Terex Corporation Gains Visibility Into External Threats And Eliminates Phishing

INDUSTRY HEADQUARTERS COMPANY SIZE

Manufacturing Norwalk, Connecticut, 10,000 + employees USA

OVERVIEW OUR SOLUTION

Terex is a global manufacturer of materials processing machinery and aerial work platforms. The company designs, builds and supports products used in construction, maintenance, manufacturing, energy, recycling, minerals and materials management applications. Certain Terex products and solutions enable customers to reduce their environmental impact including electric and hybrid offerings that deliver quiet and emission-free performance, support renewable energy, and aid in the recovery of useful materials from various types of waste. Terex’s products are manufactured in North America, Europe, Australia and Asia and sold worldwide.

Our experience with Infinity ERM has been eye-opening.

Evans Duvall, Cyber Security Engineer at Terex

CHALLENGE

After detecting several unsuccessful phishing campaigns targeting the company, Evans Duvall, Cyber Security Engineer with Terex, was tasked with finding a solution which provides visibility into the external attack surface. Evans and his team were evaluating several vendors and found the Infinity ERM solution was best suited to their needs. This was realized during the Infinity ERM PoC with Terex, where the degree of visibility and actionable insights the solution delivered exceeded their expectations.

SOLUTION

The team immediately started acting on the insights that Infinity External Risk Management (ERM) delivered, dramatically improving cybersecurity posture. Leveraging threat intelligence tailored specifically for Terex’s external-facing assets, the team was able to use findings to back its communication with IT as to what needed to be done, monitor progress, and continuously improve the organization’s overall posture. “We have been able to gather great intel with Infinity ERM,” Evans commented. “We knew we had exposure from an email standpoint for some of our domains. It allowed us to provide evidence to our global infrastructure team in order to speed up the remediation process.”

OUTCOME

Upon completion of the Attack Surface Management module’s autonomous discovery, the relevant threat intelligence – sourced from the open, deep and dark web - was mapped to Terex’s specific exposed assets. With the help of the Infinity ERM’s team of analysts, the findings were sanitized, training the algorithm and gradually reducing false positives down to minimum-laying the foundation for proper performance benchmarking and measurement. Because Terex is a global company and with multiple product lines, assets, and domains, the ASM module allows us to understand what’s really going on and the best course of action to take,” Evans noted.

We have a really good relationship with customer support and the analyst teams. We are constantly being alerted about things to respond to. Because we’re a small team they are like an extension of us -

which really helps from a risk management standpoint.

Evans Duvall, Cyber Security Engineer at Terex

“The visibility we gained allowed us to educate other teams within the organization as to the level of risk and start the conversation about remediation.” In addition to gaining visibility, Infinity ERM’s analyst support helped Evans and his team to properly respond to threats, mainly existing or emerging campaigns.

ABOUT CHECK POINT

Check Point Software Technologies Ltd. is a leading AI-powered, cloud-delivered cyber security platform provider protecting over 100,000 organizations worldwide. Check Point leverages the power of AI everywhere to enhance cyber security efficiency and accuracy through its Infinity Platform, with industry-leading catch rates enabling proactive threat anticipation and smarter, faster response times. The comprehensive platform includes cloud-delivered technologies consisting of Check Point Harmony to secure the workspace, Check Point CloudGuard to secure the cloud, Check Point Quantum to secure the network, and Check Point Infinity Core Services for collaborative security operations and services.