Threat Intelligence

7/10/2016
10:00 AM
Connect Directly
Twitter
Twitter
RSS
E-Mail
50%
50%

8 Ways Ethically Compromised Employees Compromise Security

From audit cheats to bringing data to a new job, unscrupulous employees put organizations at risk.
Previous
1 of 9
Next

Image Source: Adobe Stock

Image Source: Adobe Stock

The prevailing security wisdom to "trust but verify" comes from a deep well of painful experience.

The fact is that there are always a few bad apples in the barrel, and when it comes to employees--whether IT or your typical corporate user--the bad actors can introduce a lot of risk to the organization. But some IT executives may not realize just how many potential bad apples there can be, depending on the circumstances.

Here are a few statistics that show how prevalent shaky ethics really are in the workplace.

 

Ericka Chickowski specializes in coverage of information technology and business innovation. She has focused on information security for the better part of a decade and regularly writes about the security industry as a contributor to Dark Reading.  View Full Bio

Previous
1 of 9
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
rstoney
100%
0%
rstoney,
User Rank: Strategist
7/11/2016 | 8:10:04 AM
Code Development and Ethics
So where is the "ethics" line if you develop code, queries or some form of specialized programming?

 

If you wish to say it is completely unethical to take that from one job to another, then you are saying you must in essence forget everything you did on the prior position?

 

Or is it simply enough to re-develop the same code, without copy/paste, in the new position in order to say on th ethical side?

 

Keeping in mind, that a large reason you were hired in the new position, is the new employer hoping you create the same 'magic' you did in the last position.

 

And if your value is the knowledge you develop your measure of value to other companies, with the new model of company /employee loyalty (none either way) - in which an employer can relieve you at whim:  Where is the ethics of simply qualifying for the next job?   If you wish to say ethically you should not take any knowledge with you, then basically, what is your worth to your next employer?

 

Discuss away !
Making the Case for a Cybersecurity Moon Shot
Adam Shostack, Consultant, Entrepreneur, Technologist, Game Designer,  2/19/2019
New Free Tool Scans for Chrome Extension Safety
Dark Reading Staff 2/21/2019
Privacy Ops: The New Nexus for CISOs & DPOs
Amit Ashbel, Security Evangelist, Cognigo,  2/18/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-8955
PUBLISHED: 2019-02-21
In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.
CVE-2019-1698
PUBLISHED: 2019-02-21
A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External E...
CVE-2019-1700
PUBLISHED: 2019-02-21
A vulnerability in field-programmable gate array (FPGA) ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module (PID: FPR9K-DNM-2X100G) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) conditio...
CVE-2019-6340
PUBLISHED: 2019-02-21
Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions is met: The site has the Drupal 8 core RE...
CVE-2019-8996
PUBLISHED: 2019-02-21
In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow.