There are plenty of reasons for 18 percent of IT decision makers to list consumer e-mail applications
such as Gmail and Yahoo as their top threat. For one, these apps carry the potential for malicious code
to run within JavaScript, says Chris Wysopal, CTO of security vendor Veracode. Gmail itself had this problem,
as noted by a 14-year-old
who claimed he found such a flaw. In addition, it's easy for employees to store sensitive
data on consumer e-mail. In
this
CSOonline.com article, a man who allegedly stored company files (containing intellectual property) on
his Yahoo account left the company for a competitor and then deleted the account shortly thereafter to
stymie investigators.