Cyber criminals and cyber spies have shifted their focus again, successfully evading the countermeasures that most companies and government agencies have worked for years to put into place.

Facing real improvements in system and network security, the attackers now have two new prime targets that allow them to evade firewalls, antivirus and even intrusion prevention tools: users who are easily misled and custom-built applications. This is a major shift from prior years when attackers limited most of their targets to flaws in commonly used software.

More information can be found here.

Additional information can be found here.