Forget the outside hacker, the bigger threat is inside by the coffee machine
(2023/10/26)
- Reference: 1698351310
- News link: https://www.theregister.co.uk/2023/10/26/register_kettle_insider_threat/
- Source link:
Kettle In this week's Kettle the topic is one that's been much in the news this week - the much-underrated insider threat issue.
While there are thousands of security shops willing to sell elaborate firewalls, zero-trust barriers, and AI security systems that claims to be able to spot a wrong'un easily. But time and again the most effective thieves are already inside the building and using their corporate-issued credentials.
Such was the case this week in the NSA of all places, where a rogue systems engineer, who resigned in anger, tried to sell purloined documents to a Russian agent in exchange for cryptocurrency. Brandon Vigliarolo [1]covered the case and explains what motivated the plot and the surprisingly easy way he was discovered.
[2]Still got a job at the end of this week? You're lucky, as more layoffs hit the tech industry
[3]Microsoft ends its week on a high – after a trying time with tax bills and Copilot costs
[4]When Microsoft complains that you're a monopolist you know things are bad
News of another insider who did get away with it, it seems, came on Tuesday, as an ex-staffer at Dutch chip-making biz ASML [5]appears to have taken a new job with Huawei, and is accused of taking secrets with him. Tobias Mann has the inside information of the case and, as [6]Biden's sanctions bite harder, we may see more of these sorts of shenanigans.
Then there's the ultimate insider - yourself. On Wednesday Jessica Hardcastle [7]reported on an ACLU Freedom of Information lawsuit showing that US Immigration and Customs Enforcement hired security snoops to trawl through social media content to look for anti-American sentiments. She explains the complex web behind this and it's something we all had a lot to say on. You can see the full discussion below.
So join us for 15 minutes of news, insight, and more than a little snark in the latest Kettle, hosted by Iain Thomson and spun to gold by producer Nicole Hemsoth. There's also an [8]audio version available now on [9]Apple , Amazon, Spotify and Google. ®
Get our [10]Tech Resources
[1] https://www.theregister.com/2023/10/24/nsa_techie_russia_espionage/
[2] https://www.theregister.com/2023/10/21/register_kettle_layoffs/
[3] https://www.theregister.com/2023/10/15/microsoft_register_kettle/
[4] https://www.theregister.com/2023/10/09/google_amazon_kettle/
[5] https://www.theregister.com/2023/10/24/asml_ip_huawei/
[6] https://www.theregister.com/2023/10/24/nvidia_chip_ban_imposed_already/
[7] https://www.theregister.com/2023/10/25/ice_social_media_surveillance/?td=rt-3a
[8] https://feeds.simplecast.com/Vnvf8Fkd
[9] https://podcasts.apple.com/us/podcast/the-register-kettle/id1713589041
[10] https://whitepapers.theregister.com/
While there are thousands of security shops willing to sell elaborate firewalls, zero-trust barriers, and AI security systems that claims to be able to spot a wrong'un easily. But time and again the most effective thieves are already inside the building and using their corporate-issued credentials.
Such was the case this week in the NSA of all places, where a rogue systems engineer, who resigned in anger, tried to sell purloined documents to a Russian agent in exchange for cryptocurrency. Brandon Vigliarolo [1]covered the case and explains what motivated the plot and the surprisingly easy way he was discovered.
[2]Still got a job at the end of this week? You're lucky, as more layoffs hit the tech industry
[3]Microsoft ends its week on a high – after a trying time with tax bills and Copilot costs
[4]When Microsoft complains that you're a monopolist you know things are bad
News of another insider who did get away with it, it seems, came on Tuesday, as an ex-staffer at Dutch chip-making biz ASML [5]appears to have taken a new job with Huawei, and is accused of taking secrets with him. Tobias Mann has the inside information of the case and, as [6]Biden's sanctions bite harder, we may see more of these sorts of shenanigans.
Then there's the ultimate insider - yourself. On Wednesday Jessica Hardcastle [7]reported on an ACLU Freedom of Information lawsuit showing that US Immigration and Customs Enforcement hired security snoops to trawl through social media content to look for anti-American sentiments. She explains the complex web behind this and it's something we all had a lot to say on. You can see the full discussion below.
So join us for 15 minutes of news, insight, and more than a little snark in the latest Kettle, hosted by Iain Thomson and spun to gold by producer Nicole Hemsoth. There's also an [8]audio version available now on [9]Apple , Amazon, Spotify and Google. ®
Get our [10]Tech Resources
[1] https://www.theregister.com/2023/10/24/nsa_techie_russia_espionage/
[2] https://www.theregister.com/2023/10/21/register_kettle_layoffs/
[3] https://www.theregister.com/2023/10/15/microsoft_register_kettle/
[4] https://www.theregister.com/2023/10/09/google_amazon_kettle/
[5] https://www.theregister.com/2023/10/24/asml_ip_huawei/
[6] https://www.theregister.com/2023/10/24/nvidia_chip_ban_imposed_already/
[7] https://www.theregister.com/2023/10/25/ice_social_media_surveillance/?td=rt-3a
[8] https://feeds.simplecast.com/Vnvf8Fkd
[9] https://podcasts.apple.com/us/podcast/the-register-kettle/id1713589041
[10] https://whitepapers.theregister.com/
stiine
I thought for sure you were going to talk about remote microphones glued to the back of the coffee machine or about the outsourced cleaning crew.
Perfect security
None of our employees have the faintest idea what we do, why we do it, who the customer is or how it works -