Coca-Cola had a serious insider breach in 2018 when a former employee was found to have PII on some 8,000 employees. Today’s columnist, Neel Lukka of CurrentWare, offers eight security tips for offboarding employees when they leave the company.
Today’s columnist, Lucia Milică of Proofpoint, says as companies shifted to work-from-home during the pandemic, security pros had to focus more on protecting against insider threats, often caused by harried parents juggling work and family responsibilities.
After months of defending against increased threats during tumultuous times, organizations are moving forward with plans to strengthen security policies, increase training, and invest in technology.
News that source code of Nissan North America tools leaked online because of a misconfigured Git server spurs questions not only about potential cyberattacks by bad actors, but also whether competitors could use the sensitive data against the automobile giant.
Vaccine distribution could mean a return to offices, but most experts expect a new hybrid model to emerge. Pile that on top of the already challenging situation posed by a supposed skills gap and efforts to improve diversity, and the cybersecurity community may need to redefine workforce priorities.
Soft skills are not always the strong suit for security professionals, said Steve Durbin of the Information Security Forum. But “we’ve moved into a realm that those kind of things are really important.”
The breach perpetrated by two “rogue employees” who worked on the e-commerce platform’s support team illustrates how certain roles within an organization may require more stringent monitoring.
Twitter’s acknowledgement that a “coordinated social engineering campaign” involving multiple employees was behind a hack of prominent verified accounts raises significant questions as to whether business organizations are implementing effective security controls that limit potential insider threats’ access to back-end administrative tools. The hacking incident — which promoted a cryptocurrency scam and victimized the accounts…
Companies trying to stave off business disruption caused by the global Covid-19 pandemic may be ripe for compromise as they introduce new risks in the scramble to maintain business continuity, warned a retired senior CIA executive in a keynote presentation Wednesday at the InfoSec World 2020 digital conference. In essence, the coronavirus has created ideal…
A hacker reportedly used both bribery and social engineering to gain unauthorized access to a customer support system operated by the popular video game Roblox — illustrating why companies must be on the lookout for employees who fit the mold of an insider threat. The unnamed hacker told Motherboard that they paid one insider to…
