Tag: Insider Threat

  • Schneier on Security: Another Supply Chain Vulnerability

    Source URL: https://www.schneier.com/blog/archives/2025/07/another-supply-chain-vulnerability.html Source: Schneier on Security Title: Another Supply Chain Vulnerability Feedly Summary: ProPublica is reporting: Microsoft is using engineers in China to help maintain the Defense Department’s computer systems—with minimal supervision by U.S. personnel—leaving some of the nation’s most sensitive data vulnerable to hacking from its leading cyber adversary, a ProPublica investigation has…

  • Slashdot: US Government Takes Down Major North Korean ‘Remote IT Workers’ Operation

    Source URL: https://yro.slashdot.org/story/25/06/30/2236218/us-government-takes-down-major-north-korean-remote-it-workers-operation Source: Slashdot Title: US Government Takes Down Major North Korean ‘Remote IT Workers’ Operation Feedly Summary: AI Summary and Description: Yes Summary: The U.S. Department of Justice has uncovered a fraudulent operation involving North Korean IT workers who infiltrated American tech companies to generate revenue for the regime. These actions pose significant…

  • The Register: Former US Army Sergeant pleads guilty after amateurish attempt at selling secrets to China

    Source URL: https://www.theregister.com/2025/06/23/infosec_news_in_brief/ Source: The Register Title: Former US Army Sergeant pleads guilty after amateurish attempt at selling secrets to China Feedly Summary: PLUS: 5.4M healthcare records leak; AI makes Spam harder to spot; Many nasty Linux vulns; and more Infosec in brief A former US Army sergeant has admitted he attempted to sell classified…

  • Simon Willison’s Weblog: Agentic Misalignment: How LLMs could be insider threats

    Source URL: https://simonwillison.net/2025/Jun/20/agentic-misalignment/#atom-everything Source: Simon Willison’s Weblog Title: Agentic Misalignment: How LLMs could be insider threats Feedly Summary: Agentic Misalignment: How LLMs could be insider threats One of the most entertaining details in the Claude 4 system card concerned blackmail: We then provided it access to emails implying that (1) the model will soon be…

  • Slashdot: ‘Deliberate Attack’ Deletes Shopping App’s AWS and GitHub Resources

    Source URL: https://it.slashdot.org/story/25/06/04/0442240/deliberate-attack-deletes-shopping-apps-aws-and-github-resources?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: ‘Deliberate Attack’ Deletes Shopping App’s AWS and GitHub Resources Feedly Summary: AI Summary and Description: Yes Summary: The incident involving KiranaPro highlights significant security threats facing cloud infrastructure and development environments, especially for startups. The reported deliberate attack compromised the company’s GitHub and AWS resources, emphasizing the critical importance…