What kind of security threats do social networking sites pose to the enterprise?
Vishal Dhupar: The threats posed by social networking sites are generally the same for consumers and enterprise users. First, people often divulge considerable amounts of personal information on these sites, including details about their employment. Attackers use information gathered from social networking sites to carry out targeted social engineering attacks, tricking victims into downloading malware or into divulging sensitive company information. Another threat to consider is the possibility that the site itself could get compromised. If an attacker is able to compromise the social networking site with malicious code, any visitor to the site would be susceptible to attack. Hackers have also found ways to insert malicious code into advertisements, which are often provided to social networking sites through third party vendors. CIOL: Aside from phishing and other targeted attacks, how are social networking sites used to propagate malicious code? VD:Social networking sites provide use
