Your new post is loading...
Rik Ferguson, Global VP Security Research at Trend Micro, blogs about current security issues.
|
Rescooped by Gust MEES from ICT Security-Sécurité PC et Internet |
Scoop.it!
Gust MEES's insight:
If you as an organisation ever have the misfortune to have to notify your customers of a breach,never include a link in the reset mail, it encourages insecure behaviour in your customer base and leaves them wide open to the inevitable phishing attacks that always follow this kind of event.
Always advise them to navigate to your site themselves and follow the on screen instructions that they will surely find there.
If you as an organisation ever have the misfortune to have to notify your customers of a breach,never include a link in the reset mail, it encourages insecure behaviour in your customer base and leaves them wide open to the inevitable phishing attacks that always follow this kind of event.
Always advise them to navigate to your site themselves and follow the on screen instructions that they will surely find there.