{"id":2535,"date":"2020-07-15T07:59:24","date_gmt":"2020-07-15T05:59:24","guid":{"rendered":"https:\/\/www.teal-consulting.de\/?p=2535"},"modified":"2020-07-15T07:49:07","modified_gmt":"2020-07-15T05:49:07","slug":"e-sae-deep-dive-series-part-3-separate-admin-accounts","status":"publish","type":"post","link":"https:\/\/www.teal-consulting.de\/en\/2020\/07\/15\/e-sae-deep-dive-series-part-3-separate-admin-accounts\/","title":{"rendered":"(E) SAE DEEP DIVE SERIES Part 3 &#8211; Separate admin accounts"},"content":{"rendered":"<div class=\"wpb-content-wrapper\" id=\"wpb-content-root\">[vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;30&#8243;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221;][vc_column_inner][vc_column_text]After <a href=\"https:\/\/www.teal-consulting.de\/en\/2020\/01\/16\/hyper-v-hgs-en\/\" target=\"_blank\" rel=\"noopener noreferrer\">Hyper-V HGS<\/a> and <a href=\"https:\/\/www.teal-consulting.de\/en\/2020\/06\/15\/esae-deep-dive-serie-part-2\/\" target=\"_blank\" rel=\"noopener noreferrer\">VM protection with VMWare<\/a>, now the third part of our (E) SAE Deep Dive Series follows. Maybe you follow us on <a href=\"https:\/\/www.linkedin.com\/company\/teal-technology-consulting-gmbh\/\" target=\"_blank\" rel=\"noopener noreferrer\">LinkedIn<\/a>, <a href=\"https:\/\/www.xing.com\/companies\/tealtechnologyconsultinggmbh\" target=\"_blank\" rel=\"noopener noreferrer\">Xing<\/a>, <a href=\"https:\/\/www.facebook.com\/TealTechnologyConsulting\/\" target=\"_blank\" rel=\"noopener noreferrer\">Facebook<\/a>, <a href=\"https:\/\/www.instagram.com\/tealconsulting\/?hl=de\" target=\"_blank\" rel=\"noopener noreferrer\">Instagram<\/a> or <a href=\"https:\/\/twitter.com\/TEAL_Technology\" target=\"_blank\" rel=\"noopener noreferrer\">Twitter<\/a> and have already seen our infographics for the Top Ten (E) SAE measures. If not, make sure to catch up \ud83d\ude0a:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.linkedin.com\/feed\/update\/urn:li:activity:6683979837025107968\" target=\"_blank\" rel=\"noopener noreferrer\">LAPS<\/a><\/li>\n<li><a href=\"https:\/\/www.linkedin.com\/feed\/update\/urn:li:activity:6673831379945578496\" target=\"_blank\" rel=\"noopener noreferrer\">Reduce high privileged service accounts<\/a><\/li>\n<li><a href=\"https:\/\/www.linkedin.com\/feed\/update\/urn:li:activity:6663032216240570368\" target=\"_blank\" rel=\"noopener noreferrer\">Change all non-personal passwords<\/a><\/li>\n<li><a href=\"https:\/\/www.linkedin.com\/feed\/update\/urn:li:activity:6655779433208651776\" target=\"_blank\" rel=\"noopener noreferrer\">Separate admin accounts<\/a><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>But why are we telling you this? Because in this blog series we have decided to dedicate a post to every measure from our top ten list of the most cost-effective measures.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-2522 lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_top-ten_SAE.png\" alt=\"\" width=\"600\" height=\"600\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_top-ten_SAE.png 844w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_top-ten_SAE-300x300.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_top-ten_SAE-150x150.png 150w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_top-ten_SAE-768x768.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_top-ten_SAE-570x570.png 570w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_top-ten_SAE-500x500.png 500w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_top-ten_SAE-700x700.png 700w\" data-sizes=\"(max-width: 600px) 100vw, 600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 600px; --smush-placeholder-aspect-ratio: 600\/600;\" \/><\/p>\n<p>Today we start with the <strong><em>separation of administrative and non-administrative user accounts<\/em><\/strong>. This involves using separate accounts for daily productive work, such as e-mail and office applications, and for system administration. The goal is to ensure that an account for productive work never has administrative permissions for infrastructure, server systems or backend applications. The topic is certainly not new and has been propagated for more than a decade. The BSI, for example, provides for the separation of user and administration accounts in the <a href=\"https:\/\/www.bsi.bund.de\/DE\/Themen\/ITGrundschutz\/ITGrundschutzKompendium\/itgrundschutzKompendium_node.html\" target=\"_blank\" rel=\"noopener noreferrer\">IT-Grundschutz Compendium<\/a> in the implementation instructions for the <a href=\"https:\/\/www.bsi.bund.de\/DE\/Themen\/ITGrundschutz\/ITGrundschutzKompendium\/umsetzungshinweise\/SYS\/Umsetzungshinweise_zum_Baustein_SYS_2_1_Allgemeiner_Client.html\" target=\"_blank\" rel=\"noopener noreferrer\">SYS.2.1 General Client module<\/a>:<\/p>\n<p><strong><em>SYS.2.1.M2 role separation<\/em><\/strong><\/p>\n<p><em>Basically, a distinction can be made between identifiers for users and administrators. Only administrators manage the IT systems, while normal user IDs only have the rights to perform their workstation-specific tasks. Normal user IDs must not have administration rights in order to protect the operating system and the configuration of the clients from accidental, negligent or intentional modification by the users.<\/em><\/p>\n<p>Nevertheless, we see again and again with our customers that this principle is not adhered to. Therefore, we would like to show once again with an example why separation is important.<\/p>\n<p>In 2011 the security company <a href=\"https:\/\/www.rsa.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">RSA Security<\/a> was affected by a hack. Some employees had received a phishing e-mail with an Excel attachment. One of the employees opened an Excel file named 2011 Recruitment Plan.xls, which contained a macro that exploited a <a href=\"https:\/\/www.adobe.com\/support\/security\/advisories\/apsa11-01.html\" target=\"_blank\" rel=\"noopener noreferrer\">zero-day vulnerability<\/a> in Adobe Flash Player and installed <a href=\"https:\/\/www.fireeye.com\/content\/dam\/fireeye-www\/global\/en\/current-threats\/pdfs\/rpt-poison-ivy.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">Poison Ivy<\/a> remote control software. The description of the hack on the <a href=\"https:\/\/web.archive.org\/web\/20110701041257\/http:\/blogs.rsa.com\/rivner\/anatomy-of-an-attack\" target=\"_blank\" rel=\"noopener noreferrer\">RSA company blog<\/a> omits some details, but since Poison Ivy usually installs itself into the Windows system directory, the user who opened the Excel file obviously had local administrator rights on the Windows end device. This gave the attacker the ability to gain access to the company network and to probe servers from there and take over if any vulnerabilities were found. (It is not entirely clear whether the end user&#8217;s account still had administrative privileges in the back end. Nevertheless, the scenario illustrates the danger you are running into here). The attacker came into possession of sensitive data for calculating one-time passwords (OTP) and RSA Security ultimately had to replace around 40 million SecurID tokens of their customers. The total cost to the Group was estimated at 66 million US dollars.<\/p>\n<p>This example clearly illustrates that accounts for productive work, with which e-mail in particular is accessed, must not have local administration rights and administrative permissions on infrastructure, servers, middleware and applications.<\/p>\n<p>In our following infographics (don&#8217;t forget to follow us on <a href=\"https:\/\/www.linkedin.com\/company\/teal-technology-consulting-gmbh\/\" target=\"_blank\" rel=\"noopener noreferrer\">LinkedIn<\/a>, <a href=\"https:\/\/www.xing.com\/companies\/tealtechnologyconsultinggmbh\" target=\"_blank\" rel=\"noopener noreferrer\">Xing<\/a>, <a href=\"https:\/\/www.facebook.com\/TealTechnologyConsulting\/\" target=\"_blank\" rel=\"noopener noreferrer\">Facebook<\/a>, <a href=\"https:\/\/www.instagram.com\/tealconsulting\/?hl=de\" target=\"_blank\" rel=\"noopener noreferrer\">Instagram<\/a> and <a href=\"https:\/\/twitter.com\/TEAL_Technology\" target=\"_blank\" rel=\"noopener noreferrer\">Twitter<\/a> \u00a0to make sure you don&#8217;t miss any of the graphics \ud83d\ude09), we will show the whole thing again schematically.<\/p>\n<p>Bob uses the same account for his daily work and for server administration. Bob becomes a victim of a phishing attack and the attacker can use Bob&#8217;s account to install malware such as the remote control software mentioned in the RSA example and steal data from the company network without further <a href=\"https:\/\/en.wikipedia.org\/wiki\/Privilege_escalation\" target=\"_blank\" rel=\"noopener noreferrer\">privilege escalation<\/a>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-2526 lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_1.png\" alt=\"\" width=\"600\" height=\"600\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_1.png 936w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_1-300x300.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_1-150x150.png 150w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_1-768x768.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_1-570x570.png 570w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_1-500x500.png 500w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_1-700x700.png 700w\" data-sizes=\"(max-width: 600px) 100vw, 600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 600px; --smush-placeholder-aspect-ratio: 600\/600;\" \/><\/p>\n<p>The safe procedure is visualized in the following diagram. Alice is logged on to her office PC with her normal work account and performs her daily work. This account has no additional authorizations, including local administration authorizations on her office PC. Since phishing <a href=\"https:\/\/www.heise.de\/ct\/artikel\/Trojaner-Befall-Emotet-bei-Heise-4437807.html\" target=\"_blank\" rel=\"noopener noreferrer\">attacks are becoming more and more sophisticated<\/a> and, as recent cases have shown, are difficult to detect even by well-trained employees, Alice can also become a victim of them, but the effects of the attack are mitigated. The attacker has to find a way of privilege escalation to be able to execute a tool such as <a href=\"https:\/\/github.com\/gentilkiwi\/mimikatz\" target=\"_blank\" rel=\"noopener noreferrer\">mimikatz<\/a>. Mimikatz would then be able to read passwords, hashes, PINs and Kerberos tickets directly from the main memory or record password entries. However, this requires administrative privileges on the Windows system.<\/p>\n<p>It is also clear that the mere separation of accounts alone does not reflect a fully comprehensive security concept. Of course, further mechanisms must be implemented, dedicated admin accounts are only the beginning. Just have a look at the next blog articles to learn more&#8230;<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-2524 lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_2.png\" alt=\"\" width=\"600\" height=\"600\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_2.png 936w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_2-300x300.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_2-150x150.png 150w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_2-768x768.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_2-570x570.png 570w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_2-500x500.png 500w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2020\/07\/teal_infografik_2-700x700.png 700w\" data-sizes=\"(max-width: 600px) 100vw, 600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 600px; --smush-placeholder-aspect-ratio: 600\/600;\" \/><\/p>\n<p>In summary, small cause great effect. For us, this is clearly the number one cost-effective measure. I hope we were able to recall the topic, as I am sure everyone of you has heard. I am sure that it is strictly implemented by you all, or \ud83d\ude09?[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=&#8221;50&#8243;][vc_raw_html]JTNDYSUyMGhyZWYlM0QlMjJqYXZhc2NyaXB0JTNBaGlzdG9yeS5iYWNrJTI4JTI5JTIyJTNFJTNDc3BhbiUyMHN0eWxlJTNEJTIyY29sb3IlM0ElMjAlMjNmZjIwNzAlM0IlMjIlM0UlM0MlM0MlMjBCYWNrJTNDJTJGc3BhbiUzRSUzQyUyRmElM0U=[\/vc_raw_html][vc_empty_space height=&#8221;50&#8243;][vc_separator type=&#8221;small&#8221; position=&#8221;center&#8221; color=&#8221;#eeeeee&#8221; thickness=&#8221;2&#8243; width=&#8221;1100&#8243;][vc_empty_space height=&#8221;50&#8243;][vc_column_text]\n<h2>FROM OUR SOCIAL MEDIA<\/h2>\n[\/vc_column_text][vc_empty_space height=&#8221;30&#8243;][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;center&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221;][vc_column width=&#8221;1\/2&#8243; offset=&#8221;vc_hidden-sm vc_hidden-xs&#8221;][vc_column_text] <\/p>\n<div class=\"brlbs-cmpnt-container brlbs-cmpnt-content-blocker brlbs-cmpnt-with-individual-styles\" data-borlabs-cookie-content-blocker-id=\"default\" data-borlabs-cookie-content=\"PGlmcmFtZSB0aXRsZT0iRWluZ2ViZXR0ZXRlciBCZWl0cmFnIiBzcmM9Imh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9lbWJlZC9mZWVkL3VwZGF0ZS91cm46bGk6dWdjUG9zdDo2NjQ4NjA3OTIwNDc5MTA1MDI0P2NvbXBhY3Q9MSIgd2lkdGg9IjUwNCIgaGVpZ2h0PSIyODQiIGZyYW1lYm9yZGVyPSIwIiBhbGxvd2Z1bGxzY3JlZW49ImFsbG93ZnVsbHNjcmVlbiI+PC9pZnJhbWU+\">\n<div class=\"brlbs-cmpnt-cb-preset-a\">\n<p class=\"brlbs-cmpnt-cb-description\">You are currently viewing a placeholder content from <strong>Default<\/strong>. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.<\/p>\n<div class=\"brlbs-cmpnt-cb-buttons\"> <a class=\"brlbs-cmpnt-cb-btn\" href=\"#\" data-borlabs-cookie-unblock role=\"button\">Unblock content<\/a> <a class=\"brlbs-cmpnt-cb-btn\" href=\"#\" data-borlabs-cookie-accept-service role=\"button\" style=\"display: none\">Accept required service and unblock content<\/a> <\/div>\n<p> <a class=\"brlbs-cmpnt-cb-provider-toggle\" href=\"#\" data-borlabs-cookie-show-provider-information role=\"button\">More Information<\/a> <\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][vc_column width=&#8221;1\/2&#8243; offset=&#8221;vc_hidden-sm vc_hidden-xs&#8221;][vc_column_text] <\/p>\n<div class=\"brlbs-cmpnt-container brlbs-cmpnt-content-blocker brlbs-cmpnt-with-individual-styles\" data-borlabs-cookie-content-blocker-id=\"default\" data-borlabs-cookie-content=\"PGlmcmFtZSB0aXRsZT0iRWluZ2ViZXR0ZXRlciBCZWl0cmFnIiBzcmM9Imh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9lbWJlZC9mZWVkL3VwZGF0ZS91cm46bGk6dWdjUG9zdDo2NTg5ODY5NzI5MTY1Mzg5ODI0P2NvbXBhY3Q9MSIgd2lkdGg9IjUwNCIgaGVpZ2h0PSIyODQiIGZyYW1lYm9yZGVyPSIwIiBhbGxvd2Z1bGxzY3JlZW49ImFsbG93ZnVsbHNjcmVlbiI+PC9pZnJhbWU+\">\n<div class=\"brlbs-cmpnt-cb-preset-a\">\n<p class=\"brlbs-cmpnt-cb-description\">You are currently viewing a placeholder content from <strong>Default<\/strong>. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.<\/p>\n<div class=\"brlbs-cmpnt-cb-buttons\"> <a class=\"brlbs-cmpnt-cb-btn\" href=\"#\" data-borlabs-cookie-unblock role=\"button\">Unblock content<\/a> <a class=\"brlbs-cmpnt-cb-btn\" href=\"#\" data-borlabs-cookie-accept-service role=\"button\" style=\"display: none\">Accept required service and unblock content<\/a> <\/div>\n<p> <a class=\"brlbs-cmpnt-cb-provider-toggle\" href=\"#\" data-borlabs-cookie-show-provider-information role=\"button\">More Information<\/a> <\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;center&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221;][vc_column width=&#8221;1\/2&#8243; offset=&#8221;vc_hidden-lg vc_hidden-md&#8221;][vc_column_text]\n<div class=\"brlbs-cmpnt-container brlbs-cmpnt-content-blocker brlbs-cmpnt-with-individual-styles\" data-borlabs-cookie-content-blocker-id=\"default\" data-borlabs-cookie-content=\"PGlmcmFtZSB0aXRsZT0iRWluZ2ViZXR0ZXRlciBCZWl0cmFnIiBzcmM9Imh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9lbWJlZC9mZWVkL3VwZGF0ZS91cm46bGk6dWdjUG9zdDo2NjQ4NjA3OTIwNDc5MTA1MDI0P2NvbXBhY3Q9MSIgd2lkdGg9IjMwNCIgaGVpZ2h0PSIyODQiIGZyYW1lYm9yZGVyPSIwIiBhbGxvd2Z1bGxzY3JlZW49ImFsbG93ZnVsbHNjcmVlbiI+PC9pZnJhbWU+\">\n<div class=\"brlbs-cmpnt-cb-preset-a\">\n<p class=\"brlbs-cmpnt-cb-description\">You are currently viewing a placeholder content from <strong>Default<\/strong>. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.<\/p>\n<div class=\"brlbs-cmpnt-cb-buttons\"> <a class=\"brlbs-cmpnt-cb-btn\" href=\"#\" data-borlabs-cookie-unblock role=\"button\">Unblock content<\/a> <a class=\"brlbs-cmpnt-cb-btn\" href=\"#\" data-borlabs-cookie-accept-service role=\"button\" style=\"display: none\">Accept required service and unblock content<\/a> <\/div>\n<p> <a class=\"brlbs-cmpnt-cb-provider-toggle\" href=\"#\" data-borlabs-cookie-show-provider-information role=\"button\">More Information<\/a> <\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][vc_column width=&#8221;1\/2&#8243; offset=&#8221;vc_hidden-lg vc_hidden-md&#8221;][vc_column_text] <\/p>\n<div class=\"brlbs-cmpnt-container brlbs-cmpnt-content-blocker brlbs-cmpnt-with-individual-styles\" data-borlabs-cookie-content-blocker-id=\"default\" data-borlabs-cookie-content=\"PGlmcmFtZSB0aXRsZT0iRWluZ2ViZXR0ZXRlciBCZWl0cmFnIiBzcmM9Imh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9lbWJlZC9mZWVkL3VwZGF0ZS91cm46bGk6dWdjUG9zdDo2NTg5ODY5NzI5MTY1Mzg5ODI0P2NvbXBhY3Q9MSIgd2lkdGg9IjMwNCIgaGVpZ2h0PSIyODQiIGZyYW1lYm9yZGVyPSIwIiBhbGxvd2Z1bGxzY3JlZW49ImFsbG93ZnVsbHNjcmVlbiI+PC9pZnJhbWU+\">\n<div class=\"brlbs-cmpnt-cb-preset-a\">\n<p class=\"brlbs-cmpnt-cb-description\">You are currently viewing a placeholder content from <strong>Default<\/strong>. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.<\/p>\n<div class=\"brlbs-cmpnt-cb-buttons\"> <a class=\"brlbs-cmpnt-cb-btn\" href=\"#\" data-borlabs-cookie-unblock role=\"button\">Unblock content<\/a> <a class=\"brlbs-cmpnt-cb-btn\" href=\"#\" data-borlabs-cookie-accept-service role=\"button\" style=\"display: none\">Accept required service and unblock content<\/a> <\/div>\n<p> <a class=\"brlbs-cmpnt-cb-provider-toggle\" href=\"#\" data-borlabs-cookie-show-provider-information role=\"button\">More Information<\/a> <\/div>\n<\/div>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;center&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221;][vc_column width=&#8221;1\/2&#8243;][vc_empty_space height=&#8221;30&#8243;][vc_column_text]\n<blockquote class=\"instagram-media\" style=\"background: #FFF; border: 0; border-radius: 3px; box-shadow: 0 0 1px 0 rgba(0,0,0,0.5),0 1px 10px 0 rgba(0,0,0,0.15); margin: 1px; max-width: 540px; min-width: 326px; padding: 0; width: calc(100% - 2px);\" data-instgrm-permalink=\"https:\/\/www.instagram.com\/p\/B-9WDZKpkZS\/?utm_source=ig_embed&amp;utm_campaign=loading\" data-instgrm-version=\"12\">\n<div style=\"padding: 16px;\">\n<div style=\"display: flex; flex-direction: row; align-items: center; text-align: center;\">\n<div style=\"background-color: #f4f4f4; border-radius: 50%; flex-grow: 0; height: 40px; margin-right: 14px; width: 40px;\"><\/div>\n<div style=\"display: flex; flex-direction: column; flex-grow: 1; justify-content: center;\">\n<div style=\"background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; margin-bottom: 6px; width: 100px;\"><\/div>\n<div style=\"background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; width: 60px;\"><\/div>\n<\/div>\n<\/div>\n<div style=\"padding: 19% 0px; text-align: center;\"><\/div>\n<div style=\"display: block; height: 50px; margin: 0px auto 12px; width: 50px; text-align: center;\"><\/div>\n<div style=\"padding-top: 8px; text-align: center;\">\n<div style=\"color: #3897f0; font-family: Arial,sans-serif; font-size: 14px; font-style: normal; font-weight: 550; line-height: 18px;\">Sieh dir diesen Beitrag auf Instagram an<\/div>\n<\/div>\n<div style=\"padding: 12.5% 0px; text-align: center;\"><\/div>\n<div style=\"display: flex; flex-direction: row; margin-bottom: 14px; align-items: center; text-align: center;\">\n<div>\n<div style=\"background-color: #f4f4f4; border-radius: 50%; height: 12.5px; width: 12.5px; transform: translateX(0px) translateY(7px);\"><\/div>\n<div style=\"background-color: #f4f4f4; height: 12.5px; transform: rotate(-45deg) translateX(3px) translateY(1px); width: 12.5px; flex-grow: 0; margin-right: 14px; margin-left: 2px;\"><\/div>\n<div style=\"background-color: #f4f4f4; border-radius: 50%; height: 12.5px; width: 12.5px; transform: translateX(9px) translateY(-18px);\"><\/div>\n<\/div>\n<div style=\"margin-left: 8px;\">\n<div style=\"background-color: #f4f4f4; border-radius: 50%; flex-grow: 0; height: 20px; width: 20px;\"><\/div>\n<div style=\"width: 0; height: 0; border-top: 2px solid transparent; border-left: 6px solid #f4f4f4; border-bottom: 2px solid transparent; transform: translateX(16px) translateY(-4px) rotate(30deg);\"><\/div>\n<\/div>\n<div style=\"margin-left: auto;\">\n<div style=\"width: 0px; border-top: 8px solid #F4F4F4; border-right: 8px solid transparent; transform: translateY(16px);\"><\/div>\n<div style=\"background-color: #f4f4f4; flex-grow: 0; height: 12px; width: 16px; transform: translateY(-4px);\"><\/div>\n<div style=\"width: 0; height: 0; border-top: 8px solid #F4F4F4; border-left: 8px solid transparent; transform: translateY(-4px) translateX(8px);\"><\/div>\n<\/div>\n<\/div>\n<div style=\"display: flex; flex-direction: column; flex-grow: 1; justify-content: center; margin-bottom: 24px; text-align: center;\">\n<div style=\"background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; margin-bottom: 6px; width: 224px;\"><\/div>\n<div style=\"background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; width: 144px;\"><\/div>\n<\/div>\n<p style=\"color: #c9c8cd; font-family: Arial,sans-serif; font-size: 14px; line-height: 17px; margin-bottom: 0; margin-top: 8px; overflow: hidden; padding: 8px 0 7px; text-align: center; text-overflow: ellipsis; white-space: nowrap;\"><a style=\"color: #c9c8cd; font-family: Arial,sans-serif; font-size: 14px; font-style: normal; font-weight: normal; line-height: 17px; text-decoration: none;\" href=\"https:\/\/www.instagram.com\/p\/B-9WDZKpkZS\/?utm_source=ig_embed&amp;utm_campaign=loading\" target=\"_blank\" rel=\"noopener noreferrer\">Ein Beitrag geteilt von TEAL Technology Consulting (@tealconsulting)<\/a> am <time style=\"font-family: Arial,sans-serif; font-size: 14px; line-height: 17px;\" datetime=\"2020-04-14T10:49:03+00:00\">Apr 14, 2020 um 3:49 PDT<\/time><\/p>\n<\/div>\n<\/blockquote>\n<p><script async src=\"\/\/www.instagram.com\/embed.js\"><\/script>[\/vc_column_text][\/vc_column][vc_column width=&#8221;1\/2&#8243;][vc_empty_space height=&#8221;30&#8243;][vc_column_text]\n<blockquote class=\"instagram-media\" style=\"background: #FFF; border: 0; border-radius: 3px; box-shadow: 0 0 1px 0 rgba(0,0,0,0.5),0 1px 10px 0 rgba(0,0,0,0.15); margin: 1px; max-width: 540px; min-width: 326px; padding: 0; width: calc(100% - 2px);\" data-instgrm-permalink=\"https:\/\/www.instagram.com\/p\/CCFvpHlKUGm\/?utm_source=ig_embed&amp;utm_campaign=loading\" data-instgrm-version=\"12\">\n<div style=\"padding: 16px;\">\n<div style=\"display: flex; flex-direction: row; align-items: center; text-align: center;\">\n<div style=\"background-color: #f4f4f4; border-radius: 50%; flex-grow: 0; height: 40px; margin-right: 14px; width: 40px;\"><\/div>\n<div style=\"display: flex; flex-direction: column; flex-grow: 1; justify-content: center;\">\n<div style=\"background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; margin-bottom: 6px; width: 100px;\"><\/div>\n<div style=\"background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; width: 60px;\"><\/div>\n<\/div>\n<\/div>\n<div style=\"padding: 19% 0px; text-align: center;\"><\/div>\n<div style=\"display: block; height: 50px; margin: 0px auto 12px; width: 50px; text-align: center;\"><\/div>\n<div style=\"padding-top: 8px; text-align: center;\">\n<div style=\"color: #3897f0; font-family: Arial,sans-serif; font-size: 14px; font-style: normal; font-weight: 550; line-height: 18px;\">Sieh dir diesen Beitrag auf Instagram an<\/div>\n<\/div>\n<div style=\"padding: 12.5% 0px; text-align: center;\"><\/div>\n<div style=\"display: flex; flex-direction: row; margin-bottom: 14px; align-items: center; text-align: center;\">\n<div>\n<div style=\"background-color: #f4f4f4; border-radius: 50%; height: 12.5px; width: 12.5px; transform: translateX(0px) translateY(7px);\"><\/div>\n<div style=\"background-color: #f4f4f4; height: 12.5px; transform: rotate(-45deg) translateX(3px) translateY(1px); width: 12.5px; flex-grow: 0; margin-right: 14px; margin-left: 2px;\"><\/div>\n<div style=\"background-color: #f4f4f4; border-radius: 50%; height: 12.5px; width: 12.5px; transform: translateX(9px) translateY(-18px);\"><\/div>\n<\/div>\n<div style=\"margin-left: 8px;\">\n<div style=\"background-color: #f4f4f4; border-radius: 50%; flex-grow: 0; height: 20px; width: 20px;\"><\/div>\n<div style=\"width: 0; height: 0; border-top: 2px solid transparent; border-left: 6px solid #f4f4f4; border-bottom: 2px solid transparent; transform: translateX(16px) translateY(-4px) rotate(30deg);\"><\/div>\n<\/div>\n<div style=\"margin-left: auto;\">\n<div style=\"width: 0px; border-top: 8px solid #F4F4F4; border-right: 8px solid transparent; transform: translateY(16px);\"><\/div>\n<div style=\"background-color: #f4f4f4; flex-grow: 0; height: 12px; width: 16px; transform: translateY(-4px);\"><\/div>\n<div style=\"width: 0; height: 0; border-top: 8px solid #F4F4F4; border-left: 8px solid transparent; transform: translateY(-4px) translateX(8px);\"><\/div>\n<\/div>\n<\/div>\n<div style=\"display: flex; flex-direction: column; flex-grow: 1; justify-content: center; margin-bottom: 24px; text-align: center;\">\n<div style=\"background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; margin-bottom: 6px; width: 224px;\"><\/div>\n<div style=\"background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; width: 144px;\"><\/div>\n<\/div>\n<p style=\"color: #c9c8cd; font-family: Arial,sans-serif; font-size: 14px; line-height: 17px; margin-bottom: 0; margin-top: 8px; overflow: hidden; padding: 8px 0 7px; text-align: center; text-overflow: ellipsis; white-space: nowrap;\"><a style=\"color: #c9c8cd; font-family: Arial,sans-serif; font-size: 14px; font-style: normal; font-weight: normal; line-height: 17px; text-decoration: none;\" href=\"https:\/\/www.instagram.com\/p\/CCFvpHlKUGm\/?utm_source=ig_embed&amp;utm_campaign=loading\" target=\"_blank\" rel=\"noopener noreferrer\">Ein Beitrag geteilt von TEAL Technology Consulting (@tealconsulting)<\/a> am <time style=\"font-family: Arial,sans-serif; font-size: 14px; line-height: 17px;\" datetime=\"2020-07-01T06:40:46+00:00\">Jun 30, 2020 um 11:40 PDT<\/time><\/p>\n<\/div>\n<\/blockquote>\n<p><script async src=\"\/\/www.instagram.com\/embed.js\"><\/script>[\/vc_column_text][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;50&#8243;][vc_column_text]\n<h2>LATEST POSTS<\/h2>\n[\/vc_column_text][vc_empty_space height=&#8221;30&#8243;]\n<div class='latest_post_holder boxes three_columns one_row' >\n    <ul>\n    \n        <li class=\"clearfix\">\n            <div class=\"boxes_image\">\n                                <a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/04\/01\/logging-in-instead-of-breaking-in\/\"><img decoding=\"async\" width=\"539\" height=\"303\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2023\/03\/blog_headerbild_teal_krux-mit-der-KI_AI-539x303.jpg\" class=\"attachment-latest_post_boxes size-latest_post_boxes wp-post-image lazyload\" alt=\"\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2023\/03\/blog_headerbild_teal_krux-mit-der-KI_AI-539x303.jpg 539w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2023\/03\/blog_headerbild_teal_krux-mit-der-KI_AI-300x169.jpg 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2023\/03\/blog_headerbild_teal_krux-mit-der-KI_AI-1024x575.jpg 1024w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2023\/03\/blog_headerbild_teal_krux-mit-der-KI_AI-768x432.jpg 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2023\/03\/blog_headerbild_teal_krux-mit-der-KI_AI-1536x863.jpg 1536w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2023\/03\/blog_headerbild_teal_krux-mit-der-KI_AI-700x393.jpg 700w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2023\/03\/blog_headerbild_teal_krux-mit-der-KI_AI.jpg 1920w\" data-sizes=\"(max-width: 539px) 100vw, 539px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 539px; --smush-placeholder-aspect-ratio: 539\/303;\"><\/a>\n            <\/div>\n            <div class=\"latest_post\"  >\n                <div class=\"latest_post_text\">\n                    <div class=\"latest_post_inner\">\n                        <div class=\"latest_post_text_inner\">\n                            <h3 itemprop=\"name\" class=\"latest_post_title entry_title\"><a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/04\/01\/logging-in-instead-of-breaking-in\/\">\u201cLogging In instead of Breaking In\u201d: Why your identities are the biggest security risk<\/a><\/h3>\n                            <p class=\"excerpt\">Attackers no longer \u201csimply\u201d break in, they LOG in. If you\u2019re still relying on traditional defenses in 2026, we believe you\u2019ve probably already lost the battle for your data....<\/p>\n                            <span class=\"post_infos\">\n                                                                    <span class=\"date_hour_holder\">\n                                        <span itemprop=\"dateCreated\" class=\"date entry_date updated\">01 April, 2026 <meta itemprop=\"interactionCount\" content=\"UserComments: 0\"\/><\/span>\n                                    <\/span>\n                                                                                                \n                                \n                                                            <\/span>\n                        <\/div>\n                    <\/div>\n                <\/div>\n            <\/div>\n        <\/li>\n    \n        <li class=\"clearfix\">\n            <div class=\"boxes_image\">\n                                <a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/04\/29\/bsi-update-grundschutz\/\"><img decoding=\"async\" width=\"539\" height=\"303\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2022\/09\/teal_blog_on-prem-safe_header-539x303.jpg\" class=\"attachment-latest_post_boxes size-latest_post_boxes wp-post-image lazyload\" alt=\"\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2022\/09\/teal_blog_on-prem-safe_header-539x303.jpg 539w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2022\/09\/teal_blog_on-prem-safe_header-300x169.jpg 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2022\/09\/teal_blog_on-prem-safe_header-1024x575.jpg 1024w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2022\/09\/teal_blog_on-prem-safe_header-768x432.jpg 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2022\/09\/teal_blog_on-prem-safe_header-1536x863.jpg 1536w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2022\/09\/teal_blog_on-prem-safe_header-700x393.jpg 700w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2022\/09\/teal_blog_on-prem-safe_header.jpg 1920w\" data-sizes=\"(max-width: 539px) 100vw, 539px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 539px; --smush-placeholder-aspect-ratio: 539\/303;\"><\/a>\n            <\/div>\n            <div class=\"latest_post\"  >\n                <div class=\"latest_post_text\">\n                    <div class=\"latest_post_inner\">\n                        <div class=\"latest_post_text_inner\">\n                            <h3 itemprop=\"name\" class=\"latest_post_title entry_title\"><a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/04\/29\/bsi-update-grundschutz\/\">BSI Update: Grundschutz++ Will become mandatory in 2028 &#8211; why you should take action now<\/a><\/h3>\n                            <p class=\"excerpt\">The wait is over: The BSI has published the first guidelines for Grundschutz++. What at first glance looks like additional bureaucratic red tape is, in fact, the new \u201cstate of the art\u201d for NIS2. ...<\/p>\n                            <span class=\"post_infos\">\n                                                                    <span class=\"date_hour_holder\">\n                                        <span itemprop=\"dateCreated\" class=\"date entry_date updated\">29 April, 2026 <meta itemprop=\"interactionCount\" content=\"UserComments: 0\"\/><\/span>\n                                    <\/span>\n                                                                                                \n                                \n                                                            <\/span>\n                        <\/div>\n                    <\/div>\n                <\/div>\n            <\/div>\n        <\/li>\n    \n        <li class=\"clearfix\">\n            <div class=\"boxes_image\">\n                                <a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/01\/29\/bye-bye-rc4\/\"><img decoding=\"async\" width=\"539\" height=\"303\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/01\/Blog-Headerbild_RC4-539x303.png\" class=\"attachment-latest_post_boxes size-latest_post_boxes wp-post-image lazyload\" alt=\"\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/01\/Blog-Headerbild_RC4-539x303.png 539w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/01\/Blog-Headerbild_RC4-300x169.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/01\/Blog-Headerbild_RC4-1024x575.png 1024w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/01\/Blog-Headerbild_RC4-768x432.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/01\/Blog-Headerbild_RC4-1536x863.png 1536w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/01\/Blog-Headerbild_RC4-700x393.png 700w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/01\/Blog-Headerbild_RC4.png 1920w\" data-sizes=\"(max-width: 539px) 100vw, 539px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 539px; --smush-placeholder-aspect-ratio: 539\/303;\"><\/a>\n            <\/div>\n            <div class=\"latest_post\"  >\n                <div class=\"latest_post_text\">\n                    <div class=\"latest_post_inner\">\n                        <div class=\"latest_post_text_inner\">\n                            <h3 itemprop=\"name\" class=\"latest_post_title entry_title\"><a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/01\/29\/bye-bye-rc4\/\">Bye-bye RC4: Your guide to the Kerberos transition in April 2026<\/a><\/h3>\n                            <p class=\"excerpt\">The clock is ticking for one of the longest-lasting (and most insecure) ciphers in our networks. Microsoft is getting serious and pushing for the shutdown of RC4 encryption in the Kerberos protocol....<\/p>\n                            <span class=\"post_infos\">\n                                                                    <span class=\"date_hour_holder\">\n                                        <span itemprop=\"dateCreated\" class=\"date entry_date updated\">29 January, 2026 <meta itemprop=\"interactionCount\" content=\"UserComments: 0\"\/><\/span>\n                                    <\/span>\n                                                                                                \n                                \n                                                            <\/span>\n                        <\/div>\n                    <\/div>\n                <\/div>\n            <\/div>\n        <\/li>\n        <\/ul>\n<\/div>[\/vc_column][\/vc_row]\n<\/div>","protected":false},"excerpt":{"rendered":"<p>After Hyper-V HGS and VM protection with VMWare, now the third part of our (E) SAE Deep Dive Series follows. Maybe you follow us on LinkedIn, Xing, Facebook, Instagram or Twitter and <\/p>\n","protected":false},"author":5,"featured_media":2521,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[10],"tags":[],"class_list":["post-2535","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/posts\/2535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/comments?post=2535"}],"version-history":[{"count":23,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/posts\/2535\/revisions"}],"predecessor-version":[{"id":2564,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/posts\/2535\/revisions\/2564"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/media\/2521"}],"wp:attachment":[{"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/media?parent=2535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/categories?post=2535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/tags?post=2535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}