{"id":578,"date":"2016-01-03T02:00:56","date_gmt":"2016-01-03T01:00:56","guid":{"rendered":"https:\/\/www.boc.de\/watchguard-info-portal\/?p=578"},"modified":"2016-06-16T17:18:21","modified_gmt":"2016-06-16T15:18:21","slug":"watchguard-security-vorhersage-2016-2-es-ist-eine-falle","status":"publish","type":"post","link":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/2016\/01\/watchguard-security-vorhersage-2016-2-es-ist-eine-falle\/","title":{"rendered":"WatchGuard Security Vorhersage 2016 #2 – Es ist eine Falle"},"content":{"rendered":"\n\n\n
<\/td>\n\n

WatchGuard Security Prediction #2 \u2013 It\u2019s a\u00a0Trap<\/u><\/a><\/h2>\n

by Corey Nachreiner<\/u><\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Security professionals spend a lot of time trying to plug the technical security gaps in their organization\u2019s IT infrastructure. We find and fix software vulnerabilities, tighten our network security controls, and monitor the latest malware samples and exploits to try and ensure a hacker can\u2019t leverage them against our systems. However, if you look at most of the advanced network breaches over the past few years, they have one thing in common \u2013 and it\u2019s not technical. They all started with spear phishing, which is a social, user issue.<\/p>\n

Let\u2019s hypothetically assume you could fix every technical security problem a network faces. Your software is perfect, your network only allows the things you want, and your access controls only let people you know access the things they need. Would this prevent all attacks? No. Rather, bad guys would simply change their focus and instead try to trick one of your trusted users into doing something they shouldn\u2019t, in hopes of gaining that user\u2019s privileges.<\/p>\n

Cyber criminals have realized this over the last few years, as our defenses have gotten more advanced. To counter our technical defense, they have increased the reconnaissance capabilities and started to target our specific users with very convincing and customized social engineering. Next year, we believe this trend will grow; and many of the breaches will start with a targeted attack on your organization\u2019s users.<\/p>\n

Visit our\u00a0WatchGuard security predictions site<\/u><\/a><\/p>\n

\u2014\u00a0<\/em><\/strong>Corey Nachreiner, CISSP<\/u><\/em><\/a>\u00a0(<\/em>@SecAdept<\/u><\/em><\/a>)<\/em><\/p>\n