article thumbnail

Who is your biggest insider threat?

CSO Magazine

Penetration testing has shown cybersecurity manager David Murphy just how problematic people can be. In his career, he has seen people pick up and use dropped thumb drives, give up passwords over the phone and, yes, even click on simulated phishing links. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ].

article thumbnail

Top Cybersecurity Accounts to Follow on Twitter

eSecurity Planet

Through tenures at Citrix, HP, and Bugcrowd, Jason Haddix offers his expertise in the areas of penetration testing , web application testing, static analysis, and more. Street is an expert in penetration testing, detection and response, pen testing, and auditing and co-author of Dissecting the Hack: The F0rb1dd3n Network.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

A CISO's Guide to a Good Night's Sleep

SecureWorld News

CISOs worry about the latest incident, end of life technology in their environment, breaches in the news, insecure users and vendors, penetration testing results, budget and resources, and the latest vulnerability report (to name a few). Did end-user training really teach the fundamentals to avoid a phishing attack?

CISO 74
article thumbnail

Camera tricks: Privacy concerns raised after massive surveillance cam breach

SC Magazine

“When an attacker gains access to surveillance cameras, the amount of knowledge which stands to be gained could be vast and poses a very real physical security threat,” said James Smith, principal security consultant and head of penetration testing at Bridewell Consulting. Look at the Mac operating system.

article thumbnail

Cyber Security Awareness and Risk Management

Spinone

Social engineering attacks , including phishing, spam, and viruses introduced via clickable links within e-mail affected 80% of the banking institutions in 2016. VoIP phishing and impersonation also victimized millions of corporate employees across the world , contributing to an even greater cyber threat.