Cyber Risks · Krebs on Security

The Value of a Hacked Company

Summary: Krebs on Security argues that most organizations only grow in security maturity after a costly data breach, because few leaders grasp how much of their strategic assets depend on computer and network security. The post notes that opportunistic mass-mailed malware infections can now morph into sustained problems, that cybercriminals harvest and test stolen credentials to sell access to organized crime groups, and that Dark Web forums let disgruntled employees sell access to their employer's systems.

Why it matters: The article's central stake is that organizations often spend only what compliance obligations such as HIPAA or PCI require, while real security means rapidly detecting and responding to intrusions and closing weak spots before attackers exploit them. It also points to insiders: open and anonymous crime forums now serve as a marketplace where employees can sell access to their employer's systems or data.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related