Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News

5/13/2016
10:55 AM
Sean Martin
Sean Martin
Slideshows
Connect Directly
LinkedIn
RSS
E-Mail
50%
50%

Happy Blame Someone Else Day

In cybersecurity, each day a company experiences a data breach, it appears to be #BlameSomeoneElseDay
Previous
1 of 14
Next

Image Source: imsmartin

Image Source: imsmartin

Today is an unusual day, for sure. It’s most likely a holiday most of us have missed. Even though it takes place on Friday the 13th, it’s not about being superstitious. It’s actually about blaming someone else.

So, here’s to you—Happy Blame Somebody Else Day!

What is this holiday, you ask? National Blame Someone Else Day is an “unofficial” national holiday always celebrated on the first Friday the 13th of the year. It was invented due to an alarm clock failing to go off, hence creating a domino effect of bad luck events throughout the day.

According to the National Day Calendar, the way to celebrate is self-explanatory in the name, and not much more needs to be said. If you don’t want to blame someone, you can choose to place the blame on something.

Speaking of blame, “accountability in security” is an ongoing issue. It seems that internal teams at organizations are always trying to point the finger elsewhere if something bad occurs—especially if the organization is a victim of an attack. This brings to mind the old adage “When You Point a Finger at Someone, There Are Three More Pointing Back at You” —Unknown.

The actual visual would be a room full of people pointing at each other, no one accepting responsibility.

In cybersecurity, the day a company experiences a data breach appears to be their very own #BlameSomeoneElseDay:

  • Blame Poor or Missing Risk Assessments
  • Blame a Lack of Funding
  • Blame the Tools
  • Blame Bad Behavior
  • Blame a Lack of Communication
  • Blame a Poor Reporting Structure
  • Blame the Lack of Awareness
  • Blame the Bad Decision(-Maker)
  • Blame the Short-Term Fix
  • Blame a Lack of Metrics
  • Blame the Third-Party Vendor
  • Blame Everybody Else
  • Blame a Magician

The team at imsmartin would like to thank the experts from the following companies that helped to make this “lucky 13” slideshow possible: Armor, Citrix, Palo Alto Networks, Rook Security, and WhiteHat Security.

Each expert shared their thoughts on where blame occurs and why blaming someone or something else is a bad idea …. even if it happens to be on Blame Someone Else Day.

In case you were wondering, the official hashtag for this holiday is #BlameSomeoneElseDay.

 

Sean Martin is an information security veteran of nearly 25 years and a four-term CISSP with articles published globally covering security management, cloud computing, enterprise mobility, governance, risk, and compliance—with a focus on specialized industries such as ... View Full Bio

Previous
1 of 14
Next
Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
Data Privacy Protections for the Most Vulnerable -- Children
Dimitri Sirota, Founder & CEO of BigID,  10/17/2019
Sodinokibi Ransomware: Where Attackers' Money Goes
Kelly Sheridan, Staff Editor, Dark Reading,  10/15/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
2019 Online Malware and Threats
2019 Online Malware and Threats
As cyberattacks become more frequent and more sophisticated, enterprise security teams are under unprecedented pressure to respond. Is your organization ready?
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-18202
PUBLISHED: 2019-10-19
Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check for the existence of paths and file names via crafted HTTP requests.
CVE-2019-18209
PUBLISHED: 2019-10-19
templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer.
CVE-2019-18198
PUBLISHED: 2019-10-18
In the Linux kernel before 5.3.4, a reference count usage error in the fib6_rule_suppress() function in the fib6 suppression feature of net/ipv6/fib6_rules.c, when handling the FIB_LOOKUP_NOREF flag, can be exploited by a local attacker to corrupt memory, aka CID-ca7a03c41753.
CVE-2019-18197
PUBLISHED: 2019-10-18
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclo...
CVE-2019-4409
PUBLISHED: 2019-10-18
HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the entere...