this post was submitted on 15 Jul 2024
543 points (96.3% liked)

Cybersecurity - Memes

1977 readers
2 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago
MODERATORS
Sam1232188
neurohost
[email protected]
[email protected]
CannaVet
543
Phishing (feddit.org)
submitted 4 months ago by [email protected] to c/cybersecuritymemes
22 comments fedilink hide all child comments
 

If a single click on a phishing email can ruin the entire company, the blame doesn't lie with that individual.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 40 points 4 months ago

True, in many cases there is a whole chain of vulnerabilities and misconfigurations, and everything starts with one phishing mail. For example:

  • successful phishing
  • VPN without 2FA, allowing the attacker access to company services
  • internal services with vulnerabilities, allowing the attacker to compromise a server
  • permission misconfiguration, allowing lateral movement

That was the point of this meme. It is not phishing alone that gets the company in trouble, its mostly a series of misconfigurations.

I think that in cyber security, we have to assume that phishing will be successful sometimes - and be prepared when it happens.