Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Insider Threats

netspi.com | blog | #risk-management | #insider-threat | #security-policy | #cert | #privileged-accounts

Summary

Drawing on CERT's insider threat database, the author contrasts hacking with disgruntled admins whose valid credentials cause havoc, citing a case that inflicted $800,000 damage with ordinary tools.
Published
Collected

original ↗

Related coverage

blog · netspi.com
The Need to Prevent Insider Threats, as Revealed by the SolarWinds Cyber Security Breach
Using the SolarWinds breach as a lens, the post urges CISOs to prioritize insider threat prevention, citing Ponemon data showing average insider incident costs reached $11.45 million in 2020.
blog · netspi.com
IT Asset Management – Where to Start
You cannot protect what you cannot inventory: this piece argues IT asset management underpins every security program, defining what counts as an asset and the questions organizations must answer.
blog · netspi.com
The Value of Detective Controls
Preventative controls dominate security spending, but since not every attack can be stopped, detective controls deserve more attention — though noisy IDS/IPS and unreviewed logs often undercut them.
blog · netspi.com
A False Sense of Security
A reflection on how organizations lean on technology products as a cure-all for security problems they don't understand, buying standardized solutions that create a false sense of security.
blog · netspi.com
Measuring Security Risks Consistently
Risk labels are subjective without shared impact thresholds. The author suggests defining organization-specific fiscal, reputational, and safety impact levels in a matrix, involving multiple roles.
blog · netspi.com
Social Media and Healthcare: Bane and Gain
Healthcare organizations swing between embracing social media and imposing Orwellian policies with web filtering. The author argues neither works and advocates education and reasonable limits.
back