this post was submitted on 24 Dec 2023
344 points (99.4% liked)

Technology

58133 readers
4486 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 11 points 9 months ago (2 children)

While true, I'm not convinced that fully explains it. Having been in IT nearly 2 decades I feel like the second piece is cybersecurity budgets getting slashed. A lot of them have been super-basic shit like someone clicking on a malicious link.

[–] [email protected] 5 points 9 months ago

Yeah, some youtube videos that cover basics and hiring a firm after a breech is pretty standard it feels.

[–] [email protected] 3 points 9 months ago

Oh for sure, didnt mean to imply it was the only reason.

Spearphishing high-value targets, or even just phishing a company's email roster are very very common practices because they yield significant results.

Theres also the "insurance approach" to cybersecurity, where its cheaper to run PR for a little while and/or take out insurance policies against cyber attacks such as ransomware. The latter is a key factor as to why many companies dont mind paying the ransom at all.