Security professionals have long been running penetration tests against their firewalls and other security systems. They’re using spear phishing, phone calls, on-site visits and other techniques to get at corporate data. The tests are becoming increasingly important as phishing and social engineering are becoming more sophisticated. One of the companies using targeted emails in its penetration testing is Medford, MA-based Century Bank. OneBeacon Insurance Group also uses a third-party testing service, Com Security, based in Ismaning, Germany.”]

