InfoWorld - Security Adviser: Why hackers don't need to be smart

Cyber criminals have used the same technologies and tactics for years, but companies keep failing to defend against them

By Roger A. Grimes
SEPTEMBER 20, 2011

Online, in print, on TV, and on the radio, report after report claims that malicious hacking is "more sophisticated than ever before." The media seemingly wants the world to believe it's besought by impossible-to-stop uberhackers with supersophisticated tools and skills.

The reality is far different: Malicious hackers are using pretty much the same old tools and exploiting the same old weaknesses. However, companies and end-users aren't doing what they need to defend themselves. Anyone who promotes today's attackers and their tools as near-invincible is doing a serious public disservice.

Click the URL above to read the full article