Insider Risk Digest: July ???

Keep up to date with the latest cases of insider risk, even when on vacation, with this month's Insider Risk Digest. From risks to critical infrastructure to AI-related whistleblowing cases, we explore a diverse range of cases this month. We also explore a landmark case of undermining in the Netherlands, showing the reach and adaptability of criminal organisations.

??We value your insights! Leave a like if you find this digest insightful and join the conversation in the comments. Let's continue to tackle these challenges together. ????

North Sea's Critical Infrastructure

European countries continue to hire Russian technicians and freelancers to map and inspect critical infrastructure in the North Sea. With rising geopolitical tensions, however, the risk that Russia exerts influence on these individuals to facilitate intelligence collection is high. Legitimate access to critical infrastructure allows for the collection of sensitive information, increasing the threat of sabotage and espionage. Despite the strong attention insider risk and hybrid warfare are receiving, a total overview of all vulnerabilities is absent. These seem to be lying most notably in the third-party environment comprised of hired companies, suppliers, and freelancers.

BZT Undermined

Tran-shipment company Bulk Terminal Zeeland has been ordered to close for a year due to its involvement in major cocaine trafficking cases. The firm's operations and directors were found to be deeply entangled in illegal activities, potentially posing as a front company facilitating criminal activity. This news follows a rise in concerns that smaller ports in the Netherlands and Europe are being targeted by organised crime groups due to the increase in surveillance and mitigation measures in Rotterdam and Antwerp.

Ex-CIA Analyst Turned Spy

A former US Central Intelligence Agency Analyst (CIA) has been indicted over charges of acting as a spy for the South Korean government in exchange for luxury items. Her work for the South Korean government allegedly began after she stopped working for the CIA and National Security Council, but had not registered herself as a foreign agent. Under secret instructions from officials of the Republic of Korea (ROK) government, 'Terry' publicly promoted ROK policy positions, leaked confidential U.S. government information to ROK intelligence agents, and facilitated ROK officials' access to U.S. government personnel. In return for these activities, ROK intelligence officers supplied Terry with luxury items, lavish dinners, and over $37,000 in funding for a public policy program on Korean affairs that Terry managed.

Roche vs Stanford University

Pharmaceutical giant Roche has initiated legal action against Foresight and Stanford University, alleging the misuse of trade secrets. The lawsuit claims that proprietary information was unlawfully utilised, potentially impacting Roche's competitive edge. Specifically, Roche argues that Foresight and Stanford have applied for patents relating to cancer detection and monitoring technology using confidential information. Foresight’s founders had worked for Roche as consultants and contractors.

Whistleblowing at Open AI

OpenAI faces allegations from lawyers representing anonymous whistleblowers who accuse the company of imposing illegally restrictive non-disclosure agreements (NDAs). The accusations suggest that these NDAs may have been used to silence employees, limit transparency with governmental regulators and prevent the reporting of unethical practices, with the internal whistleblowing mechanisms overly restrictive.?

Disney Leaks

Disney finds itself at the centre of an insider risk incident as it investigates a massive leak of internal messages. Whilst compromised by a group of hackers, the hackers have stated that they accessed Disney’s Slack channel through an insider. Following a rise in AI-generated artwork, the hacker group claims to defend and protect artists’ rights and fair compensation.

Would you like to see more Insider Risk Digests like this one? Then please like & share ????