In Verizon's newest "Data Breach Digest," the companion to its annual breach report, researchers said that 90 percent of the data-loss incidents the team investigates have a "phishing or social engineering component" to them, BankInfoSecurity reports. User credentials are often the hot-ticket data for hackers, who sell the information on the dark web to those looking to masquerade as actual employees on company networks. "Because organizations don't have multifactor [authentication] rolled out, it makes it trivial to get in," said Verizon Director of Global Investigative Response Chris Novak, speaking at the RSA Conference.
Full Story