insider threat

RSS

Fired VMware admin admits virtual rampage launched from a McDonald's

Posted August 17, 2011 - 2:17 pm

There is always the potential for drama and tragedy when sysadmins are expendable an even your IT systems are lying to each other.
- Quick Read
- 2 comments
- Like
- Tweet
$500K Citigroup fine is for poor security on obsolete crime: insider theft of cash, not data

Posted August 12, 2011 - 12:16 pm

Citigroup has been hacked twice in recent weeks. One was an old-fashioned assault; the other was the hot new threat: an insider who walked out the door with data hackers could never get themselves. Oh, and it also lost $20M to embezzlers, one who went undetected for 8 years.
- Quick Read
- Like
- Tweet
Survey shows users more willing to steal data than you thought; especially the Brits

Posted July 27, 2011 - 2:39 pm

A survey from Harris Interactive of users in the U.S., Australia and the U.K show more conscious willingness to mishandle or sell corporate data than most would suspect. For no obvious reason, Brits are way, way WAY more likely to data pirate than Yanks or Ozzies. Pwn Britania!
- Quick Read
- Like
- Tweet
When geeks go bad

Posted January 19, 2011 - 11:11 am

You hear about the sysadmin running a porn site from the data center? Check your log files once in a while.
- Quick Read
- 1 comment
- Like
- Tweet
Wikileaks and the authorized insider threat

Posted January 14, 2011 - 9:47 am

The recent military and U.S. State Department Wikileaks fiasco epitomizes a key challenge to data security and privacy today: the authorized insider threat.
- Quick Read
- Like
- Tweet
Why security pros fail (and what to do about it)

Posted December 7, 2010 - 9:35 pm

You've probably heard the phrase, "Failure is the key to success." But are security professionals really learning from their mistakes? As identity theft and online risks keep growing, is our industry rising to the challenge or repeating the miscues of the past? While security technology is improving, the bad guys also have access to better tools. So are the good guys working smarter?
- Quick Read
- Like
- Tweet
Fight insider threats with the tools you already have

Posted September 27, 2010 - 12:19 pm

Common security tools already used by many businesses can be effective means for finding corporate data thieves and saboteurs, according to researchers at Carnegie Mellon's Software Engineering Institute.
- Quick Read
- Like
- Tweet
How to keep employees from stealing intellectual property

Posted September 27, 2010 - 9:45 am

Your data is your business. And if you're not vigilant about your employees' access to that data, you're going to end up out of business. That's the advice of Patricia Titus, current CISO of Unisys and former CISO of the Transportation Security Administration.
- Quick Read
- Like
- Tweet
Houston hotel on watch for threats from inside and out

Posted September 27, 2010 - 9:43 am

As open buildings, hotels are typically on guard for any signs of trouble. So it's no surprise that the downtown Hilton Americas–Houston just upgraded its video-surveillance system, installing one based on 3VR Security's digital recorder platform for the sake of efficient retrieval of video footage for research.
- Quick Read
- Like
- Tweet
6 tips for guarding against rogue sys admins

Posted September 27, 2010 - 9:09 am

One of the biggest threats that organizations face is losing sensitive data -- such as payment card or personally identifiable information about customers or employees -- to theft from their own employees. The threat is greatest from systems and network administrators, who have privileged access to vast amounts of corporate data and are responsible for most compromised records in insider cases.
- Quick Read
- Like
- Tweet
Biggest insider threat? Sys admin gone rogue

Posted September 27, 2010 - 8:53 am

When the database, network or systems administrator goes rogue, stealing data http://www.networkworld.com/news/2007/070307-fidelity-national-records.h..., setting up secret access for themselves, even in anger planting logic bombs to destroy data http://www.usdoj.gov/usao/nj/press/files/du1217_r.htm, or just peeking at sensitive information http://www.networkworld.com/news/2010/070710-snooping-protected-data.html they know is off limits, they become the very insider threat that the IT department is supposed to be guarding against.
- Quick Read
- Like
- Tweet
Forrester: Trust no one when it comes to IT security

Posted September 15, 2010 - 7:45 pm

Forrester Research is releasing a report titled "Introducing the Zero-Trust Model of Information Network" in conjunction with its Security Forum event in Boston this week.
- Quick Read
- Like
- Tweet
DARPA launches insider threat detection effort for military

Posted September 1, 2010 - 7:40 pm

The Defense Advanced Projects Agency (DARPA) has launched an effort aimed at finding and detecting to insider threats on Department of Defense networks.
- Quick Read
- 1 comment
- Like
- Tweet
The new risks of cyber-chattiness

Posted February 17, 2010 - 2:08 pm

Employees are revealing too much about their professional lives online, and that can add up to bad news.
- Quick Read
- Like
- Tweet
Insider at Cal Water steals $9M and runs

Posted May 22, 2009 - 8:09 pm

On the night of April 27, 2009, hours after he had resigned from his job as an auditor at the California Water Services Company, Abdirahman Ismail Abdi used his still active electronic key card to get into the secured facilities where he used to work.
- Quick Read
- Like
- Tweet
IT director pleads guilty to deleting organ donation records

Posted May 1, 2009 - 9:13 am

The former IT director for a nonprofit organ and tissue donation center pleaded guilty to a charge that she broke into the organization's computer network and deleted organ donation database records, invoice files, and database and accounting software, the U.S. Department of Justice said.
- Quick Read
- Like
- Tweet
Identifying the source of corporate threats

Posted April 29, 2009 - 10:05 am

Can you really tell whether insiders or outsiders pose a bigger threat? This question is something everyone should ask themselves, whether they store, process or transmit personal identity information. When looking at the data and conclusions of breach reports, it is important to consider several factors before accepting conclusions or taking a security posture.
- Quick Read
- Like
- Tweet
Can you no longer avoid closely monitoring employees?

Posted April 29, 2009 - 8:35 am

The insider threat has always existed, but in an era of economic upheaval and uncertainty, the problem is only magnified. How far should information technology managers go to protect corporate data?
- Quick Read
- Like
- Tweet
How recessions make good people do bad things

Posted November 12, 2008 - 3:38 pm

Greed, anger or desperation are what motivate insiders to attack their own companies. Here are some of the insider issues to look out for during a recession...
- Quick Read
- Like
- Tweet
IT wary of insider attacks as economy slows down

Posted October 27, 2008 - 1:05 pm

Rogue insiders pose to your data and systems at any time. But as the faltering economy forces companies to turn to job cuts, wage and bonus freezes, outsourcing and other belt-tightening moves, the risks are multiplying, analysts said.
- Quick Read
- Like
- Tweet
Staff are biggest threat to finance firms' data

Posted October 8, 2008 - 1:13 pm

Insiders represent the greatest threat to the secure data of financial services firms, according to the latest Verizon Business Data Breach report. This marks a strong contrast with companies in other sectors, such as high tech services, food and beverage, and retail, which saw business partners as posing the greatest risk to their data.
- Quick Read
- 1 comment
- Like
- Tweet
Angry IT workers: A ticking time bomb?

Posted September 22, 2008 - 3:24 pm

Whether it's out of revenge or a case of cracking under stress, disgruntled IT workers -- battered by interminable hours and impossible demands -- pose a greater threat than ever.
- Quick Read
- Like
- Tweet
Don't become the next insider threat statistic

Posted September 12, 2008 - 3:31 pm

I would never make disparaging comments about my wife, especially since sheâ€™s smarter than me and has a lot more letters after her name than I do, but sheâ€™s driving me crazy with the weather. Ever since she discovered the weather forecast websites, she browses to about 10 of them and tells me what theyâ€™re predicting about the weather. And usually while theyâ€™re predicting sunshine, itâ€™s pouring rain and sheâ€™s asking me why theyâ€™ve got it wrong and what does it mean that thereâ€™s a 70% chance of something happening! Sheâ€™s the one with the fancy degree, so why is she asking me?
- Quick Read
- Like
- Tweet