by Mike Masnick
Fri, Aug 3rd 2007 5:02pm
The IRS has had problems modernizing their computer system in the past, but no matter how modern your computer system is, security is weak if your employees are easily duped through social engineering techniques. A new study found that 60% of the employees they tested were willing to hand over sensitive info to a person calling and posing as IRS tech support. This type of social engineering happens all the time, but it seems especially worrisome that so many IRS employees would be so willingly giving out info when they have access to so much confidential info and should be especially aware of the threat. In fact, the report notes that similar tests were done in 2001 and 2004 and the IRS promised to put in place measures to prevent these types of tricks from working. Apparently, that hasn't really happened.
If you liked this post, you may also be interested in...
- Bruce Schneier Sounds The Alarm: If You're Worried About Russians Hacking, Maybe Help Fix Voting Machine Security
- The Internet Of Things Is a Security And Privacy Dumpster Fire And The Check Is About To Come Due
- Half Of TSA's 30,000 Employees Accused Of Misconduct; Nearly A Third Multiple Times
- Police Slowly Waking Up To Fact That Vehicle Network Security Is A Joke To Hackers, Thieves
- TSA Scores Another PR Win With Assault Of Nineteen Year Old Brain Tumor Patient On Her Way To Treatment