Stupid Users Are the Weakest Link In Network Security

[Kristijntje]

Hackers and cyberspies have shifted their focus and moved away from the widespread malware attacks that exploited software-based vulnerabilities in favor of more targeted assaults that rely upon unsuspecting users' gullibility and custom-built applications, the report states.

"For most large and sensitive organizations, the newest risks are the ones causing the most trouble," said Alan Paller, director of research at SANS. "The new risks are much harder to defend; they take a level of commitment to continuous monitoring and uncompromising adherence to policy with real penalties that only the largest banks and most sensitive military organizations have so far been willing to implement."

Spyware infections, including keystroke loggers, are among the most commonly used forms of malware found on compromised systems. Since January, there has been a 183 percent increase in Web sites "harboring spyware,"...

full article: http://ecommercetimes.com/story/Network-...60520.html