|
Most companies aren't doing anything at all. This usually is the result of an organization wanting an open and fun work environment. Unfortunately, many companies still believe that attacks originate from the outside and target their internal systems. But as we continue to learn with new threat vectors like cross-site request forgery, clickjacking and cross-site scripting, attackers can do well by simply posting malicious content on the Web and waiting for an unsuspecting user to surf to it. The best way to handle attacks originating from blog sites is to block access to them completely.
But remember, blog sites are not the only ones susceptible to these types of threats. Social networking sites like Facebook and MySpace can serve malicious content in the form of advertisements. Even sites like MLB.com have been victims of Flash-based malware. Blog access is ultimately a risk-based decision. If the majority of attacks against your environment originate from blog sites, blocking access is a good first step.
|
