What is the best response to attacks like the one on BeyondTrust?

The Verge's article highlighting the intrusion into the US Treasury Department via BeyondTrust service underscores the vulnerabilities of bastion-type solutions.

By exploiting vulnerabilities to obtain API keys, hackers were able to infiltrate the system and potentially access sensitive data, facing no barriers to using the compromised remote systems.

This incident underscores the critical importance of strengthening remote and bastion access security and adopting innovative approaches to reduce the attack surface and isolate attackers, thereby limiting their actions to prevent them from penetrating local systems.

In the face of these threats, it has become necessary to go further by also isolating the user's execution level through minimalist and ultra-secure container-based environments:

• By applying the principle of least privilege, questioning the actual need for access to certain applications and systems in order to limit them.
• By isolating applications and user sessions in secure containers.
• By preventing users from modifying the access URL, disabling right-clicks, or not allowing the opening of other applications or tabs.

By applying these principles, we prevent attacks on local systems and minimize the attack surface as much as possible. It is important to address the problem of attacks upstream, focusing on how to isolate the attacker, rather than reacting to attacks on compromised systems on a case-by-case basis. We should also not hesitate to systematically question access to each application.

This is what a service like Reemo Containers offers. In addition to security, Reemo Containers offer a smooth user experience, with the ability to access demanding applications directly from a web browser. This combination of security, performance, and simplicity positions Reemo Containers as a compelling alternative to traditional remote access solutions and bastion-type solutions, which still have a long way to go to ensure optimal security.

In conclusion, the BeyondTrust incident is a reminder that remote access security must be a top priority for organizations. Innovative solutions like Reemo Containers are essential to counter sophisticated cyber threats and ensure the protection of sensitive data.