{"id":41010,"date":"2021-05-21T13:53:09","date_gmt":"2021-05-21T13:53:09","guid":{"rendered":"http:\/\/904e4454-03ca-4de1-bd97-f97ccdd3acf5"},"modified":"2021-05-21T13:53:09","modified_gmt":"2021-05-21T13:53:09","slug":"businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/","title":{"rendered":"Businesses are getting better at security. But they&#8217;re still forgetting one big risk"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/hub\/i\/r\/2020\/11\/23\/fa0e49d2-ce32-4d9e-bce5-9b387a9db3ac\/thumbnail\/770x578\/8cd385dfaffe3cae58a97a04e21445a1\/security.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<p>With major cyber attacks on critical infrastructure such as <a href=\"https:\/\/www.zdnet.com\/article\/microsoft-solarwinds-attack-took-more-than-1000-engineers-to-create\/\">the SolarWinds attack<\/a>, the <a href=\"https:\/\/www.zdnet.com\/article\/hacker-modified-drinking-water-chemical-levels-in-a-us-city\/\">Florida&#8217;s water treatment facility<\/a> hack, and the <a href=\"https:\/\/www.zdnet.com\/article\/colonial-pipeline-ceo-paying-darkside-ransom-was-the-right-thing-to-do-for-the-country\/\">US East Coast&#8217;s Colonial Pipeline<\/a> ransomware crisis, the security of products \u2014 and not just information systems \u2014 really need to be taken more seriously, argues Chris Wysopal, founder and CTO of code scanning company Veracode. &nbsp;<\/p>\n<p>While the CISO protects information in the enterprise, Wysopal is arguing this week at the RSA 2021 conference that products need an equivalent level of attention to enterprise information systems. His call for greater focus on product security comes as supply chain attacks are on the rise and <a href=\"https:\/\/www.zdnet.com\/article\/supply-chain-hacking-attacks-government-eyes-new-rules-to-tighten-security\/\" target=\"_blank\" rel=\"noopener noreferrer\">governments across the world attempt to grapple with the problem of products that have been tampered with enter an organization<\/a>. &nbsp;<\/p>\n<p>&#8220;Products are different. Products leave the enterprise. Think of Tesla&#8217;s product security. It&#8217;s the car. You could think of a medical device company, but even in more information-oriented companies, it&#8217;s an app, it&#8217;s a standalone website and they&#8217;re starting to become outside of the enterprise. They have a life of their own,&#8221; Wysopal tells ZDNet.&nbsp;<\/p>\n<p><a href=\"https:\/\/en.wikipedia.org\/wiki\/Chris_Wysopal\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">Wysopal<\/a>&nbsp;is notable figure in the cybersecurity scene, and was one of the original vulnerability researchers and one of seven member of the L0pht &#8216;<a href=\"https:\/\/www.hsgac.senate.gov\/imo\/media\/doc\/thompson051998.pdf\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">hacker think tank<\/a>&#8216; who told the US Senate in 1998 that the group could bring down the internet in 30 minutes.<\/p>\n<p>Wysopal reckons products like these need a C-level exec with a better engineering skillset than a CISO typically has \u2014 a role more focused on monitoring networks and systems to keep hackers out.&nbsp;<\/p>\n<p>&#8220;Historically, a CISO has not been required to build in security in to a piece of software or a device,&#8221; he says.&nbsp; &nbsp;<\/p>\n<p>&#8220;The traditional CISO doesn&#8217;t have that security engineering and product engineering background. They traditionally have grown up through compliance or network security, and they don&#8217;t have the understanding of software or code-level vulnerabilities. So you&#8217;ll have a lot of times where you have product security not reporting to a CISO, but reporting to the VP of engineering.&#8221;<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_zd_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\"> <\/section>\n<p>At Veracode, the CISO reports to him as the CTO, while his head of product, which sits at a director level, also reports to him.&nbsp;<\/p>\n<p>&#8220;Product security is a separate function, even at Veracode. And we&#8217;re a software-as-a-service company. We don&#8217;t ship any products or anything IoT, which I think really requires an elevated product security person.&#8221;<\/p>\n<p>&#8220;It&#8217;s more important than the security of the rest of the business,&#8221; he argues, adding that at some point, apps become the product rather than just an extension of backend systems. This is relevant to the banking, insurance, retail, government and other sectors that now create apps that differentiate the business amongst competitors.&nbsp; &nbsp;<\/p>\n<p>&#8220;The risk of that software starts to become more important,&#8221; he says. And attackers are getting ever smarter, as shown by the SolarWinds attack.<\/p>\n<p>&#8220;When someone is planting a sophisticated backdoor, you&#8217;re not going to be able to detect it just by looking at the code,&#8221; he says.<\/p>\n<p>&#8220;That&#8217;s why the integrity and security of the software development pipeline has become so important. Because that&#8217;s how you protect against someone inserting a backdoor like in SolarWinds. So instead of hoping to look at that binary artifact at the end and hoping to detect it \u2014 that&#8217;s not a good solution to this type of attack.&#8221;&nbsp;<\/p>\n<p>The solution is, he says, to have good security on all the different parts of the pipeline. This includes making sure that developers who have permission to modify code use two factor authentication when accessing a code repository to update code. They should also be cryptographically signing all the different artifacts that become part of the final build of a software product.<\/p>\n<p>Wysopal is optimistic that US president <a href=\"https:\/\/www.zdnet.com\/article\/linux-and-open-source-communities-rise-to-bidens-cybersecurity-challenge\/\">Joe Biden&#8217;s cybersecurity-focused executive order<\/a> will have a positive impact on how cybersecurity is handled in the private sector in the US.&nbsp;<\/p>\n<p>&#8220;We see that the requirements for doing business with the federal government will be adopted in the private sector. Enterprises in lots of different sectors will push this on to their vendors. Cyber insurance companies will look at this and say, &#8216;Hey, this is lowering the risk of the federal government and if you do these same practices, your insurance premiums will be less.&#8217;&nbsp;<\/p>\n<p>&#8220;The federal government is setting a good example. Parallel to that, we see that Congress, which can pass laws that affect everyone doing business in the US. Congress will also learn from this and will codify some of this into law.&#8221;<\/p>\n<p>In other words, Biden&#8217;s executive order, while only applying to federal agencies, could have major implications for classical critical infrastructure as well as banking, healthcare and other sectors the US considers vitally important.&nbsp;<\/p>\n<p>&#8220;That could be dictated by law. It might not just be the market making it happen,&#8221; he says.<\/p>\n<p> READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The rise of software supply chain attacks are giving rise to the need for engineering chiefs responsible for tech products.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":41011,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-41010","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Businesses are getting better at security. But they&#039;re still forgetting one big risk 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Businesses are getting better at security. But they&#039;re still forgetting one big risk 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-05-21T13:53:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"578\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Businesses are getting better at security. But they&#8217;re still forgetting one big risk\",\"datePublished\":\"2021-05-21T13:53:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/\"},\"wordCount\":841,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk.jpg\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/\",\"name\":\"Businesses are getting better at security. But they're still forgetting one big risk 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk.jpg\",\"datePublished\":\"2021-05-21T13:53:09+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk.jpg\",\"width\":770,\"height\":578},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Businesses are getting better at security. But they&#8217;re still forgetting one big risk\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Businesses are getting better at security. But they're still forgetting one big risk 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/","og_locale":"en_US","og_type":"article","og_title":"Businesses are getting better at security. But they're still forgetting one big risk 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-05-21T13:53:09+00:00","og_image":[{"width":770,"height":578,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Businesses are getting better at security. But they&#8217;re still forgetting one big risk","datePublished":"2021-05-21T13:53:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/"},"wordCount":841,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk.jpg","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/","url":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/","name":"Businesses are getting better at security. But they're still forgetting one big risk 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk.jpg","datePublished":"2021-05-21T13:53:09+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/05\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk.jpg","width":770,"height":578},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/businesses-are-getting-better-at-security-but-theyre-still-forgetting-one-big-risk\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Businesses are getting better at security. But they&#8217;re still forgetting one big risk"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/41010","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=41010"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/41010\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/41011"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=41010"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=41010"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=41010"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}