New research from IT penetration test specialist Coalfire has revealed that midsized businesses are outperforming their larger competitors as a result of a security 'sweet spot'. Its first annual Coalfire Penetration Risk Report reveals that although larger enterprises have bigger budgets and resources, they are not the best prepared to protect against cybercrime.
While large organisations are still the best at protecting themselves against phishing and other social engineering attacks, the report found a cybersecurity sweet spot among midsized businesses which performed best at protecting their assets and mitigating their security risks in tests.
To compile its report, Coalfire performed 300 penetration tests on 148 companies worldwide to discover that despite having the largest cybersecurity budgets, large enterprises are not the most secure overall.
Across both large and small enterprises though, employees remain companies' biggest weakness either through human error or in creating opportunities for social engineering hacks.
Coalfire discovered that out-of-date software, insecure protocols, misconfiguration and password flaws were the greatest threats to external networks while insecure protocols, password flaws and patching flaws were the top vulnerabilities in internal networks.
The full report is available here.
BA, Marriott Face Massive Fines For Data Loss
If proof was needed that poor data protection is bad for the corporate wallet, two examples have demonstrated that substantial fines face those organisations that have lax data security.read more
Cumbria First Police Force To Utilise NMC Tools
Cumbria Constabulary has become the first police force to use the National Management Centre (NMC) for cybersecurity set up under the National Police Chiefs’ Council (NPCC).read more
Phishing Attacks Bypassing 2-Factor Authentication
Penetration testers and attackers have a new tool in their arsenal that can be used to automate phishing attacks in a way that defeats two-factor authentication (2FA) and is not easy to detect and block, reports CSO Magazine.read more
Third of Breaches Caused By Unpatched Vulnerabilities
IT security professionals have admitted that a third of cybersecurity breaches are the result of vulnerabilities that they should have patched.read more