A few things in the news today that ought to serve as food for thought for any SP targeting enterprise IT workloads.
For starters, I'd encourage you to read up on advanced persistent threats (APTs). These are organized attacks using a combination of social engineering and traditional hacking techniques.
In a scarily prescient post, I talked a bit about APTs during the run-up to the recent RSA Conference. Then the unthinkable happened: EMC's RSA division got hit pretty hard.
How they did it is no longer a mystery. Who did it, and why they did it, is currently a matter of an ongoing investigation, so not much will be said about that for the time being.
If you think it's isolated cases, feel free to scan the headlines on any given day, and you'll hear about the most recent breach. This morning, it was Epslion's service that got dinged.
In related news, EMC's RSA division announced the acquisition of NetWitness, a key technology player in this space.
So, how does this apply to service providers?