Reports of successful system penetrations involving theft of money and other valuable assets, destruction of critical data, and extortionate seizures of systems have appeared more and more frequently of late. And law enforcement bodies admit that most such crime goes either undetected or unreported. The negative publicity associated with reporting successful hacks is only serving to further deter victims from reporting incidents of cybercrime. It is a statement of fact that is unassailable. The fact that my company has a vested interest in this statement doesn't make it any less true.
Facts are facts.
We're simply saying that a sound security policy must begin with a secure foundation. And the implications of this statement are critical to understanding the core vulnerabilities of the Internet and Web. The vast majority of computer systems that comprise the infrastructure of the Internet and Web are running on commercial, insecure operating systems. These operating systems are vulnerable to attack by hackers. It happens every day.