The SANS Institute report on the state of security circa 2007 is enough to make you want to pull your Ethernet cord out.

State of Security

In a November 2007 article, SANS Institute Paints Gloomy Security Picture, Larry Dignan, executive editor of ZDNet news and blogs, wrote, "The SANS Institute report on the state of security circa 2007 is enough to make you want to pull your Ethernet cord out. Is anything out there secure?"" He referenced the SANS Top-20 2007 Security Risks which is described as a consensus list of vulnerabilities that require immediate remediation.

The media has no shortage of data security related articles. Some of the more noteworthy articles can be found below and on the Predictions, Analysis and Breaches tabs above.

• New Identity Theft Study Meets Mixed Reviews, March 2008, "Reactions among bankers, regulators and consumer groups range from nonplussed to angry."
• Top Banks Named in New Identity Theft Study, February 2008, "Shocwaves rumbled through the US banking industry this week with the release of a new report estimating the annual incidnets of Identity Theft associated with the nation's top banks."
• Security Pros Confused Over Authentication, February 2008, "Research suggests 70 percent of corporate authentication systems are insecure."
• IBM Internet Security Systems X-Force 2007 Trend Statistics, January 2008, "According to X-Force observations, many new and surprising trends surfaced during 2007. The implications of these trends provide a useful backdrop in preparing to enhance information security in 2008."
• Internet Security: What Will Work, January 2008, "Here's a radical plan for making the Internet safe for every legitimate user."
• Information Security Management Still Number One Concern, January 2008, "Information Security Management will be the most important initiative affecting IT strategy, investment and implementation in business organizations over the next 12-18 months, according to the American Institute of Certified Public Accountants' 19th Annual Top Technology Initiatives survey."
• Half a Million Database Servers 'Have No Firewall', November 2007, "With no firewall, databases are exposed to hackers, putting corporate data at risk."
• 10 IT Security Companies to Watch, October 2007, "Data-leak prevention, behavior-based malware detection among focus areas." 2factor made the list!
• Strategic Security: Get a Handle on Authentication, February 2007, "One rational, standardized authentication policy across the organization will make all your applications more secure."