Increasing amounts of breaches. Increasing amounts of threats. How are you handling it?

Another week... another set of breaches.  Yesterday, Facebook released core information around removing bad actors from their network.  Today, Reddit announced that they were breached back in 2007. Tomorrow... who knows? I’ve had the fortune of working in Information Technology for over 20 years.  In that time, I’ve realized that this industry is constantly evolving. However, the recent and rapid adoption of cloud-based services has caused a disruption at a magnitude that I had not yet seen.  Unfortunately, it is also happening at a rate that isn’t properly allowing Information Security groups to properly gauge the security ramifications. When I first entered this industry, networks were far easier to secure.  We had differentiating operational goals, but what we secured were largely single, flat, and enormous networks with only a handful of entry points.  All data and assets lived within that one or two physical environments with their own dedicated controls.…

0 Comments

Attribution is hard. Facebook releases indicators of tampering.

Live thread... In the coming days, we will dissect the statements made and give commentary on our own investigations. We’re still in the very early stages of our investigation and don’t have all the facts — including who may be behind this. But we are sharing what we know today given the connection between these bad actors and protests that are planned in Washington next week. We will update this post with more details when we have them, or if the facts we have change. Read Facebook's Statement

0 Comments