Insider Threats: Your employees are being used against you
Summary: Cisco Talos reports that attackers are shifting away from vulnerability exploitation and malicious macros toward insider threats, split into malicious insiders and unwitting assets manipulated through social engineering. Talos cites financial distress, political polarization, and recently departed employees as drivers, and says incident response engagements involving malicious insiders and social-engineered unwitting assets have increased over the past six months to a year.
Why it matters: Nearly half of U.S. security clearance denials involve financial considerations, and Talos notes attackers now pose as IT support by phone to talk victims into accepting MFA requests - a technique that played a role in the recently disclosed attack against Cisco itself.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026