#insider-threat
19 stories taggedinsider-threat.

Nearly a Million Australians' Data Stolen in Origin Energy Breach Traced to Manila Call Centre
A former employee at a Manila-based Accenture office allegedly took customer records belonging to roughly 900,000 Origin Energy customers and tried to extort the company for money to return them.

AI Agents That Go Rogue Are Now an Insider Threat, Security Expert Warns
A breach involving AI systems at a major machine-learning platform has exposed a problem companies weren't expecting: the AI tools they deploy to protect themselves can turn against them.

North Korean IT Worker Infiltrated a Federal Agency, Boeing 737 Security Flaws Explored, and Refrigeration Systems Found Vulnerable
A roundup of three security stories that deserve more attention: a suspected North Korean operative who got hired at a US government agency, researchers who probed the computers aboard a Boeing 737, and critical flaws in industrial refrigeration controllers.

Contractor Jailed Two Years After $2.5M Extortion Attempt Against Brightly Software
Cameron Curry stole payroll data on his way out the door, then threatened to report his ex-employer to the SEC unless it paid up.

The fake new hire problem: how criminals slip in through remote onboarding
Gaps between background checks, laptop delivery and account setup are letting impostors join companies as staff. Here's how the trick works, and what stops it.

Researchers Set Up a Fake Crypto Company and Hired Three Suspected North Korean IT Workers
The sting recorded every keystroke on the laptops the fake employer issued, exposing the paper trail of a scheme US officials say funnels wages back to Pyongyang.

One Developer Password Unlocked Everything: Inside a Healthcare Software Provider's Wake-Up Call
A company that thought its segmented cloud setup was secure ran a simulated attack and watched a single stolen developer credential unravel four years of layered defences in minutes.

AI Agents Are Going Rogue, and Security Teams Are Scrambling to Keep Up
From OpenAI models breaking out of their sandboxes to malicious instruction files turning AI assistants into data thieves, a wave of new research shows the AI threat landscape is moving faster than most defences can follow.

New Zealand's Privacy Commissioner Warns of a Hidden Threat Inside Your Own Organisation
A quarter of all reported privacy breaches in New Zealand now involve staff snooping on people's personal records. Organised crime is making the problem worse.

Nigeria's Fraud Losses Keep Climbing Even as Reported Incidents Fall
Fewer fraud cases are being recorded in Nigeria, but each one costs more. A new cybersecurity framework is coming, the question is whether enforcement will follow.

From Prison to Cybersecurity Advocate: The Jesse McGraw Story
Once known online as GhostExodus, Jesse McGraw hacked hospital systems as a teenager, went to federal prison, and came out the other side trying to help defenders. His story is a rare look at what radicalises young hackers and what, sometimes, pulls them back.

Security Consultant Who Secretly Fed Intel to BlackCat Ransomware Gang Gets Nearly Six Years
Angelo Martino was hired to help ransomware victims negotiate their way out. Instead, he sold their secrets to the criminals holding them hostage.

Ransomware Negotiator Turned Attacker Gets Nearly Six Years for BlackCat Extortion Scheme
Angelo Martino, a former DigitalMint employee, was paid to help victims recover from ransomware. Instead he ran the attacks himself, leaking insurance details to squeeze bigger payouts.

OpenMandriva Linux Says Angry Contributor Wiped Years of Work
A developer with admin keys deleted repositories and pushed a package that could have broken user systems, after a dispute over the project's direction.

Seven Arrested Over Alleged Council Fraud in Shepparton as Police Probe Four-Year Scheme
Greater Shepparton City Council referred its own employees to police after internal checks flagged suspicious financial activity stretching back to 2022.