The Syrian Electronic Army successfully infiltrated CNN.

CNN SEA Tweet

The SEA  posted fake content on

  • @CNN
  • @NatlSecurityCNN
  • @CNNSitRoom
  • @CNNPolitics
  • CNN’s official Facebook page
  • CNN’s Security Clearance blog
  • CNN’s Political Ticker blog

This demonstrated the SEA’s ability to infiltrate organizations at will.  Mashable is reporting that soon after seeing CNN reports critical of the Assad regime, the SEA decided to hack CNN. Soon after making this decision, the SEA seized the assets listed above.  How do they do it? Spearphishing.  Mashable quotes Dave Lewis, a security advocate at Akamai Technologies,

People are the soft chewy center of the security landscape.

If you can’t purge people from your organization, what can you do?  You might try training them.  But training does not make people more effective at avoiding deception.

Spearphishers deceive people into making bad email decisions that compromise security. IT needs to help employees make better email processing decisions. That is where SP Guard comes into play. Using SP Guard, IT can determine a list of trusted senders and provide this information to staff in a simple and highly effective manner.

You can contact us at  408-727-6342,ext 3 or use our online form.