A selection of this week’s more interesting vulnerability disclosures and cyber security news. While allowing free reign so that people can do their job like in these below, there does come a risk for all staff whether they have admin privileges or not. Staff may intentionally leak information even for innocent reasons such as emailing something to home so they can work on it over a weekend, though once such files are outside an area of control, all hope is lost. There are of course methods to prevent this like the use of VPNs but people being people will find ways around it. Of course the worst (as far as any IT department knows) comes from ‘above’ with requests that break the rules for everyone else ‘for this special situation’.
How do we as any member of staff, let alone as IT professionals, deal with intentional and unintentional leaks? At least education, and better still tools to allow any kind of company document freedom of movement within a flexible infrastructure that’s not going to stop people doing their jobs. It’s not easy I know, I’ve had to deal with a number of incidents in my career that have even surprised me at the ingenuity people have come up with to get around fail-safes! This is really not going to go away I think.
And the rest of the news….
- DomainMonster mash: Hundreds of websites vandalized after Brit web host server hacked (The Register)
