Virtually all cybersecurity breaches both by volume and by severity are via trivially preventable problems (reused passwords, failing to update, failure to use minimum standards), not anything particularly sophisticated
Reposted from
Patricia Sauthoff 司徒雛菊
What is common knowledge in your field, but shocks outsiders?
Alchemy is about medicine and science way more than it is about magic.
Alchemy is about medicine and science way more than it is about magic.
Comments
An application server or a web server is never a physical device. It is a piece of software that you can have installed on your laptop.
1: Keep things up to date
2: Use a password mananger
3: Use a security key
4: Keep everything backed up
https://xkcd.com/2176/
It's a closed loop system.
Antagonizing users won’t get you the gains you want.
Evidence for that assumption is mixed.
https://link.springer.com/article/10.1186/s13673-020-00237-7
Simulated phishing isn’t consistently more effective than other training methods, but is likely to reduce trust in the IT org and the parent institution.
There are still recovery mechanisms, which have been abused, but that’s a smaller surface area.
Technology solutions can (and do) mitigate or eliminate several categories of social engineering risks
"Act like you own the place"
Or, when someone tries to stop you, with a commanding tone, say "That's a stupid question"
That kinda thing.
My own bias left me with the latter as the presumed blame…