Real-world case studies from the CERT Insider Threat Center
April 10, 2013
A manufacturing firm that was having a hard time designing a process to produce a certain widget had a dastardly idea -- why not spy on a customer it knew produced a similar type of product by asking for a visit to that company's manufacturing floor to "inspect" equipment on customer premises. The manufacturing company sent two employees, one as lookout and the other as a photographing spy, to take pictures of the customer's manufacturing operation with a cell phone. The employees were successful in spite of security policies around that area that should have kept the spies from walking around without escort or carrying cameras.
"No matter how good your security is, it's only as good as how well it is enforced," Cappelli says.
Photo Credit: stock.xchng
About the Author(s)
You May Also Like
Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024Safeguarding Political Campaigns: Defending Against Mass Phishing Attacks
May 16, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024