How Malicious Insiders Use Known Vulnerabilities Against Their Organizations

Originally published by CrowdStrike. Between January 2021 and April 2023, CrowdStrike identified multiple incidents in which an internal user either exploited or sought to exploit a known vulnerability, or deploy offensive security tooling against their enterprise environment.Approximately 55% of the identified insider threat incidents involved unauthorized use or attempted use of privilege escalation exploits.Approximately 45% of insider threat incidents involved insiders who unwittingly int...

april crowdstrike deploy enterprise environment exploit exploited incidents insider insiders insider threat internal january known vulnerabilities known vulnerability malicious malicious insiders offensive offensive security organizations security security tooling threat threat incidents tooling unauthorized vulnerabilities vulnerability