The recent Capital One breach illustrates the dangers of insider attacks

There are many takeaways for organizations and security professionals from the recent Capital One data breach, which compromised sensitive data belonging to some 100 million customers. Among these is the clear and present danger that insider attacks pose to enterprise cyber security. As Capital One learned the hard way, insider carelessness can be just as damaging as maliciousness. According to the U.S. Department of Justice, the former Amazon employee accused of stealing Capital One’s data from an AWS storage bucket accessed the data through a “misconfigured web application firewall.”