Cybersecurity articles tagged #Insider Threat on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/north-korean-job-fraud-expands-beyond-it-new-sectors-targetedhttps://runtimerebel.com/blog/north-korean-job-fraud-expands-beyond-it-new-sectors-targetedDPRK-linked threat actors are expanding job fraud beyond IT into healthcare, sales, and finance, leveraging AI and fake identities to fund illicit programs.Tue, 01 Sep 2026 02:38:21 GMTDPRKNorth KoreaInsider ThreatAIJob Fraudhttps://runtimerebel.com/blog/data-analyst-sentenced-to-prison-for-extorting-brightly-softwarehttps://runtimerebel.com/blog/data-analyst-sentenced-to-prison-for-extorting-brightly-softwareA former data analyst contractor was sentenced to two years in prison for orchestrating a $2.5 million cryptocurrency extortion scheme against Brightly.Fri, 14 Aug 2026 08:59:48 GMTData BreachCredential TheftRansomwareInsider Threathttps://runtimerebel.com/blog/chatgpt-agentforger-flaw-fixed-preventing-ai-insider-threatshttps://runtimerebel.com/blog/chatgpt-agentforger-flaw-fixed-preventing-ai-insider-threatsOpenAI patched a ChatGPT agent flaw, AgentForger, enabling attackers to remotely control an invisible AI insider within organizations. Learn mitigation strategies.Thu, 23 Jul 2026 17:28:01 GMTChatGPTOpenAIAI AgentsAgentForgerInsider ThreatVulnerabilityhttps://runtimerebel.com/blog/autonomous-ai-models-as-attackers-securing-enterprise-aihttps://runtimerebel.com/blog/autonomous-ai-models-as-attackers-securing-enterprise-aiAnalysis of the emerging threat where an organization's own AI models act as autonomous attackers. Learn to secure enterprise AI models from such intrusions.Thu, 23 Jul 2026 14:14:39 GMTAI SecurityMachine LearningAutonomous SystemsAdversarial AIInsider Threathttps://runtimerebel.com/blog/jesse-mcgraw-ghostexodus-examining-the-first-ics-hacking-convictionhttps://runtimerebel.com/blog/jesse-mcgraw-ghostexodus-examining-the-first-ics-hacking-convictionA technical analysis of Jesse McGraw (GhostExodus), his compromise of hospital HVAC systems, and the evolution of industrial control system security threats.Mon, 13 Jul 2026 14:43:16 GMTGhostExodusJesse McGrawICS SecuritySCADAInsider Threathttps://runtimerebel.com/blog/insider-threat-security-expert-sentenced-for-blackcat-alphv-aidhttps://runtimerebel.com/blog/insider-threat-security-expert-sentenced-for-blackcat-alphv-aidFormer ransomware negotiator Angelo Martino received a 70-month prison sentence for aiding the BlackCat/Alphv ransomware group, highlighting insider threat risks.Fri, 10 Jul 2026 14:32:15 GMTBlackCatALPHVRansomwareInsider ThreatCybercrimeAngelo Martinohttps://runtimerebel.com/blog/openmandriva-insider-sabotage-risks-of-contributor-access-misusehttps://runtimerebel.com/blog/openmandriva-insider-sabotage-risks-of-contributor-access-misuseOpenMandriva Linux reports an attempted internal sabotage by a disgruntled contributor, highlighting critical risks of insider threats in open-source projects.Fri, 10 Jul 2026 03:31:37 GMTOpenMandrivaInsider ThreatOpen Source SecuritySupply Chain Attackhttps://runtimerebel.com/blog/iowa-school-district-hack-sentencing-highlights-insider-threat-riskshttps://runtimerebel.com/blog/iowa-school-district-hack-sentencing-highlights-insider-threat-risksFormer Iowa school IT employee sentenced to 21 months for malicious infrastructure disruption and data tampering against his former employer.Sun, 14 Jun 2026 01:05:13 GMTInsider ThreatIdentity ManagementAccount TakeoverSchool Securityhttps://runtimerebel.com/blog/five-eyes-warning-chinese-intelligence-job-recruitment-tacticshttps://runtimerebel.com/blog/five-eyes-warning-chinese-intelligence-job-recruitment-tacticsFive Eyes agencies issue an advisory on Chinese intelligence officers using fake job offers on professional sites to recruit personnel with security clearances.Fri, 05 Jun 2026 09:18:00 GMTFive EyesChinaSocial EngineeringInsider ThreatRecruitment Fraudhttps://runtimerebel.com/blog/cisa-data-leak-aws-govcloud-keys-exposed-via-public-github-repohttps://runtimerebel.com/blog/cisa-data-leak-aws-govcloud-keys-exposed-via-public-github-repoLawmakers demand answers from CISA after a contractor leaked AWS GovCloud keys and internal secrets on GitHub, prompting urgent credential rotation.Fri, 22 May 2026 16:50:37 GMTCISAAWS GovCloudGitHubCredential ExposureInsider Threathttps://runtimerebel.com/blog/empowering-human-defenses-addressing-threats-unstoppable-by-techhttps://runtimerebel.com/blog/empowering-human-defenses-addressing-threats-unstoppable-by-techCybersecurity defenses often overlook the human element. This analysis details how employees are the critical first line against advanced social engineering and insider…Tue, 12 May 2026 00:49:45 GMTHuman FactorSocial EngineeringPhishingInsider ThreatSecurity AwarenessCyber DefenseBEChttps://runtimerebel.com/blog/polymarket-insider-betting-geopolitical-information-riskhttps://runtimerebel.com/blog/polymarket-insider-betting-geopolitical-information-riskAn analysis by the Anti-Corruption Data Collective highlights rampant insider betting on Polymarket's military and political markets, posing significant geopolitical…Fri, 08 May 2026 20:27:58 GMTPolymarketInsider ThreatGeopolitical RiskInformation LeakagePrediction Marketshttps://runtimerebel.com/blog/ransomware-negotiator-double-agent-tactics-managing-ir-riskshttps://runtimerebel.com/blog/ransomware-negotiator-double-agent-tactics-managing-ir-risksAnalysis of the legal case involving a ransomware negotiator acting as a double agent and how to secure the incident response supply chain against fraud.Fri, 01 May 2026 12:30:57 GMTRansomware NegotiationInsider ThreatIncident Response IntegrityFraudhttps://runtimerebel.com/blog/us-security-experts-sentenced-in-revil-ransomware-conspiracyhttps://runtimerebel.com/blog/us-security-experts-sentenced-in-revil-ransomware-conspiracyTwo US security professionals were sentenced to prison for selling corporate credentials to the REvil ransomware gang, highlighting insider threat risks.Fri, 01 May 2026 12:29:23 GMTREvilInsider ThreatCredential TheftSodinokibiLegalhttps://runtimerebel.com/blog/blackcat-ransomware-cybersecurity-pros-sentenced-for-2023-attackshttps://runtimerebel.com/blog/blackcat-ransomware-cybersecurity-pros-sentenced-for-2023-attacksTwo cybersecurity professionals receive four-year prison sentences for their roles in facilitating BlackCat (ALPHV) ransomware attacks against U.S. victims.Fri, 01 May 2026 12:28:05 GMTBlackCatALPHVRansomwareInsider ThreatDepartment of JusticeCybercrimehttps://runtimerebel.com/blog/blackcat-ransomware-ir-professionals-sentenced-for-insider-attackshttps://runtimerebel.com/blog/blackcat-ransomware-ir-professionals-sentenced-for-insider-attacksTwo cybersecurity incident response professionals were sentenced to four years in prison for conspiring with the BlackCat (ALPHV) ransomware gang.Fri, 01 May 2026 08:45:49 GMTBlackcat RansomwareALPHVInsider ThreatIncident ResponseDoj Sentencinghttps://runtimerebel.com/blog/nsa-insider-threat-lessons-chris-inglis-on-post-snowden-securityhttps://runtimerebel.com/blog/nsa-insider-threat-lessons-chris-inglis-on-post-snowden-securityFormer NSA Deputy Director Chris Inglis reflects on the Snowden leaks, offering critical insights for CISOs on insider threat detection and enculturation.Wed, 29 Apr 2026 08:54:19 GMTInsider ThreatNSAChris InglisEdward SnowdenData ExfiltrationCyber Culturehttps://runtimerebel.com/blog/defensive-strategies-for-routine-workflow-weaponizationhttps://runtimerebel.com/blog/defensive-strategies-for-routine-workflow-weaponizationAttackers are pivoting from technical exploits to weaponizing trusted workflows. Learn how to detect and mitigate these behavioral identity-based threats.Thu, 23 Apr 2026 12:30:57 GMTSocial EngineeringBusiness Email CompromiseIdentity SecurityBehavioral AnalyticsInsider Threathttps://runtimerebel.com/blog/blackcat-ransomware-negotiator-scheme-insider-threat-implicationshttps://runtimerebel.com/blog/blackcat-ransomware-negotiator-scheme-insider-threat-implicationsA ransomware negotiator's guilty plea in a BlackCat scheme highlights critical insider threat risks and the importance of stringent controls in ransom payment processes.Wed, 22 Apr 2026 05:03:09 GMTBlackCatRansomwareInsider ThreatNegotiation FraudCybercrimeIncident Responsehttps://runtimerebel.com/blog/security-expert-aids-blackcat-ransomware-exposing-ir-riskshttps://runtimerebel.com/blog/security-expert-aids-blackcat-ransomware-exposing-ir-risksA US security expert pleaded guilty to collaborating with the BlackCat ransomware group, leveraging his negotiation role.Tue, 21 Apr 2026 20:24:31 GMTBlackCatALPHVRansomwareInsider ThreatCybercrimeAngelo MartinoIncident Responsehttps://runtimerebel.com/blog/insider-threat-former-negotiator-pleaded-guilty-to-blackcat-attackshttps://runtimerebel.com/blog/insider-threat-former-negotiator-pleaded-guilty-to-blackcat-attacksA former cybersecurity negotiator at DigitalMint has pleaded guilty to conducting BlackCat (ALPHV) ransomware attacks against U.S. organizations.Tue, 21 Apr 2026 12:32:39 GMTBlackCatALPHVInsider ThreatRansomwareDigitalMintCybercrimehttps://runtimerebel.com/blog/draftkings-hacker-sentenced-lessons-in-credential-stuffing-defensehttps://runtimerebel.com/blog/draftkings-hacker-sentenced-lessons-in-credential-stuffing-defenseAnalysis of the sentencing of Kamerin Stokes following the 2022 DraftKings breach, detailing credential stuffing TTPs and account takeover prevention strategies.Fri, 17 Apr 2026 12:29:34 GMTDraftKingsCredential StuffingAccount TakeoverInsider ThreatIdentity Thefthttps://runtimerebel.com/blog/dprk-it-worker-laptop-farms-u-s-nationals-sentenced-for-fraudhttps://runtimerebel.com/blog/dprk-it-worker-laptop-farms-u-s-nationals-sentenced-for-fraudTwo U.S. residents sentenced for operating laptop farms that enabled North Korean IT workers to defraud Fortune 500 companies using stolen identities.Thu, 16 Apr 2026 08:40:47 GMTDPRKLaptop FarmInsider ThreatIdentity TheftLazarus Grouphttps://runtimerebel.com/blog/kraken-extorted-by-hackers-following-insider-account-breachhttps://runtimerebel.com/blog/kraken-extorted-by-hackers-following-insider-account-breachKraken faces extortion after a social engineering attack on a support agent led to unauthorized internal system access and threatened customer data exposure.Wed, 15 Apr 2026 00:45:28 GMTKrakenInsider ThreatExtortionSocial EngineeringCrypto Securityhttps://runtimerebel.com/blog/insider-threat-former-engineer-locks-254-windows-servers-in-extortionhttps://runtimerebel.com/blog/insider-threat-former-engineer-locks-254-windows-servers-in-extortionA former infrastructure engineer pleaded guilty to a $750,000 extortion plot after locking administrators out of 254 Windows servers and deleting backups.Fri, 03 Apr 2026 12:22:29 GMTInsider ThreatWindows ServerExtortionIdentity ManagementIncident Responsehttps://runtimerebel.com/blog/password-management-deficiencies-manufacturing-healthcare-riskhttps://runtimerebel.com/blog/password-management-deficiencies-manufacturing-healthcare-riskAnalysis of critical password management weaknesses in manufacturing and healthcare sectors. Explores insider views, attacker exploitation, and mitigation strategies.Mon, 30 Mar 2026 20:19:15 GMTPassword SecurityAccess ManagementManufacturing SecurityHealthcare SecurityInsider Threathttps://runtimerebel.com/blog/doj-charges-second-insider-for-aiding-blackcat-ransomware-operationshttps://runtimerebel.com/blog/doj-charges-second-insider-for-aiding-blackcat-ransomware-operationsThe US DOJ charges a second DigitalMint employee for collaborating with BlackCat ransomware, revealing insider threats in incident response and negotiation.Thu, 12 Mar 2026 12:19:53 GMTBlackCatALPHVDepartment of JusticeInsider ThreatRansomware as a Servicehttps://runtimerebel.com/blog/ai-agent-security-risks-defending-against-autonomous-tool-misusehttps://runtimerebel.com/blog/ai-agent-security-risks-defending-against-autonomous-tool-misuseAnalysis of the security implications of autonomous AI agents, focusing on prompt injection, privilege escalation, and the erosion of trust boundaries.Mon, 09 Mar 2026 00:35:09 GMTAI SecurityLLM AgentsInsider ThreatAutonomous ToolsPrompt Injectionhttps://runtimerebel.com/blog/fbi-probes-suspicious-activity-on-sensitive-surveillance-systemshttps://runtimerebel.com/blog/fbi-probes-suspicious-activity-on-sensitive-surveillance-systemsThe FBI is investigating a potential breach of a system containing sensitive surveillance data, highlighting risks to national security and FISA data.Sat, 07 Mar 2026 04:34:09 GMTFBIFisa Section 702Surveillance DataGovernment CybersecurityInsider Threathttps://runtimerebel.com/blog/ex-l3harris-executive-sentenced-for-selling-zero-days-to-russiahttps://runtimerebel.com/blog/ex-l3harris-executive-sentenced-for-selling-zero-days-to-russiaFormer Trenchant CEO James Michael Robinson sentenced to 90 months for stealing zero-day exploits and selling them to a Russian state-linked broker.Wed, 25 Feb 2026 12:25:01 GMTL3HarrisTrenchantZero-DayInsider ThreatRussiaEspionageCyber Exploitshttps://runtimerebel.com/blog/l3harris-insider-sentenced-for-selling-zero-days-to-russian-brokerhttps://runtimerebel.com/blog/l3harris-insider-sentenced-for-selling-zero-days-to-russian-brokerFormer defense contractor Peter Williams sentenced to seven years for selling eight zero-day exploits to Russian broker Operation Zero for millions in profit.Wed, 25 Feb 2026 12:22:37 GMTInsider ThreatZero-DayOperation ZeroL3HarrisEspionageTrade Secretshttps://runtimerebel.com/blog/sentenced-ukrainian-national-facilitated-dprk-it-worker-infrastructurehttps://runtimerebel.com/blog/sentenced-ukrainian-national-facilitated-dprk-it-worker-infrastructureOleksandr Didenko sentenced to five years for orchestrating an identity laundering scheme that enabled North Korean operatives to infiltrate Western corporate networks.Mon, 23 Feb 2026 16:26:29 GMTDPRKIdentity TheftRemote Work FraudInsider ThreatLazarus Group