Monday, February 11, 2008

Security is not a tool

Recently published article from BankinfoSecurity.com, noticed a case in which information vulnerbailities are exploited without using any technical methods... but Information Security methods, like Social Engineering.

Nowdays, attacks to Information Security not only use technological ways; acts against social and procedural vulnerabilities (at this time without any kind of protection, as we are seeing) are currently exploited to get the same targets.

But "traditional" enterprises of security continues to advice on the importance of upgrading the operating system or installing a firewall and antivirus...

Security is not a tool.

No comments: