The $6.3bn Binance cyber-heist is a great example of the convergence and overlapping of insider and cyber risks, the growing importance of nation state related threats, and the growing sophistication and capability of bad-actors.
The Cyber-Heist Exploited Multiple Security Vulnerabilities
The theft was not the result of a single isolated breach or a simple phishing incident. The attackers combined social engineering by fake recruitment interviews, malicious software downloads, compromised internal AI tooling, laptop compromise, and an advanced transaction-authorisation method.
Technical cyber security controls alone will not deal with these threats. Nor will insider risk management programmes that only address “personnel” security issues.
The increasingly pressing requirement is for joined-up security that integrates enhanced insider risk management with cyber and physical security.
GSA Global’s Expertise in Insider Risk Management
GSA Global has played a leading role in establishing the UK Insider Risk Management Collaboration Centre, building relationships with our 5-eyes counterparts, and providing advice to the National Preparedness Commission on Insider Risk Management.
GSA Global supports organisations in developing and strengthening their insider risk management programmes. Our specialist team brings together counterintelligence, security vetting, monitoring, investigations and training to help organisations identify vulnerabilities, manage insider threats and build greater organisational resilience.
