{"id":11631,"date":"2022-08-26T07:00:00","date_gmt":"2022-08-26T15:00:00","guid":{"rendered":"https:\/\/formtek.com\/blog\/?p=11631"},"modified":"2021-10-18T17:42:01","modified_gmt":"2021-10-19T01:42:01","slug":"storage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/storage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets\/","title":{"rendered":"Storage: Misconfigurations and Vulnerabilities Make Storage and Backup Environments Easy Hacking Targets"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Enterprise IT storage and backup environments are lagging considerably behind application and networking security.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.continuitysoftware.com\/pressreleases\/industry-first-research-from-continuity-reveals-enterprise-storage-security-is-significantly-lagging-behind-compute-and-network-security\/\" data-type=\"URL\" data-id=\"https:\/\/www.continuitysoftware.com\/pressreleases\/industry-first-research-from-continuity-reveals-enterprise-storage-security-is-significantly-lagging-behind-compute-and-network-security\/\">A 2021 study by Continuity Soft<\/a>ware analyzed data from 400 different types of enterprise storage devices obtained from customers in banking, financial services, healthcare, and elsewhere.  The devices included storage device top-name vendors like Cisco, Dell EMC, hitachi, IBM, and Netapp.   The analysis identified more than 6300 different vulnerability and misconfiguration problems. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.linkedin.com\/in\/hecht\/?originalSubdomain=il\" data-type=\"URL\" data-id=\"https:\/\/www.linkedin.com\/in\/hecht\/?originalSubdomain=il\">Gil Hecht<\/a>, Continuity Software CEO, <a href=\"https:\/\/www.continuitysoftware.com\/pressreleases\/industry-first-research-from-continuity-reveals-enterprise-storage-security-is-significantly-lagging-behind-compute-and-network-security\/\" data-type=\"URL\" data-id=\"https:\/\/www.continuitysoftware.com\/pressreleases\/industry-first-research-from-continuity-reveals-enterprise-storage-security-is-significantly-lagging-behind-compute-and-network-security\/\">said that<\/a> &#8220;of the three main IT infrastructure categories \u2014 compute, network, and storage \u2014 the latter often holds the greatest value, from both security and business perspectives. Security vulnerabilities and misconfigurations of storage devices present a significant threat, especially as ransomware attacks have taken hold of businesses over the past few years. Yet based on our analysis, the security posture of most enterprise storage systems is strikingly weak. Organizations must act immediately to better protect their storage \u2013 as well as backup systems \u2013 to ensure their data is secure against ransomware and other cyberattacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.linkedin.com\/in\/doron-pinhas-697603\/?originalSubdomain=il\" data-type=\"URL\" data-id=\"https:\/\/www.linkedin.com\/in\/doron-pinhas-697603\/?originalSubdomain=il\">Doron Pinhas<\/a>, CTO at Continuity, <a href=\"https:\/\/www.darkreading.com\/vulnerabilities-threats\/enterprise-storage-environments-riddled-with-vulnerabilities?_mc=NL_DR_EDT_DR_daily_20211015&amp;cid=NL_DR_EDT_DR_daily_20211015&amp;elq_mid=106908&amp;elq_cid=19995009\" data-type=\"URL\" data-id=\"https:\/\/www.darkreading.com\/vulnerabilities-threats\/enterprise-storage-environments-riddled-with-vulnerabilities?_mc=NL_DR_EDT_DR_daily_20211015&amp;cid=NL_DR_EDT_DR_daily_20211015&amp;elq_mid=106908&amp;elq_cid=19995009\">told DarkReading that<\/a> &#8220;successful ransomware is just the tip of the iceberg Attackers who succeed in accessing the storage environment can destroy all available recovery options, including replicas, backups, immutable copies, storage-based snapshots, and recovery keys. Existing threat intelligence solutions do not cover storage well. Organizations typically own most of what they need to properly secure storage systems. The bigger problems have to do with awareness, education, informed planning, and control.&#8221;<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fstorage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Enterprise IT storage and backup environments are lagging considerably behind application and networking security. A 2021 study by Continuity Software analyzed data from 400 different types of enterprise storage devices obtained from customers in banking, financial services, healthcare, and elsewhere.<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/storage-misconfigurations-and-vulnerabilities-make-storage-and-backup-environments-easy-hacking-targets\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[],"class_list":["post-11631","post","type-post","status-publish","format-standard","hentry","category-storage"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11631","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=11631"}],"version-history":[{"count":1,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11631\/revisions"}],"predecessor-version":[{"id":11632,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11631\/revisions\/11632"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=11631"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=11631"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=11631"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}