A threat actor is a person that causes a security incident that can negatively impact an organization.

Threat actors are not always outside threats targeting a business for malicious reasons — in many cases breaches are caused by internal actors. In 2018, insiders caused a staggering 34% of all organizational data breaches. Whether it’s a current employee, vendor, or even an ex-employee who caused the breach, an insider threat is a risk that is often overlooked by companies. Organizations typically focus more on blocking external attacks, leaving them entirely vulnerable to insider threats.

Next up:

JBOH (JavaScript-Binding-Over-HTTP)

Zero Trust