Skip to content

Topic

Insider threats

Security risk from employees or contractors who misuse their access or help outside attackers.

Current stories

investConfirmed48 publishers

OpenAI sees no sign its weights or code were taken after an employee hid a listening device

OpenAI said on Tuesday that the FBI arrested one of its employees over a sophisticated listening device hidden in a company office. Everything public so far comes from the company's own X post, and the FBI had not responded to Reuters.

Perspective Coverage

50 publishers
Builder
Builder 29%
Operator
Operator 45%
Investor
Investor 26%

Reality

Evidence74
Adoption
Insufficient
Hype gap+30
Incentives55
Confidence72
securityOne report1 publisher

FBI charges OpenAI engineer with planting a recorder behind a meeting-room TV

OpenAI engineer Abdulrahman Alfozan was arrested by the FBI on 9 October over a recording device allegedly planted in a meeting room. According to the complaint, he used AI assistants to check room schedules and learn to build and remotely access the device.

Publishers:bbc.com

Reality

Evidence60
Adoption
Insufficient
Hype gap0
Incentives
Insufficient
Confidence62
securityConfirmed5 publishers

Infrastructure engineer gets 32 months for locking his employer out of 3,538 machines

Daniel Rhyne, a former infrastructure engineer, got 32 months in prison for using domain controller tasks to lock out 254 servers and 3,284 workstations. He staged it over 17 days of unauthorized access, and administrators learned of it from password-reset notifications after the tasks ran.

Perspective Coverage

5 publishers
Builder
Builder 19%
Operator
Operator 58%
Investor
Investor 23%

Reality

Evidence78
Adoption
Insufficient
Hype gap+5
Incentives25
Confidence80
securityOne report1 publisher

Intel 471 finds criminals paying brokers to locate employees who can reset accounts or reroute parcels

Intel 471 found recruitment in 45 of 85 underground insider records, with criminals paying brokers and referrers to find staff. The work on sale is routine, such as account resets and shipment changes, done under access that sidesteps controls built for outsiders.

Reality

Evidence45
Adoption
Insufficient
Hype gap+10
Incentives
Insufficient
Confidence50