Credit Reporting Security

Enhancing Credit Management Security at ERN

Background:

ERN, established in 2001 by Rony Natanzon, is a leader in Israel’s financial services industry, specializing in check processing and payment obligations. The company, now co-owned by the Natanzon Family and Menora Mivtachim Holdings, provides critical services like check guarantee and financing solutions. ERN has become integral to Israel’s financial infrastructure with its financial transactions and client data handling expertise.​

The Challenge:

ERN faced critical cybersecurity challenges in safeguarding its intricate credit management systems. The vulnerabilities in their network posed severe risks, including the potential leak of sensitive client data and financial information, which could undermine their reputation and operational integrity.

The Solution:

RedRok’s Insight was deployed to enhance ERN’s cybersecurity framework. Insight’s capabilities were crucial in addressing several vital vulnerabilities:

• Escalation of user permissions: Insight identified and mitigated instances where user permissions could be escalated, preventing unauthorized access.
• Lateral movements in the domain: The tool detected and restricted unauthorized lateral movements within ERN’s network, safeguarding sensitive data.
• Service vulnerabilities: Insight was instrumental in identifying and rectifying services within the domain that were improperly shut down after sessions.
• Operating system updates Insight assisted in creating a comprehensive list of operating systems needing upgrades or updates, ensuring the latest security features were in place.
• Open CVEs and vulnerable processes: The tool efficiently tracked down services with open CVEs (Common Vulnerabilities and Exposures) and vulnerable running processes, facilitating prompt remediation.

Project Benefits

The implementation of RedRok's Insight led to significant enhancements in ERN’s credit management cybersecurity:

• Strengthened data security protocols, especially concerning sensitive financial data.
• Enhanced network integrity and reduced risk of unauthorized data access.
• Proactive identification of system vulnerabilities, leading to timely updates and patches.