Could a breach like this have occurred even without Plex being installed? Absolutely! But could it have at least raised the bar a little if it weren't? Also yes. There was a more naieve time, perhaps, when BYOD seemed like a good idea - a way to cut capital expenditure, make life easier for employees, enabled road warriors etc, but with the modern threat landscape I'm dubious, at best, that the benefits outweigh the potential costs. but, should a personal workstation even have been allowed access to LastPass' production network? BYOD has always made me nervous for precisely this reason - corporate workstations can be tightly controlled (admittedly frustratingly so, sometimes, as the end user!) while end user devices can have all manner of unapproved, potentially buggy or even outright malicious software installed on them and then connected to your corporate network. There was more than adequate time for even the most lackadasical user to update their media server software and head this whole problem off at the pass. However, both add-ons and a LastPass Business account can be bundled together for just $9 per user/month.One last thing to point out regarding this chain of events - the Plex vulnerability was disclosed in 2020, two years before this all unfolded.
LastPass Business including Freemium SSO and MFA is available at $6 per user/ month while the Advanced MFA add-on costs an additional $3 per user/month and the Advanced SSO add-on is $2 per user/month. With this feature, employees get access to a premium LastPass account for personal use as well as up to five accounts for those closest to them so organizations can encourage good password habits (opens in new tab) beyond the workplace. However, as a company's security needs change, advanced functionality can be added through LastPass's SSO and MFA add-on offerings.įinally, LastPass Business also now includes Families as a Benefit at no additional cost. This means that employees now have a seamless login experience whether they're accessing a traditional web login or an SSO-enabled cloud app (opens in new tab).īusinesses can start with a base business password management package from LastPass which includes SSO for up to three cloud apps and multi-factor authentication ( MFA (opens in new tab)) at no additional cost. LastPass Business customers can now access the company's single-sign-on ( SSO (opens in new tab)) app in the LastPass browser extension and password vault to make it simpler to access their key applications.
0 kommentar(er)
