Tag: Insider Threat

The insider is the vector companies miss most, and one of the most common. Someone you hired works into trust and access, then leaves with passwords or sells data. These articles cover why the insider is so dangerous and how to limit the damage.

Audits

The Consultant We Fired for Cracking Our Passwords

The PCI scan found L0phtCrack, a password cracker, sitting on one of our servers. We hunted it down expecting an intruder. We found our own consultant, who needed passwords to do his job and decided cracking them was faster than…

Backups

What Actually Gets Attacked First in a Cyberattack

Attackers rarely come through the firewall; if they do, you were sloppy, because the firewall is the easy part. The real vectors are social engineering and the insider, and the insider is the most common and most overlooked. Two decades…

SEE » Technology series

Tag: Insider Threat

The Consultant We Fired for Cracking Our Passwords

What Actually Gets Attacked First in a Cyberattack

Books & Reviews

Services

Resources

Get In Touch

Or follow Richard's work