A support contractor at Coinbase was bribed to quietly hand over customer data. Yep, not sophisticated hacking - just criminals paying insiders to abuse their legitimate access. The breach could cost Coinbase up to $400 million, not to mention the customers who may subsequently have been duped by fraudsters posing as Coinbase support staff.
Then there's the AI coding agent that was told, repeatedly, not to touch a company's live database. It deleted it anyway....
1/2
This is the same underlying problem - someone (or some *thing*) had more access than they needed, and no-one was keeping an eye on it.
On 29 Oct I'll be joining Jane Frankland and Okta for a webiar about what happens when access and governance don't line up... looking at real-world breaches, why AI agents are making things more challenging, and what organisations can do about it.
Event Details:
📅 29 October
⏰ 15:15 UK / 16:15 CET / 11:15 EDT / 08:15 PDT
https://events.zoom.us/ev/Arg6jBGfHVoyexWU7OgNzLgWTZsl4wk2GiehQSwonSo2Vu8M_MbJ~Aqj_SS1u-Qj3g2BrC-jKKye4gVlM5E_w9uj48D0YlqqJmqX4jGNiQ8WKMO4zHGkonta3OKNmNeREllqlnPsnI_yGNw
2/2
Identity Gaps to Business Risk: Connecting Access & Governance