Forcepoint CEO Matt Moynahan: "It probably puts you on the defensive more so than not."

"We have to start thinking about people and data, and not necessarily infrastructure,” Matt Moynahan said at the Cybersecurity Leadership Forum.

The DHS office charged with protecting critical infrastructure needs to get better at assessing cyber risk rather than chasing threats, according to a top agency official.

Normally, point-of-sale malware uses HTTP requests to exfiltrate data. Using DNS requests allows attackers to avoid detection.

"The tools they use are sophisticated," an analyst at Symantec says.

The rudimentary nature of these incidents makes it extremely difficult to create programs that keep material secure without negatively impacting workforce morale.

"If the cybersecurity industry fails to put people at the center, it is certain to fall short in helping customers protect their most vital assets,” said Forcepoint…

Executives agreed that global demand for security spending was going to rise.