Trojan hardware the next danger for enterprises?

"We have been toying with a variety different ways of getting hardware onto the network," says Steve Stasiukonis, managing partner of security services firm Secure Network Technologies. "You can put your box inside a printer tray and glue it shut, and who will notice if there are one or two or three power cables coming out?"

In many cases, attackers can dress in the uniform of an IT supplier and drop off a printer for a company to test-drive, Stasiukonis says. Once the device is connected to the network, the penetration testers have a platform behind any perimeter defenses from which to attack.