Both well-meaning and malicious hackers fess up to why they hack, and list the best data exfiltration strategies and the least effective security tools.
The majority of white hat and black hat hackers said phishing is the best data exfiltration strategy because human error and ignorance will always be exploitable, according to a new study from Bitglass, ” Data Games: Security Blind Spots According to Experts.” Malware and ransomware ranked second. The hackers also said password protection, facial recognition and access controls are the three least effective enterprise security methods. “Phishing and malware are threats made all the more potent by cloud adoption and the ease with which employees can share corporate data,” said Mike Schuricht, vice president, production management at Bitglass. “Many security technologies fail to address IT’s largest blind spots—unmanaged devices and anomalous access.” The study concluded that “The fact that white hat and black hat hackers agree indicates the legitimacy of these security issues.” It recommends that enterprises adopt real-time security solutions with comprehensive data protection across all devices and applications. An estimated 100 attendees of the Black Hat 2017 conference participated in the survey.
