Home / About / Media Coverage

ComputerWorld

Why 2012 is the year of Public Key Infrastructure

“Within a PKI, a certificate authority assigns each system or user a unique identity – a digital certificate – that allows the certificate holder to work within the protected environment. This allows organisations to let customers, partners, and employees authenticate to systems and users. I would argue, perhaps controversially, that PKI delivers a virtually seamless experience for users while providing trusted security. And it is the word trusted that many of you will scoff at.”
Read More

May 12th, 2012
 

Softpedia

Expert: Firms’ Inability to Fend Off MitM Attacks Allows Crooks to Steal Billions

“‘Man-in-the-middle attacks have drained billions of dollars from enterprises and customer accounts, have inflicted unquantifiable levels of reputational damage on victim organizations, and weakened trust levels across the Web,’ explains Jeff Hudson, CEO of Venafi, an organization that provides encryption management solutions. ’Organizations that leverage the Web and require secure customer and partner transactions should ensure that they have strong SSL connections in place, an accurate and thorough inventory of all digital certificates deployed, well-managed and automated security processes, and a remediation plan that can provide fast recovery in case of compromise.’”
Read More

May 10th, 2012
 

Dark Reading

FBI Warns Travelers Using Hotel Networks About New Attack

“The FBI recommends checking the author or digital certificate of any prompted update to see whether it corresponds to the software vendor, as this might reveal whether it is an attempted attack. Jeff Hudson, CEO of key management vendor Venafi, calls this a ‘wake-up call’ for IT pros who manage their organizations’ vast certificate and software update programs. ‘[IT pros] need to understand that end users are typically the weakest link in the security chain,’ he says. ‘To compensate, they need to adopt automated security processes that eliminate the unquantifiable risk that arises from human error and misunderstanding. Organizations that automate and centrally manage security and compliance processes reduce their risk of a data breach significantly.’”
Read More

May 10th, 2012
 

Vigilance Security Magazine

Venafi says that 150,000 euro bank electronic ransom case is probably the tip of the iceberg

“According to the Enterprise Key and Certificate Management (EKCM) solutions specialist, anecdotal reports have been circulating in banking circles for several years of cybercriminals extorting money from financial companies whose IT systems have been compromised – typically the result of poor access controls and IT management worst practices. ‘The problem with these reports is that the institutions – obviously fearful of brand reputational damage – have simply paid up the money and kept quiet on what has happened. This case appears to be one of the rare occasions when the details have been made public by the hacktivist group concerned,’ said Jeff Hudson, Venafi CEO.”
Read More

May 4th, 2012
 

InformationWeek

Venafi Encryption Director 6 Selected as CODiE Awards Finalist for Best Security Solution

“Best Security Solution recognizes the most innovative security solutions designed to protect enterprise IT systems and networks and to achieve strong audit and compliance postures. SIIA judges singled out Director 6 as a finalist due to its ability to provide out-of-the-box automated management capabilities for the widest range of digital certificate and encryption key technologies used by today’s enterprises, including symmetric keys, SSH keys, asymmetric keys and digital certificates. With Director 6, organizations can scale encryption deployments and management functionality across the enterprise as the need to protect more data and authenticate more systems, applications and devices grows.”
Read More

April 24th, 2012
 

Vigilance Security Magazine

Venafi says lessons need to be learned in the wake of 1.5m cardholder account credentials breach in Atlanta

“‘The inescapable conclusion is that these providers will continue to be compromised. The breaches cannot be stopped. What matters now, however, is that the industry learns from its experiences and both recognises that breaches will occur and takes extra security steps to help prevent it happening again,’ said Jeff Hudson, CEO of Venafi. ‘Part of those steps will be to increase the range and effectiveness of the security to prevent a breach, as well as developing better procedures – especially in communications terms – to ensure that end user clients are kept informed of what has happened and that they do not lose confidence in the company and processes concerned.’”
Read More

April 11th, 2012
 

IT Business Edge

Critical Systems at Risk Due to Poor Key and Certificate Management

“Deploying encryption solutions without maintaining comprehensive certificate and key inventories is a worst practice that jeopardizes vital business systems and processes, and exposes organizations to substantial risk of security and compliance incidents. ‘The importance of sound certificate management practices is highlighted by the repeated certificate authority breaches over the past year,’ said Michael Osterman, president of Osterman Research. ‘We were startled by the lack of urgency regarding the issue. When considered in tandem with the high-value target CAs represent to hackers, we can predict more CA breaches and more security threats than we saw in 2011.’”
Read More

April 10th, 2012
 

Network Computing

Venafi Encryption Director :: Certificate Manager™ Product Review

“Venafi Encryption Director: Certificate Manager™ is the only solution available today that is capable of automating and managing the entire process of digital certificate discovery, provisioning, validation and monitoring across the enterprise. The software is very simple to deploy, and this latest version adds many valuable new features including AD integration and options to manually revoke certificates. It provides a complete solution for certificate encryption management, allowing enterprises to audit and enforce security policy compliance.”
Read More

April 9th, 2012
 

Softpedia

Softpedia Exclusive Interview: Venafi CEO on Cybercrime and Digital Certificates

“Last week Kaspersky experts came across a piece of malware that was signed with a stolen digital certificate in order to avoid detection. If the security experts concentrated on the malware itself, other companies such as Venafi focused their attention more on the stolen certificate. ‘The Trojan-Dropper.Win32.Mediyes malware is a wolf in sheep’s clothing. In this case the clothing has the VeriSign brand sewn in the label,’ Jeff Hudson, CEO of Venafi, said at the time. ’Kaspersky’s researcher has done an excellent job of finding the wolf, but more needs to be said about the primary culprit — the stolen digital certificate.’”
Read More

March 25th, 2012
 

Yahoo! Finance

Venafi Encryption Director 6 Receives Security Industry’s Prestigious Global Excellence Award for Risk Management

“‘Continued attacks underscore the need for accurate and up-to-date digital certificate and key inventories that allow information security teams to respond to vulnerabilities and compromises immediately,’ said Gregory Webb, Venafi VP of Marketing. ‘This industry honor further validates the critical need for automated key and certificate management that only Director 6 can provide. We are delighted by Info Security Products Guide’s recognition of Director 6 as the best-in-class enterprise risk management solution.’”
Read More

March 21st, 2012