insider threats – Computer Security Articles

Explained: the strengths and weaknesses of the Zero Trust model

January 28, 2020 admin BYOD, cloud, Explained, framework, Identity Management, insider threats, IoT, lateral threat movement, mfa, perimeter, RDP, Security, security orchestration, strategy, Zero Trust, zero trust model, zero trust security model

Credit to Author: Pieter Arntz| Date: Tue, 28 Jan 2020 16:00:00 +0000

Zero Trust is an information security framework that insists its users “never trust, always verify.” Is this the best security model for organizations today? We examine its strengths and weaknesses.

Categories:

Explained

Tags: byod cloud framework identity management insider threats IoT lateral threat movement mfa perimeter rdp security security orchestration strategy zero trust zero trust model zero trust security model

MalwareBytes Security

Report: Organizations remain vulnerable to increasing insider threats

December 5, 2019 admin awareness, Carnegie Mellon University, cert insider threat center, cybersecurity insiders, defense counterintelligence and security agency, Department of Homeland Security, espionage, fraud, gurucul, insider threats, malicious insider, mitigate insider threats, national counterintelligence and security center, national insider threat awareness month, national insider threat task force, ncsc, nittf, office of the under secretary of defense, Paige A. Thompson, scope of insider threat, sei, software engineering institute, types of insiders, william evanina, workplace violence

Credit to Author: Jovi Umawing| Date: Thu, 05 Dec 2019 16:00:00 +0000

The risk and challenges insider threats pose to organizations are ever present, even before tech as we know it existed. The age of digitization only made it higher and far-reaching. How has insider threats evolved over time? Where are we now in terms of mitigating insider threat risk? Are businesses really doing something about it? We answer such questions—and more—in this post.

Categories:

Awareness

Tags: Carnegie Mellon University cert insider threat center Cybersecurity Insiders Defense Counterintelligence and Security Agency Department of Homeland Security espionage fraud Gurucul insider threats malicious insider mitigate insider threats National Counterintelligence and Security Center national insider threat awareness month National Insider Threat Task Force NCSC NITTF Office of the Under Secretary of Defense Paige A. Thompson scope of insider threat SEI Software Engineering Institute types of insiders William Evanina workplace violence

MalwareBytes Security

Compromising vital infrastructure: water management

April 1, 2019 admin awwa, Business, BYOD, city of atlanta, crashoverride, emotet, insider threats, ransomware, SCADA, Security world, stuxnet, vital infrastructure, water management, water plants

Credit to Author: Pieter Arntz| Date: Mon, 01 Apr 2019 15:00:00 +0000

Water management is an essential part of our infrastructure. Loss of it can lead to service outages, diseases, and famine. So the cybersecurity should be top notch.

Categories:

Tags: awwa byod city of atlanta crashoverride emotet insider threats ransomware scada stuxnet vital infrastructure water management water plants

MalwareBytes Security

6 security concerns to consider when automating your business

November 16, 2018 admin 101, automating, automation, Business, cybersecurity, insider threats, malicious insiders

Credit to Author: Kayla Matthews| Date: Fri, 16 Nov 2018 16:00:00 +0000

When considering an automation strategy, business representatives must be aware of any security risks involved. Here are six automating concerns network admins and other IT staff should keep in mind.

Categories:

Tags: automating automation business cybersecurity insider threats malicious insiders

MalwareBytes Security

Workplace violence: the forgotten insider threat

October 12, 2018 admin 101, active shooting, Alert, ALICE, Business, Counter, Criminal intent, Customer/Client, Evaluate, Inform, insider threats, Lockdown, Ponemon Institute, Workplace bullying, workplace violence, WPV

Credit to Author: Jovi Umawing| Date: Fri, 12 Oct 2018 16:00:00 +0000

Among insider threats, workplace violence could be considered the most dangerous. And yet, the majority of organizations are not prepared. What should they do to protect their employees?

Categories:

Tags: active shooting Alert ALICE Counter Criminal intent Customer/Client Evaluate Inform insider threats Lockdown Ponemon Institute Workplace bullying workplace violence WPV

(Read more…)

The post Workplace violence: the forgotten insider threat appeared first on Malwarebytes Labs.

MalwareBytes Security

The enemy is us: a look at insider threats

August 20, 2018 admin 101, accidental insider, Business, cert insider threat center, dr. park dietz, insider threats, intentional insider, malicious insider, negligent insiders, professional insider, true cost of cybercrime, unintentional insider, workplace violence

Credit to Author: Jovi Umawing| Date: Mon, 20 Aug 2018 16:42:50 +0000

It could be the engineer in the IT department, the janitor mopping the lobby, one of the many managers two floors up, or the contractor who’s been in and out the office for weeks now. Or, maybe it could be you. It could be the engineer in the IT department, the janitor mopping the lobby, one of the many managers two floors up, or the contractor who’s been in and out the office for weeks now. Or, maybe it could be you. Who are the insider threats to organizations? And how can they be stopped?

Categories:

Tags: accidental insider cert insider threat center dr. park dietz insider threats intentional insider malicious insider negligent insiders professional insider true cost of cybercrime unintentional insider workplace violence

(Read more…)

The post The enemy is us: a look at insider threats appeared first on Malwarebytes Labs.

MalwareBytes Security

A week in security (November 27 – December 03)

December 4, 2017 admin a week in security, conference, cryptocurrency, insider threats, Paypal, phishing, privacy, ransomware, recap, revenge porn, Security world, smart toys, Terror EK, Week in security, weekly blog roundup, WhatsApp

Credit to Author: Malwarebytes Labs| Date: Mon, 04 Dec 2017 18:30:33 +0000

A compilation of notable security news and blog posts from Monday, November 27 to Sunday, December 3, including smart toys, another security breach, ransomware, and things to ponder when shopping for gifts this Christmas season.

Categories:

Tags: a week in security conference cryptocurrency insider threats PayPal phishing privacy ransomware recap revenge porn smart toys Terror EK weekly blog roundup whatsapp

(Read more…)

The post A week in security (November 27 – December 03) appeared first on Malwarebytes Labs.

MalwareBytes Security

A week in security (August 28 – September 3)

September 4, 2017 admin 419 scam, exploit kit, insider threats, kronos, Locky, malvertising, PrincessLocker, ransomware, recap, RIG, Security, Security world, Week in security, weekly blog roundup

Credit to Author: Malwarebytes Labs| Date: Mon, 04 Sep 2017 17:00:53 +0000

Last week, we looked at what actions Kronos can perform in the final installment of a 2-part post. We also dived into Locky, again, a ransomware that just made a comeback, and found that its latest variant (as of this writing) has anti-sandboxing capabilities. This means that once Locky has determined that it’s residing in…

Categories:

Tags: 419 scam exploit kit insider threats kronos Locky malvertising PrincessLocker ransomware recap RIG security weekly blog roundup

(Read more…)

The post A week in security (August 28 – September 3) appeared first on Malwarebytes Labs.

← Previous