Kevin Mitnick Quotes

One bug in an SMTP server can open up the whole machine for intrusion.

Anything out there is vulnerable to attack given enough time and resources.

Hackers rarely have full knowledge of the technology stack of a target.

Security guys break the Mac every single day. Every single day, they come out with a total exploit; your machine can be taken over totally.

I am convinced that there are only two types of companies: those that have been hacked and those that will be. And even they are converging into one category: companies that have been hacked and will be hacked again.

I think every organization needs to assume that they are compromised.

It is a fairly open secret that almost all systems can be hacked, somehow. It is a less spoken of secret that such hacking has actually gone quite mainstream.

I keep my stuff updated all the time. Being in the security industry, I keep up to date with securities.

Technology businesses in general are susceptible to hacking. That's why you have to work really, really, really hard with law enforcement, with security experts, internal and external groups, to make sure you're paying attention and addressing security concerns.

What happens with smaller businesses is that they give in to the misconception that their site is secure because the system administrator deployed standard security products - firewalls, intrusion detection systems, or stronger authentication devices such as time-based tokens or biometric smart cards. But those things can be exploited.

I get hired by companies to hack into their systems and break into their physical facilities to find security holes. Our success rate is 100%; we've always found a hole.

I won't be satisfied until I've put the entire security industry out of work.

Systems are complex, so controlling an attack and achieving a desired level of damage may be harder than using physical weapons.

I don't know the capabilities of our enemies. But I found it quite easy to circumvent security at certain phone companies throughout the United States. So if an inquisitive kid can do it, why can't a cyberterrorist do it?

How many of the 'Fortune' 500 are hacked? 500.

Personally, I tend to be more interested in security and performance-related issues than other things.

What we are seeing now is customers shifting their attention from security products like firewalls and intrusion sensors, to the policies that need to be in place, and the technologies that help them enforce policy compliance.

You have to have as many defences in place as you possibly can. But even then of course - and it's important to stress this - you cannot guarantee being able to prevent every attack or every kind of attack.

I think malware is a significant threat because the mitigation, like antivirus software, hasn't evolved to a point to really mitigate the risk to a reasonable degree.

One thing about cyberattacks is that what works on Monday may not work on Thursday.

National security always matters, obviously. But the reality is that if you have an open door in your software for the good guys, the bad guys get in there, too.

Nobody should be too boastful or too proud about their security because there are people who have a major interest in cracking the security of networks, the security of companies.

Secretary Clinton was warned repeatedly about her duty to secure classified information and that her unsecure server did not meet that standard.

There is no secure data center in the world; they have all been broken into. We can help you prepare for it and minimize the damage when it does occur.

From bank accounts to financial systems, power grids to air traffic controls - our most critical infrastructure remain attractive cyber targets, and if they are ever compromised, the effects could be devastating.