Join top executives in San Francisco on July 11-12, to hear how leaders are integrating and optimizing AI investments for success<\/em>. Learn More<\/a><\/em><\/p>\n

\n<\/div>\n
As Meta faces backlash from its employees over its handling of mass layoffs, security experts warn that such actions can create new threats to corporate data and systems.<\/p>\n
Facebook\u2019s parent company Meta announced last week that it would cut 21,000 jobs, or about 10% of its global workforce, as part of a restructuring plan. The move sparked outrage<\/a> among some workers, who accused senior executives of being out of touch and insensitive to their plight.<\/p>\n
But Meta is not alone in resorting to layoffs amid economic uncertainty. A recent KPMG report found that 85% of organizations believe that layoffs will be necessary as the economy slows down.<\/p>\n
<\/p>\n
\n
Event<\/h3>\n
\n
Transform 2023<\/span><\/p>\n
\n
Join us in San Francisco on July 11-12, where top executives will share how they have integrated and optimized AI investments for success and avoided common pitfalls.<\/p>\n<\/div>\n<\/div>\n

\n Register Now <\/a>\n <\/p>\n<\/div>\n
<\/body><\/p>\n
Such drastic measures can also expose companies to increased cybersecurity risks from disgruntled former employees, who may seek revenge or compensation by stealing or sabotaging sensitive data or systems.<\/p>\n
\u201cMass layoffs can result in the unintentional creation of insider threats,\u201d said Kyle Kappel, U.S. leader for cyber at KPMG<\/a> in an interview with VentureBeat. \u201cInsider threat risk includes theft of sensitive data, embezzlement, sabotage of critical systems, creation of backdoors into corporate environments or even causing reputational harm.\u201d\u00a0<\/p>\n
According to the Palo Alto Networks<\/a> Unit 42 team, 75% of insider threat cases involved<\/a> disgruntled ex-employees. Insider threat incidents include transferring protected data to personal accounts, transporting property to a competitor, or exploiting inside knowledge of employees to access privileged information.\u00a0<\/p>\n
Getting to grips with malicious insiders\u00a0<\/h2>\n
Controlling access to data assets is difficult when defending against external threat actors, but becomes much more challenging when dealing with an employee who not only has physical access to key data assets and resources, but firsthand knowledge of an organization\u2019s internal processes.\u00a0<\/p>\n
The moment an employee becomes dissatisfied or, in the Meta example, laid off, every app or service they had access to needs to be resecured in the event that the individual attempts to take revenge on the organization.\u00a0<\/p>\n
\u201cRemoval of access to systems and applications is critical during a mass layoff, and there are several unique challenges during these types of events,\u201d Kappel said. \u201cA common area that is overlooked is the removal of access to third-party applications.\u201d<\/p>\n
Kappel notes that access to third-party applications can be exploited not just to access critical data assets, but also to steal money.\u00a0<\/p>\n
The challenges and difficulties of offboarding\u00a0<\/h2>\n
Unfortunately for security teams, it\u2019s not always easy to identify what services an employee had access to, particularly when trying to offboard a high volume of staff at once.\u00a0<\/p>\n
\u201cWhen you\u2019re letting go of massive numbers of employees at once, things get very complicated,\u201d said Frank Price, CTO of third-party cyber-risk management vendor CyberGRX<\/a>.\u00a0<\/p>\n
\u201cGiven how interconnected we are these days, there are a lot of access and active sessions to inventory and properly manage in these moments. That one disgruntled engineer or salesperson who realizes they are still logged into GitHub<\/a> or Salesforce<\/a> on their personal device can cause a lot of trouble,\u201d Price said.\u00a0<\/p>\n
The disparate nature of these applications can lead to security teams failing to revoke access to key applications from potentially disgruntled employees.\u00a0\u00a0<\/p>\n
As a result, organizations need to be proactive about understanding employee access privileges. One way to do this is by using an identity provider (IDP), a type of identity and access management (IAM)<\/a> platform, which can centralize the management of user identity and authentication.\u00a0<\/p>\n
Introducing \u2018phygital\u2019 attacks\u00a0<\/h2>\n
At the same time, security leaders can\u2019t afford to overlook the risks presented by an employee\u2019s physical access to resources and equipment \u2014 what Will Plummer, former U.S. Army security expert and CSO at mail-screening technology provider RaySecur<\/a>, refers to as \u201cphygital\u201d attacks \u2014 \u201cthe convergence of physical and cyber.\u201d\u00a0<\/p>\n
\u201cThese attacks exploit weaknesses in physical security to gain access to digital infrastructure. They represent a sort of modern day trojan horse strategy known as \u2018warshipping,\u2019\u201d Plummer said.\u00a0<\/p>\n
Plummer explained that a typical warshipping attack occurs when a user is asked to return work equipment by mail, and uses the opportunity to tamper with the equipment, such as installing a battery-powered microcomputer that either mines for data or searches for a network vulnerability.\u00a0<\/p>\n
Implementing endpoint or mobile device management and auditing equipment as its returned can help to minimize the risks of these types of attacks.\u00a0<\/p>\n
Other ways to mitigate insider risk\u00a0<\/h2>\n
While mitigating breaches caused by malicious insiders and ex-employees is easier said than done, organizations can mitigate the risk of data exposure by better monitoring and controlling data access as part of what Kappel calls an \u201cestablished insider threat program.\u201d\u00a0\u00a0<\/p>\n
In practice, that means monitoring user activity and access to resources in real time and post event to ensure that privileged users aren\u2019t engaging in any harmful activity, such as exfiltrating data or installing malware.\u00a0<\/p>\n
In addition, perhaps the most valuable defense that organizations have against threats from disgruntled ex-employees is empathy<\/a>.\u00a0<\/p>\n
Approaching layoffs with compassion, clearly communicating the reasons for cutbacks, and offering employees support in the form of a severance package can help reduce the chance of employees feeling betrayed and attempting to take revenge on the organization. Ultimately, if you want to avoid a morale crisis, invest in building morale.<\/p>\n
VentureBeat’s mission<\/strong> is to be a digital town square for technical decision-makers to gain knowledge about transformative enterprise technology and transact. Discover our Briefings.<\/a><\/p>\n<\/p><\/div>\n
Read More<\/a>
\n Tim Keary<\/p>\n","protected":false},"excerpt":{"rendered":"
Join top executives in San Francisco on July 11-12, to hear how leaders are integrating and optimizing AI investments for success. Learn More As Meta faces backlash from its employees over its handling of mass layoffs, security experts warn that such actions can create new threats to corporate data and systems.Facebook\u2019s parent company Meta announced<\/p>\n","protected":false},"author":1,"featured_media":629924,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2904,27291,46],"tags":[],"class_list":["post-629923","post","type-post","status-publish","format-standard","has-post-thumbnail","category-create","category-layoffs","category-technology"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/629923","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=629923"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/629923\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/629924"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=629923"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=629923"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=629923"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

Event<\/h3>\n\nTransform 2023<\/span><\/p>\n

The challenges and difficulties of offboarding\u00a0<\/h2>\nUnfortunately for security teams, it\u2019s not always easy to identify what services an employee had access to, particularly when trying to offboard a high volume of staff at once.\u00a0<\/p>\n