Threat Intelligence

7/10/2016
10:00 AM
Connect Directly
Twitter
Twitter
RSS
E-Mail
50%
50%

8 Ways Ethically Compromised Employees Compromise Security

From audit cheats to bringing data to a new job, unscrupulous employees put organizations at risk.
Previous
1 of 9
Next

Image Source: Adobe Stock

Image Source: Adobe Stock

The prevailing security wisdom to "trust but verify" comes from a deep well of painful experience.

The fact is that there are always a few bad apples in the barrel, and when it comes to employees--whether IT or your typical corporate user--the bad actors can introduce a lot of risk to the organization. But some IT executives may not realize just how many potential bad apples there can be, depending on the circumstances.

Here are a few statistics that show how prevalent shaky ethics really are in the workplace.

 

Ericka Chickowski specializes in coverage of information technology and business innovation. She has focused on information security for the better part of a decade and regularly writes about the security industry as a contributor to Dark Reading.  View Full Bio

Previous
1 of 9
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
rstoney
100%
0%
rstoney,
User Rank: Strategist
7/11/2016 | 8:10:04 AM
Code Development and Ethics
So where is the "ethics" line if you develop code, queries or some form of specialized programming?

 

If you wish to say it is completely unethical to take that from one job to another, then you are saying you must in essence forget everything you did on the prior position?

 

Or is it simply enough to re-develop the same code, without copy/paste, in the new position in order to say on th ethical side?

 

Keeping in mind, that a large reason you were hired in the new position, is the new employer hoping you create the same 'magic' you did in the last position.

 

And if your value is the knowledge you develop your measure of value to other companies, with the new model of company /employee loyalty (none either way) - in which an employer can relieve you at whim:  Where is the ethics of simply qualifying for the next job?   If you wish to say ethically you should not take any knowledge with you, then basically, what is your worth to your next employer?

 

Discuss away !
Veterans Find New Roles in Enterprise Cybersecurity
Kelly Sheridan, Staff Editor, Dark Reading,  11/12/2018
Understanding Evil Twin AP Attacks and How to Prevent Them
Ryan Orsi, Director of Product Management for Wi-Fi at WatchGuard Technologies,  11/14/2018
7 Free (or Cheap) Ways to Increase Your Cybersecurity Knowledge
Curtis Franklin Jr., Senior Editor at Dark Reading,  11/15/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Online Malware and Threats: A Profile of Today's Security Posture
Online Malware and Threats: A Profile of Today's Security Posture
This report offers insight on how security professionals plan to invest in cybersecurity, and how they are prioritizing their resources. Find out what your peers have planned today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-15769
PUBLISHED: 2018-11-16
RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is...
CVE-2018-18955
PUBLISHED: 2018-11-16
In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resour...
CVE-2018-19311
PUBLISHED: 2018-11-16
Centreon 3.4.x allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring > Status Details > Services" screen.
CVE-2018-19312
PUBLISHED: 2018-11-16
Centreon 3.4.x allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI.
CVE-2018-19318
PUBLISHED: 2018-11-16
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account.