Insider Threats

Insider threat in cybersecurity refers to the potential risk posed by individuals within an organization who may intentionally or unintentionally compromise security, often due to their access to sensitive information and systems.

Example

In 2019 Microsoft employees made misconfiguration errors on a new version of Azure security rules. They were lax about monitoring user records and activity with sensitive assets. In addition, they didn’t limit access to a customer support database with a strong password or two-factor authentication.

Links

• Microsoft confirms it was breached by hacker group Lapsus$
• Microsoft discloses security breach of customer support database
• What is an Insider Threat?

Cards

Authentication

• Authentication 6
• Authentication 9
• Authentication Q
• Authentication K
• Authentication A

Authorization

• Authorization 2
• Authorization 4
• Authorization 7
• Authorization J
• Authorization K
• Authorization A

Cryptography

• Cryptography 4
• Cryptography 5
• Cryptography 8
• Cryptography J
• Cryptography Q

Cornucopia

• Cornucopia 3
• Cornucopia 5
• Cornucopia 8
• Cornucopia Q
• Cornucopia K
• Cornucopia A

View source on GitHub