I'm getting extremely fed up with the victim-blaming in InfoSec. Nobody has a security budget that exceeds their attack surface, and few companies have sufficient staffing. So who's "fault" is that breach exactly?

Oct 26, 2021 · 4:04 PM UTC

3
2
25
Replying to @hal_pomeranz
More of us should think something like: ‘There, but for the grace of ….’
Replying to @hal_pomeranz
sounds like excuses not to do anything to me.
Replying to @hal_pomeranz
We can't even agree to not blame users who click links -- a core part of their work duties. There's great swaths of this industry that should reconsider what it means to be customer focused.
4