Kanguru is proud to announce that the Kanguru Defender Elite encrypted USB flash drive has received FIPS 140-2 certification from the US and Canadian Governments.  This hardware encrypted device meets Level 2 security requirements, which validates its use for protecting sensitive government information.  Defender Elite also meets Level 3 requirements in several key security catagories.  The FIPS 140-2 standard is recognized internationally and by a number of other industry regulations, including HIPAA (PDF) for Healthcare.

Check out our website for more product details, and read our previous post about remote management.

Data Security, Government, Portable Storage

The Office of Inadequate Security has a list of newly reported data breaches provided by the Maryland Attorney General.  Many of the incidents involved stolen laptops, external hard drives or flash drives that contained sensitive information and were not properly encrypted.

More information about the Maryland Personal Information Protection Act (PIPA) can be found at the AG’s website.

Data Security, Portable Storage

Kanguru is pleased to announce a new technology partnership with anti-virus provider BitDefender.  Read the full announcement.

BitDefender is a global leader in virus and malware protection.  The company’s products have won numerous awards and recognitions, including a #1 rating in protection from Consumer Reports in 2008.

Kanguru and BitDefender are teaming to provide onboard anti-virus scanning on the Defender Elite encrypted USB drive.  All files stored on the drive are scanned to prevent malware from spreading through USB ports.  Kanguru is including a 1-Year subscription with every purchase of the Defender Elite.

Data Security, Malware, Portable Storage

Integrated anti-virus and malware protection for the Kanguru Defender Elite encrypted flash drive will be going live next week.  All Defender Elite drives will come standard with a one-year A/V subscription.  Defender Elite drives that have already been purchased can be updated to include the new A/V functionality by using the “Check for Updates” menu option.  Contact Kanguru for further info.

In the next few days, Kanguru will be announcing a strategic partnership with one of the industry’s leading antivirus vendors.  This partnership combines the expertise of two data security leaders to create one of the world’s most secure flash drives.

Malware delivered by USB devices is becoming one of the biggest concerns for Public-Sector and Business security professionals.  We’ve highlighted some of the risks here and here.

Data Security, Malware, Portable Storage

In early 2009 the National Archives announced that it had lost a 1TB portable hard drive containing sensitive information from the Clinton Administration.  Since none of the data was encrypted, the social security numbers and other personal data could easily be used to commit fraud.  NARA had no remote management capabilities for the device, so there was really no way for them to track down the drive short of offering a substantial reward.  Now they have announced exactly that - Federal Office Offers $50,000 Reward for Missing External Drive.

Upgrading hard drives and flash drives to encypted models with remote management capabilities would have cost less than $50,000 plus credit monitoring costs.  Public and private companies can face even bigger costs than NARA when it comes to a data breach.

Data Security, Government, Portable Storage

According to the Toronto Star, the private data of 8600 Toronto teachers is now in the hands of thieves after unencrypted laptops were stolen from the Ontario Teachers’ Insurance Plan.

The theft has served as call to action for OTIP:

OTIP spokesperson Julie Millard said the company is racing to finish a process it had started last fall to encrypt all data it holds on some 160,000 policy-holders.

“Because of what’s happened we’re working faster to encrypt all our communication devices by March—laptops, BlackBerries, even USB keys,” Millard said of the non-profit company owned by the province’s teachers’ unions.

Data Security, Portable Storage

Kanguru has partnered with Appspeed Distribution to increase the availability of Kanguru secure memory sticks in the United Kingdom.  Kanguru Defender Elite can now be purchased by both Private and Public Sector users at Probrand’s IT Index.

“An outbreak of data breaches in the UK has made encryption a high priority” commented Grahame Smee, Managing Director of AppSpeed Distribution. “Kanguru Solutions’ highly secure storage devices and remote management console help businesses and government agencies combat the increasing data breach problem.”

Defender Elite is in the final stages of FIPS 140-2 certification (Level 2). FIPS 140-2 is a US and Canadian security standard, which is also recommended by the UK Government Cabinet Office. Their new arrangements for data handling procedures (PDF) specify that

removable media should be encrypted to a standard of at least FIPS 140-2 or equivalent in addition to being protected by a authentication mechanism, such as a password

To add to the confusion, some vendors in the UK are advertising FIPS 197 validation. FIPS 197 only examines one component of the overall security system, and does not account for important considerations like authentication methods, random number generation, hashing and brute-force protections. FIPS 140-2 covers a much wider range of requirements and should be considered the minimum standard.

Data Security, Government, Portable Storage

A recent NY Times story on the Google - China confrontation mentions an increasingly common attack using USB flash drives to load malware.

Often, malware infections are a result of high-tech twists on old-fashioned cons. One scam, for example, involves small U.S.B. flash drives, left in a company parking lot, adorned with the company logo. Curious employees pick them up, put them in their computers and open what looks like an innocuous document. In fact, once run, it is software that collects passwords and other confidential information on a user’s computer and sends it to the attackers.

USB malware is a serious problem and Kanguru highly recommends using endpoint security to defend against these types of attacks.  Portable flash drives may cause security concerns, but blocking them altogether can reduce worker productivity and cause major inconveniences.  Endpoint security is an easy way to allow limited flash drive usage and still keep out unauthorized devices.  That is why Kanguru has built USB Device Control directly into its Remote Management Console.  Now organizations can remotely manage their secure devices and lockdown all others from one integrated console.

Data Security, Malware, Portable Storage

The latest issue of State Tech Magazine highlights a great feature of the Kanguru Defender and Defender Elite - the ability to track and manage USB drives in the field.

One feature of the Kanguru Defender drives that Conover appreciates is the ability to remotely set a password and wipe the drive clean if necessary. The agency has about 12 offices throughout the state, many of which are several hours away from headquarters in Albany.

For more info, view our Flash Presentation or contact your account manager at one of our authorized solution providers.

Government, Portable Storage

Via Axcess News:

A survey released today reveals that in the last year, 4,500 memory sticks have been forgotten in people’s pockets as they take their clothes to be washed at the local dry cleaners.   From 6th April onwards if data is lost and it causes a major security breach, this could now cost a company up to £500k with new powers given to the Information Commissioner’s office (ICO) to fine companies who have not sufficiently protected customers details under the Data Protection Act.

This is actually an improvement compared to last year’s survey, which hopefully means that security awareness is improving.  It’s still an awfully large number of flash drives, though, and there is no telling what kind of data is on them.  Given today’s large storage capacities, a memory stick could contain an entire database.  Wouldn’t you want the power to remotely delete a lost drive before it turns up at the dry cleaner?

Data Security, Portable Storage