Binance just dropped their incident report knowing they'd get roasted by the community. But they still published it. Respect for the transparency.
That said, this social engineering attack via fake job recruitment? That's an expensive security lesson. This playbook is OLD. The fact it still worked shows gaps in team awareness and protocols.
Core tech and ops teams should NOT be working remotely with company devices that aren't properly isolated. Period.
I once interviewed a TradFi institution. Before they could even preview the content, their marketing team had to go through the cybersecurity department using specific devices to download files. Their personal laptops? Not allowed to touch ANY external content. Annoying? Sure. But that's what a real security perimeter looks like.
The whole industry needs to wake up and tighten security processes. This isn't optional anymore.
That said, this social engineering attack via fake job recruitment? That's an expensive security lesson. This playbook is OLD. The fact it still worked shows gaps in team awareness and protocols.
Core tech and ops teams should NOT be working remotely with company devices that aren't properly isolated. Period.
I once interviewed a TradFi institution. Before they could even preview the content, their marketing team had to go through the cybersecurity department using specific devices to download files. Their personal laptops? Not allowed to touch ANY external content. Annoying? Sure. But that's what a real security perimeter looks like.
The whole industry needs to wake up and tighten security processes. This isn't optional anymore.