Last week’s publication of the SANS Top 20 confirms a surge in sophisticated zero-day attacks on users and web applications. It should be seen as a wake-up call for those organisations who think security can be left to their IT operations staff. A new approach is needed.
http://www.computerweekly.com/blogs/david_lacey/security-threats/