Lock your meeting rooms

The following is a pubilc service announcement from your friendly neighborhood information security professional...

When you host a virtual meeting (WebEx, GoToMeeting, Chime, etc.) require all attendees to be admitted to the meeting. Yes, I know, that means YOU will have to admit every attendee one-by-one. Guess what? That also means that YOU admit every attendee, thus YOU know who is in the meeting.

Yesterday, a collegue of mine was sent an appointment to attend a meeting that was for the wrong meeting. There was no password, no admittance requirement. About halfway through the meeting, my friend realized the invite details must have been wrong. That was too late, what was heard caould not be un-heard. You might be wondering what the meeting was about  - lets just say a globally-known brand was discussing recently discovered vulnerabilities and how to address them.

Lock your meetings people.

This is a test of the Security Warning System. Cloud Coroner, in voluntary cooperation with other security professionals that give a damn have developed this system to keep you informed in the event of an emergency. If this had been an actual emergency, the article you just read would have been followed by official information, news or instructions. Cloud Coroner serves this area. This concludes this test of the Security Warning System.