Malicious Insiders stories

Insider risk now costs organisations an average USD $19.5 million a year as AI reshapes data access and employee negligence drives losses.

NCC flags fourth straight monthly rise in ransomware attacks and growing efforts by major gangs to recruit insiders and cyber staff.

Ransomware gangs are stepping up efforts to recruit insiders, warns NCC Group, as December 2025 attacks jump 13% to 784 globally.

OWASP has launched its first Top 10 list for agentic AI, warning autonomous systems act as a powerful but risky new digital workforce.

Human-linked cyber incidents have surged 90% as AI embeds deeper in workplaces, with security leaders warning of rising email and deepfake attacks.

NTT DATA and Rubrik have unveiled a global partnership to bolster ransomware protection for Fortune 500 firms, enhancing cyber recovery services and resilience.

CloudSEK's latest report reveals how cybercriminals exploit Zendesk's subdomain feature to create convincing phishing scams, risking brand trust and security.

CrowdStrike unveils its Insider Risk Services, a new strategy to tackle insider threats, amid rising costs of USD $16.2 million for organisations.

CrowdStrike has unveiled its Insider Risk Services, designed to tackle the rising costs of insider threats averaging USD $16.2 million annually.

Chris Hughes predicts that open source software adoption will grow in 2025, alongside sophisticated attacks and challenges in governance and security.

Cequence warns businesses could face average losses of USD $2.58 million per hour this December due to surging malicious bot traffic and fraud.

Sonatype's latest research reveals a shocking rise in open source malware, with over 778,500 malicious packages detected in 2024, primarily affecting government organisations.

Tenable's Cloud Security Research team has uncovered critical vulnerabilities in policy-as-code frameworks, escalating risks of data breaches and leaks.

Mobile access control is revolutionising data centre security, addressing insider threats and ensuring compliance with mandates like GDPR and NDB.

CrowdStrike's 2024 Threat Hunting Report exposes sophisticated cyber threats from nation-state actors and eCrime groups, highlighting a 55% rise in hands-on-keyboard intrusions.

Akamai's latest report reveals that 42% of web traffic is bot-driven, with 65% of these bots malicious, heavily impacting the eCommerce sector.

The rise in Drainer-as-a-Service (DaaS) cyber crimes indicates growing threats to social media accounts and cryptocurrency safety, including high-profile breaches.

Cybersecurity giant Proofpoint is set to acquire AI firm Tessian, bolstering its defences against email-based threats.

Kaspersky identifies new Linux-targeting malware campaign using infected Free Download Manager software, stealing sensitive information.

Secureworks' Counter Threat Unit researchers have long maintained active monitoring of the botnet and detected the disruption activity on August 25.