Tenable Blog

This year, Tenable’s 2016 Internship Program hosted 26 interns in 8 departments for 9 weeks. During this program, interns gained hands-on professional experience, networking opportunities, and valuable mentoring relationships. In addition, Tenable treated our interns to lunch-and-learns, bowling, Star Trek movie night, and an Oriole’s game.

Ethan joined Tenable as a Security Research Intern on our SecurityCenter™ team. He is a rising senior, majoring in Computer Engineering at University of Maryland.

Shadow IT is widely recognized in the U.S. as a growing security concern, but does the same hold true in other countries? The short answer is yes. According to research from Tenable Network Security, more than half of IT decision makers in UK and German organisations acknowledge shadow IT as a major problem, and the majority of respondents (88%) feel shadow IT makes them more vulnerable to cyberattacks.

Shadow IT is a major problem

In Season 2 Episode 6 of Mr. Robot, Darlene and Angela continue with infiltration of the FBI and E-Corp, while Elliot is otherwise detained. Because Angela must plant the femtocell in E-Corp, members of F-Society help her learn the commands that are needed. They also offer an alternative called a “Rubber Ducky,” a USB device that registers itself as a Human Interface Device (HID) or keyboard. Since all systems trust HIDs, they are able to bypass policies that don’t allow USB storage devices. However, the infiltration plan is executed as planned with the femtocell device.

Moving beyond periodic certification of information systems to the Risk Management Framework requires standardizing and automating the assessment process.

Making decisions based on outdated information is a recipe for failure. No matter how good the data at the time it is collected, if it cannot be used quickly it loses its value for making critical cybersecurity decisions.