3 ms·
'One of the most dangerous financial criminal groups' responsible for MGM attack
- Veserv 3y agoJust another story implicitly playing up a group as a highly sophisticated threat actor that has capabilities more advanced than the defender threat model expects so they can not be blamed for the harm. But if this keeps happening to you and your peers hundreds of times per week, then that is not a “threat actor with unexpectedly advanced capabilities”, that is a routine attack. You must be able to defend against routine attacks to fit any notion of security. If you are routinely targeted by state actors, then your threat model must include state actors and you must be able to defend against state actors. If you and your peers are routinely targeted by organized crime, then you must include and defend against such threat models. Making your threat model match your security so you can claim anything beyond your security is out of scope is incompetence at best, and fraud at worst. It is high time we stop giving these companies a pass on this.