Microsoft vulnerabilities in 2011. In addition, eEye also found that users should also limit administrative privileges, use proxy servers, encrypt traffic on VLANs and IPsec and deny access to Windows subsystems.

eEye Digital Security released a new piece of freeware today for checking system configurations in the name of security.

The tool was released on the back of research by eEye about best practices. Among the company’s findings, disabling WebDAV and Microsoft Office document converters prevented 20 percent of Microsoft vulnerabilities in 2011. In addition, eEye also found that users should also limit administrative privileges, use proxy servers, encrypt traffic on VLANs and IPsec and deny access to Windows subsystems.

According to eEye, the tool:

• Offers a simple pass/fail and informational status check to compare how the user’s company rates against recommended configurations

• Tests how the local system operating system is configured and how the network is architected, identifying potential problem areas

• Provides information on potential backdoors and other areas of concern related to Advanced Persistent Threats (APT)

• Shows how much of the user’s processes and code are signed, allowing users to determine what is valid and what is not

“eEye prides itself on helping our customers and the security community at large by providing security in context,” said Marc Maiffret, eEye cofounder and CTO, in a statement. “With this research and the related free tool, organizations large and small can now quickly test individual systems, gold disks and standard corporate images for some of the most impactful configuration settings from a vulnerability and exploitation perspective.”

Written By

Click to comment

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Network Security

NSA publishes guidance to help system administrators identify and mitigate cyber risks associated with transitioning to IPv6.

Cyberwarfare

Websites of German airports, administration bodies and banks were hit by DDoS attacks attributed to Russian hacker group Killnet

Mobile & Wireless

Technical details published for an Arm Mali GPU flaw leading to arbitrary kernel code execution and root on Pixel 6.

Mobile & Wireless

Apple rolled out iOS 16.3 and macOS Ventura 13.2 to cover serious security vulnerabilities.

Cloud Security

VMware vRealize Log Insight vulnerability allows an unauthenticated attacker to take full control of a target system.

Mobile & Wireless

Apple’s iOS 12.5.7 update patches CVE-2022-42856, an actively exploited vulnerability, in old iPhones and iPads.

Identity & Access

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the...