Cyber Risks · Krebs on Security

Hacked Companies Hit by the Obvious in 2009

Summary: Verizon's 2009 breach report, which for the first time included U.S. Secret Service data, tracked 143 million compromised records versus 285 million in 2008, with 85 percent of records taken by organized criminal groups and 94 percent of records from breaches at financial services companies. The report found no confirmed intrusion exploited a patchable vulnerability; 85 percent of breaches involved configuration errors or weaknesses such as SQL injection, and 86 percent could have been prevented had victim companies looked for unusual patterns in their Web server logs.

What's compelling: The breaches were visible in logs the victims already had, yet 86 percent went unnoticed - and 27 percent were carried out solely by trusted insiders whose prior policy violations, such as illegal content on user systems, the report calls a reasonable indicator of a future breach.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related