One of the things that is generally assumed about IT security is that the bad guys are making use of some massive amount of IT infrastructure they invested in to send malware. In reality, a report from Agari, a provider of an anti-phishing cloud security service, suggests that real primary source of all that malware out there is systems that have been compromised.

This may strike some security professionals as improbable, but a new report from IBM suggests that overall IT security situation may actually be improving.

This week Intel’s McAfee security division posted a blog penned by McAfee Director of Security Research David Marcus, who admitted McAfee’s hosted anti-malware service, SaaS for Total Protection, had been hacked and was peering the PCs of customers using the cloud-based service to create drones that spew out spam.

According to a new report by Cisco Systems, 70 percent of young professionals frequently ignore IT policies, with one in four the victim of identity theft before the age of 30.