Report on industrial espionage shows attacks come through channels you wouldn’t expect

The Office of the National Counterintelligence Executive has released a report to Congress (publicly available below) that details threats US companies face from foreign agencies. I found it interesting that a large percentage of attacks are conducted through seemingly normal requests for information rather than outright hacking. It shows yet again that people can be a weak link not considered in many security programs. Don’t forget that after you invest all that money improving your IT security you also need to educate your users about security threats, both technological and social.

http://www.ncix.gov/publications/reports/fecie_all/