Dealing with the insider threat on your network

guest · Jun 25, 2018

Dealing with the insider threat on your network
June 25, 2018
https://www.scmagazine.com/dealing-with-the-insider-threat-on-your-network/article/772979/

Enterprises increasingly faced with more sophisticated criminals
Cybercriminal organizations are evolving and morphing into enterprises not dissimilar in structure to legitimate ones.

Hackers will exploit human bias in order to gain access to systems and the internal network. According to this article, those with the poorest cyber security behavior in organizations won't bother with their company's cyber security training, believing themselves to already have the appropriate cybersecurity skills or just unwilling to spend time on training.
Data breaches can do more damage than you think
Criminals are doing more damage to organizations than ever before. They are also becoming harder to detect. Once an attacker is inside the network, it can be very hard to detect them until it is too late.

If you want to look at the network you have to apply the lens of the user. You have to apply user context to everything that is happening on the network.
Click to expand...

guest · Aug 31, 2018

43% of Security Pros Could Execute Insider Attack
August 31, 2018
https://www.infosecurity-magazine.com/news/43-percent-of-security-pros-could/

A recent survey of nearly 200 IT professionals about insider threats found that nearly half of the participants believed they could successfully attack their organizations from the inside. In a blog post earlier this week Imperva researchers reported on insider threats and revealed the findings of the recent survey.

Of the 179 IT professionals who participated in the survey, 43% said they were confident they could execute an insider attack. Only a third said carrying out an insider attack would be either difficult or impossible, while a mere 22% felt they had a 50/50 chance of successfully stealing information from the inside.

Insider threats continue to rank top concerns when it comes to cybersecurity threats, suggesting that every company could potentially fall victim to an insider-related breach whether from a malicious actor or an unintended threat.
Click to expand...

Minimalist · Feb 11, 2019

Identifying, Understanding & Combating Insider Threats

Most, if not all, organizations are vigilant about safeguarding against threats that can penetrate endpoint systems via email, websites, and other known and unknown pathways. But what about threats that come from within your organization? Even worse, from those who you assume can be trusted?
Click to expand...

https://www.darkreading.com/endpoin...-and-combating-insider-threats/a/d-id/1333830

guest · Mar 26, 2019

61 percent of CISOs believe employees have leaked data maliciously
March 25, 2019
https://betanews.com/2019/03/25/employee-malicious-data-leaks/

A new study reveals that 79 percent of IT leaders believe that employees have put company data at risk accidentally in the last 12 months, and 61 percent believe they have done so maliciously.
From the employee perspective, of those who have accidentally shared data, almost half (48 percent) say they had been rushing, 30 percent blame a high-pressure working environment and 29 percent say it happened because they were tired.

The research from data security company Egress also explores how employees and executives differ in their views of what constitutes a data breach and what is acceptable behavior when sharing data.
You can get the full report from the Egress website
Click to expand...

guest · Apr 3, 2019

Why insider security threats are on the rise and so difficult to detect
April 3, 2019
https://www.techrepublic.com/articl...s-are-on-the-rise-and-so-difficult-to-detect/

Insider security threats are on the rise, and IT professionals face increasing challenges detecting them, according to the 2019 Insider Threat Report from Bitglass.

Detecting insider threats is more difficult today than it was a year ago due to a number of factors, according to the IT workers surveyed, including insiders holding valid credentials, increased use of apps that can leak data, more data leaving the perimeter, more end-user devices that are capable of theft, and migration of sensitive data to the cloud.

The reasons for the growth of insider threats stem from corporate data moving to more devices and cloud applications, the report noted. Failing to implement strong security measures will continue to enable these threats, it added.
"Insider attacks are harder to identify and remediate than those that originate from outside the enterprise," Rich Campagna, CMO of Bitglass, said in a press release.
Click to expand...

Bitglass blog entry: Prying Eyes Inside the Enterprise: Bitglass' Insider Threat Report
Report (PDF): https://pages.bitglass.com/rs/418-ZAL-815/images/Bitglass_ThreatBusters.pdf

guest · Aug 27, 2019

Some employees willing to use company data to snag job at competitor
August 27, 2019
https://www.techrepublic.com/articl...use-company-data-to-snag-job-at-a-competitor/

Insider threats are a concern for any company – small, medium, and large. Though the hope is that one's employees will be loyal, honest, and trustworthy, human nature being what it is, we know that's not always going to be the case.

Polling 476 IT security professionals around the world at the 2019 Blackhat USA Conference in early August, Gurucul found that 24% of respondents admitted that they would take company information to help them apply for a more senior role at a competitor. Further, 27% of those who said they look for another job while at work would also take company data to apply for another job.

Asked the primary reason why employees commit fraudulent acts, such as taking company information, 54% of those surveyed cited money as the top reason. Other respondents pointed to such motivators as gaining a competitive advantage, damaging the reputation of their company, revenge, and the sheer challenge of it.

"Since detecting insider threats by employees and trusted third parties is the ultimate game of cat and mouse, many leading edge security organizations are using machine learning to compare the behavior of all users against established baselines of 'normal' activity. [...]"
Click to expand...

guest · Sep 10, 2019

Insider Threats Are Rising – But They Shouldn’t Be
September 10, 2019
https://threatpost.com/insider-threats-are-rising-but-they-shouldnt-be/148189/

There’s never been a shortage of risk that organizations face from insiders gone bad — those incidents where insiders steal information from their employers, clients, partners and government agencies.
The Changing Insider Threat
Insider risk used to consist of things like a ream of paper walking out the door, as was the case with the Pentagon Papers. Today, however, as a result of the exponential amount of data digitization and portability over the past few decades, the risk of data theft has grown considerably.

Organizations need to pay much closer attention to their data. They need to know with certainty where it resides, who can access it and where it moves. When it comes to insider threats, organizations need to get to the point where they know what attributes of the threat they need to be looking for.
Succeeding requires very close monitoring of data with a focus on what data is moving, when and where.
Click to expand...

guest · Oct 7, 2019

This tool can work out how often your company will be hit by insider attacks
Size, sector and employee welfare all used as factors of email-based intrusion
October 7, 2019
https://www.itpro.co.uk/security/34...n-your-company-will-be-hit-by-insider-attacks

Organisations in the process of assessing their cyber security defences have been given a new tool that claims to calculate the risk of sustaining an email-based attack.
The Insider Breach Calculator, launched today by Egress, calculates how many potential breaches a business may expect to sustain by feeding factors such as employee email habits and mood into an algorithm. These factors include the number of employee inboxes and the industry they work, as well as the perceived stress level and fatigue level of workers between zero and ten.

When the figures are plugged in, the results are tallied and presented as the estimated number of emails sent per week and per year, and how many potential breaches an organisation may sustain during those periods.

"Every organisation knows that it is leaking data in one way or another, yet we find there is a bit of a 'head-in-the-sand' mentality where the insider breach is concerned," said Egress CTO Neil Larkins.
Click to expand...

guest · Nov 7, 2019

Cloud Covers Up Insider Threats
November 6, 2019
https://www.infosecurity-magazine.com/news/cloud-covers-up-insider-threats/

A new study has found that more than half of organizations believe detecting insider threats is harder following migration to the cloud.

The 2020 Insider Threat Report published today found that a lack of visibility into anomalous activity, especially in the cloud, and manual SIEM workloads have increased the risk of insider threats for organizations and prevent many from detecting and stopping data exfiltration.
The annual report was produced with the support of Gurucul by Cybersecurity Insiders [...]

Key findings are that 58% of organizations consider their monitoring, detecting, and response to insider threats somewhat effective or worse, and 53% believe that detecting insider attacks has become significantly to somewhat harder since migrating to the cloud.
Nearly half of the companies surveyed for the report admitted that they are unable to remediate insider threats until after data loss has occurred.
Click to expand...

guest · Nov 12, 2019

Insider Threats, a Cybercriminal Favorite, Not Easy to Mitigate
November 12, 2019
https://threatpost.com/insider-threats-cybercriminal-favorite/150128/

Insider threats are an ongoing top danger for companies — but when it comes to mitigation efforts, incident-response teams face an array of challenges.

Discussions with various incident-response teams revealed that between 25 to 30 percent of data breaches involved an external actor working with an internal person in an organization, according to Paul Shomo, senior security architect with OpenText.

“We used to focus on external threat actors, but now, when compromising the network, many have someone on the inside, whether it’s because they bribed them or blackmailed them,” Shomo said, speaking at ENFUSE 2019 on Tuesday in Las Vegas.
Mitigation Challenges
Brian Coleman, director of forensic analysis and investigations at pharmaceutical giant Pfizer, said at ENFUSE that he faces the insider threat challenge daily when managing Pfizer’s almost 250,000 endpoints to monitor suspicious network activity and root out any potential insider threats, he.

There are various methods of detection when it comes to insider threats, he said – including monitoring the log data of employees, and tracking if they download substantial amounts of data to external drives [...]
Click to expand...

guest · May 30, 2020

Former IT Administrator Sentenced in Insider Threat Case
Charles E. Taylor Caused $800,000 in Damages to His Former Company
May 30, 2020
https://www.databreachtoday.com/former-administrator-sentenced-in-insider-threat-case-a-14358

A former IT administrator for an Atlanta-based building products distribution company has been sentenced to 18 months in federal prison after he sabotaged the firm by changing router passwords and shutting down a critical command server, according to the U.S. Justice Department.

In February, Taylor pleaded guilty to federal charges of computer fraud after the FBI investigated the damage at his former firm. In addition to his 18-month prison sentence, Taylor must undergo three years of supervised release and pay restitution of $834,510, according to the Justice Department.

"Corporate insiders like Taylor cause significant losses through hacking activity each year, and companies must remain vigilant against insider threats to their network security," U.S. Attorney Byung J. "BJay" Pak noted after the sentencing was announced on Thursday.
Click to expand...

Insider Threats
Over the past several years, the number of insider threats at companies has steadily increased. In the 2020 Verizon Data Breach Investigations Report released earlier this month, analysts found that insider threats now account for about 30% of the breaches and security incidents that they track (see: Verizon: Breaches Targeting Cloud-Based Data Doubled in 2019).

The Verizon report also notes that the majority of insider threats are motivated by financial gain and not espionage or causing damaging.
Click to expand...

guest · Sep 12, 2020

Bitglass 2020 Insider Threat Report Reveals 61% of Companies Have Experienced an Insider Attack
September 9, 2020
https://www.missioncriticalmagazine...-companies-have-experienced-an-insider-attack

Bitglass released its 2020 Insider Threat Report, which uncovers the state of enterprise security as it pertains to insider threats. Bitglass partnered with a leading cybersecurity community and surveyed IT professionals to understand how their businesses balance budgetary and data protection concerns while defending against insider threats.

Employees, whether careless or malicious, can pose a great risk to organizations. A majority of survey respondents (61%) reported at least one insider attack over the last 12 months. Of those, 22% reported at least six separate attacks.
Despite these concerns, few respondents have a single platform that delivers complete, unified visibility and control for any interaction.
Click to expand...

While organizations were already working with constrained security budgets before the pandemic, security teams are now being asked to do even more with less. Among the companies that participated, 73% of security budgets are decreasing or staying flat over the next year.

“Enterprises report that loss of critical data and disruption to business operations are the biggest repercussions of insider attacks,” said Anurag Kahol, CTO of Bitglass. “ [...] Enterprises need a multifaceted security platform that is designed to monitor user behavior, secure personal devices, deliver maximum uptime and cost savings, and prevent leakage on any interaction. Only then can they defend against insider threats.”
Click to expand...

Bitglass: Deception in the Workforce: Bitglass’ 2020 Insider Threat Report

Log in or Sign up

Dealing with the insider threat on your network

guest Guest

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Dealing with the insider threat on your network

guest Guest

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches