WikiLeaks’ publication of hacking tools purportedly used by the Central Intelligence Agency highlight the stakes in a debate about the merits of basing cybersecurity on offense vs. defense., experts said Tuesday. A focus on the tools of attack can create certain kinds of risks because such tools may be difficult, if not impossible, to keep secure.

One outcome from the WikiLeaks publication is that corporate information security departments will need to "access and deploy defenses against these tools," said Ed McAndrew, co-chair of law firm Ballard Spahr's privacy and data security group.

Read the full article here. Subscription may be required.