{"id":28245,"date":"2019-08-05T12:56:00","date_gmt":"2019-08-05T12:56:00","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/is-your-enterprise-software-committing-security-malpractice\/"},"modified":"2019-08-05T12:56:00","modified_gmt":"2019-08-05T12:56:00","slug":"is-your-enterprise-software-committing-security-malpractice","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/is-your-enterprise-software-committing-security-malpractice\/","title":{"rendered":"Is your enterprise software committing security malpractice?"},"content":{"rendered":"
<\/div>\n

Back when this blog was dedicated to all things Microsoft I routinely railed against the spying aspects of Windows 10. Well, apparently that\u2019s nothing compared to what enterprise security, analytics, and hardware management tools are doing.<\/p>\n

An analytics firm called ExtraHop examined the networks of its customers and found that their security and analytic software was quietly uploading information to servers outside of the customer’s network. The company issued a report and warning<\/a> last week.<\/p>\n

ExtraHop deliberately chose not to name names in its four examples of enterprise security tools that were sending out data without warning the customer or user. A spokesperson for the company told me via email, \u201cExtraHop wants the focus of the report to be the trend, which we have observed on multiple occasions and find alarming. Focusing on a specific group would detract from the broader point that this important issue requires more attention from enterprises.\u201d<\/p>\n