Security awareness is a term that often makes IT security pros cringe. It brings to mind images of mind-numbing training or of ineffectual posters and stress balls urging employees to change their passwords frequently.
Once again the Syrian Electronic Army (SEA) has claimed yet another victim, this time the Washington Post, CNN and Time websites. But, in this case the group went one step further and manipulated the links that appeared on the media groups’ own webpages.
"I think that there is a bigger picture to look at here. The Joomla CMS is just another example of a 3rd party application being vulnerable due to lack of security ownership.
We have been looking deeply into CMS systems such as WordPress, Joomla and others lately. There is a clear appetite for hackers to look into vulnerabilities in CMS software, and more important – custom plug-ins. There have already been several studies showing both the consumer growth of the CMS deployment, but also the vulnerable stage of it. This extends to more than just CMS systems, but to every piece a of 3rd party application that one might implement in their organization. And while bringing the organization forward in technology, all of a sudden you lack patch control. You have to rely on the vendor to execute security best practices. Unfortunately we live in a world where security is yet to be something you outsource completely.
To expose official corruption in Nigeria, re-orientate the psyche of Nigerians and usher in the Nigerian renaissance
Have you got news/articles for us? We welcome news stories and articles from security experts, intelligence analysts, industry players, security correspondents in the main stream media and our numerous readers across the globe.
Vigilance is the brain child of a group of veteran journalists and international scholars who have worked in the mainstream media and distinguished themselves nationally and internationally before veering into security practice.
We have 191 guests and no members online