Without needing to display a name badge or pass, the tester was able to “easily gain access” into the building through a back door that was left open for smokers, the firm said
Once inside, the tester used the social banter of smokers to help gain directions to a meeting room, amid claims he had been summoned by the IT department. (More...)
Hattip to Schneier.
No comments:
Post a Comment