The insider threat rises again
April 1, 2026
#Errol Weiss
#H-ISAC Media mention
#Insider Threat
Insiders have always posed a risk, but modern technologies, tactics, and motivations have increased the threat, likelihood, and consequences of insider-related incidents.
Health-ISAC pulled quote:
Some of these dynamics have enabled malicious actors to land work within companies to then become insider threats, says Errol Weiss, CSO at Health-ISAC. These malicious actors, who are often from North Korea, obfuscate their identities and locations so they can be hired for legitimate roles, typically in IT. The common MO is to work for as long as possible to earn money to send back to North Korea while also laying the groundwork to launch some type of attack when their employers uncover their true identities. “They’re monetizing their exits by stealing data or extorting their employers on their way out,” Weiss explains.
Read the article in CSO Online. Learn More
Related Resources & News
Podcast: Phil Englert on Medical Device Cybersecurity
‘Missed opportunity’: US government’s absence from RSAC Conference leaves stark void
Health-ISAC Hacking Healthcare 3-26-2026
Health-ISAC Hacking Healthcare 3-19-2026
Health-ISAC Monthly Newsletter – April, 2026
After-Action Report: Health-ISAC Resilience Exercise Series 2025
Why Microsoft Intune’s role in Stryker cyberattack is a scary prospect
Texas Gov. Orders State Review of Chinese-Made Medtech
ISACs confront AI’s promise and peril for threat intelligence-sharing
FDA Tightens Its Medical Device Cybersecurity Guidance
Podcast: Phil Englert on Medical Device Cybersecurity
‘Missed opportunity’: US government’s absence from RSAC Conference leaves stark void