Advertisement
Iowa School District Hack: Sentencing Highlights Insider Threat Risks
Former Iowa school IT employee sentenced to 21 months for malicious infrastructure disruption and data tampering against his former employer.
Five Eyes Warning: Chinese Intelligence Job Recruitment Tactics
Five Eyes agencies issue an advisory on Chinese intelligence officers using fake job offers on professional sites to recruit personnel with security clearances.
Ransomware Negotiator Double Agent Tactics: Managing IR Risks
Analysis of the legal case involving a ransomware negotiator acting as a double agent and how to secure the incident response supply chain against fraud.
US Security Experts Sentenced in REvil Ransomware Conspiracy
Two US security professionals were sentenced to prison for selling corporate credentials to the REvil ransomware gang, highlighting insider threat risks.
BlackCat Ransomware: IR Professionals Sentenced for Insider Attacks
Two cybersecurity incident response professionals were sentenced to four years in prison for conspiring with the BlackCat (ALPHV) ransomware gang.
NSA Insider Threat Lessons: Chris Inglis on Post-Snowden Security
Former NSA Deputy Director Chris Inglis reflects on the Snowden leaks, offering critical insights for CISOs on insider threat detection and enculturation.
Defensive Strategies for Routine Workflow Weaponization
Attackers are pivoting from technical exploits to weaponizing trusted workflows. Learn how to detect and mitigate these behavioral identity-based threats.
DraftKings Hacker Sentenced: Lessons in Credential Stuffing Defense
Analysis of the sentencing of Kamerin Stokes following the 2022 DraftKings breach, detailing credential stuffing TTPs and account takeover prevention strategies.
DPRK IT Worker Laptop Farms: U.S. Nationals Sentenced for Fraud
Two U.S. residents sentenced for operating laptop farms that enabled North Korean IT workers to defraud Fortune 500 companies using stolen identities.
Kraken Extorted by Hackers Following Insider Account Breach
Kraken faces extortion after a social engineering attack on a support agent led to unauthorized internal system access and threatened customer data exposure.
Insider Threat: Former Engineer Locks 254 Windows Servers in Extortion
A former infrastructure engineer pleaded guilty to a $750,000 extortion plot after locking administrators out of 254 Windows servers and deleting backups.
AI Agent Security Risks: Defending Against Autonomous Tool Misuse
Analysis of the security implications of autonomous AI agents, focusing on prompt injection, privilege escalation, and the erosion of trust boundaries.