Hackers target Disney

Now for something directly in my wheelhouse.

Hackers demand ransom from Disney

What's the story here? That, yet again, hackers have penetrated the network of an entertainment powerhouse? That, yet again, hackers are demanding a ransom lest they release stolen content early?

No. That, yet again, IT security is being treated as a second hand citizen. That it is an afterthought. Too often I have seen the attitude that if it gets hacked it could be re-built easily. What has happened is not a failure of the technology, but it is a security failure. People security.

People are the weak link in the Media & Entertainment space. Social engineering, phishing, even bribery. People in the industry are under attack. Special attention needs to be made to awareness programs. I have worked in the industry, in my experience some of the most security conscious people I have ever met are from the Media & Entertainment space. These are the people on the coal face, the people who, in one way or another, are involved in the creation of the content.

When it comes time to the marketing, I've found that these people are more interested in the distribution, the marketing, the general dissemination of the content. By any means necessary. Not necessarily those that are company approved.

How to prevent this hacking in the future. Make EVERYONE invested in ownership on the content; if they will listen. And just like we do fire drills as practice in case these was ever a fire, we need to do fire drills for security. And this is just the beginning.

Comments

Popular Posts