Cyber Security Today – How firms plan for cyber attacks, the failings of cybersecurity companies, Artech hit by ransomware and email bomb threats return
Monday, September 14, 2020
Speaking of cybersecurity companies, they are expected to be places where employees are smarter than the rest of us. Not really. A security company called Immuniweb found these people are just as human as the rest of us. Researchers hunted through data available for sale on criminal web sites from 398 cybersecurity companies and found almost all of them have been victimized in some way since 2012. On average researchers discovered 1,500 stolen passwords and other sensitive data per company. Of the passwords found, 29 per cent could be classified as weak including re-used identical passwords. To be fair, some of those may have been used eight years ago when organizations weren’t as serious as they are today about enforcing the use of strong passwords. Many of the 631,000 verified incidents over the eight-year span came from hacks of suppliers and contractors of the cybersecurity companies. Immuniweb CEO Ilia Kolochenko called the research alarming and shows even cybersecurity companies aren’t immune from attack. Read Full Article
CIO: Les prestataires de cybersécurité sont-ils des cordonniers mal chaussés?
SC Media: History shows, transparency can ease the fallout from a cyberattack