New piece for GlobalSecurity.org

Today, I published a piece for Global Security with my fellow at NDU. Check it out here.

In other news, CIO just published a list of the worst data breaches of 2013. The results are pretty alarming:

• Virginia Tech - HR server breached; 114,963 individuals' data compromised
• St. Mary’s Bank - malware infects systems; 115,775 customers' data compromised
• IRS - up to 100,000 names, addresses and Social Security numbers "mistakenly" posted on a government website
• Republic Services - laptop stolen with 82,160 employees' personal information
• University of Delaware - 74,000 individuals' data stolen by attackers exploiting a website vulnerabilit
• Northrop Grumman - unknown number of employees' data stolen; the company’s retiree health plan reported 4,305 enrollees were impacted in a paper-records data breach involving CVS Caremark
• Department of Energy - 14,000 current and former employees' data compromised
• Missouri Credit Union - exposed personal information online; all 39,000 members potentially have had data compromised
• Michigan Department of Community Health - 49,000 individuals' data compromised
• Ferris State University in Michigan - 39,000 individuals' data compromised
• Cogent Healthcare - security lapse by vendor M2ComSy lead to data access on internet; 32,000 patients' data compromised
• D.R. Horton - dumped a "large amount" of documents related to "loans, copies of checks, purchase order sand site plans" into 'large dumpsters on school campuses"

I'm seeing banks, government agencies, academic institutions, defense contractors, insurance companies. Scary.