http://www.infosecurity-magazine.com/news/one-in-every-3-top-websites-are/ What it means is Forbes.com has been used for a zero-day malware dissemination. The reason hackers are using top websites is that they are classified as “safe” sites in sitecheck.sucuri.net for example. But a major site would be expected to have no malware. this is what is called a watering hole attack. Wikipedia explains in this … Read more
Here is yet another article pleading you to do something: http://www.darkreading.com/risk/6-ways-the-sony-hack-changes-everything-/a/d-id/1319415 The article paints a dark picture. The Sony hack was unique in that the hackers actually deleted files, caused employees to not be able to work at the office for a little while, although nothing appreciable happened at the Sony stock price. What … Read more
(Weekend Edition) I was going to start with “Crisis of Confidence” but our executives are not lacking confidence, I think it is a lack of understanding of theNEW reality of the conundrum we are in as far as Cyber Security goes. This article is also in the language of the executives: The LegalIntelligencer Why Cyberrisk … Read more
Why are we so Slow to Detect Data Breaches?: http://www.darkreading.com/attacks-breaches/why-are-we-so-slow-to-detect-data-breaches/d/d-id/1139970? I like this quote: {“The longer it takes to respond, the more firmly rooted the attacker will become, and more difficult and costly it will be to find and remove all of their implants,” says James Phillippe, leader of threat and vulnerability services for the … Read more
The story at Quartz.com: http://qz.com/356274/cybersecurity-breaches-hurt-consumers-companies-not-so-much/ The reason is that the retailer themselves are not fully liable, since the financial institutions that issued the credit and debit cards had to reissue the cards hackers are out there. And of course Sony: “The now infamous Sony breach supposedly perpetrated by North Korea at the end of … Read more