The Secret Message Hackers Left Deep Inside Their Malware🎙Darknet Diaries Ep. 103: Cloud Hopper
Source: YouTube · Jack Rhysider · published Nov 23, 2023 · 52:26
While the CEO is traditionally viewed as the ultimate authority, the sysadmin may actually hold the most power in a workplace due to their administrative access to the core machines required for the business to operate 0:00.
Key Takeaways:
• CEOs can dictate policy, but sysadmins possess the technical keys to the company's operational infrastructure 0:00.
• A sysadmin with broad access can read anyone's email, view database contents, and access files on employee computers 0:22.
• They can also monitor network traffic to see exactly where employees go online and what they download 0:26.
• This extreme concentration of power is not present in every organization, but some networks are explicitly set up this way 0:37.
Ultimately, granting a single individual this level of access creates a massive concentration of power that can easily rival executive leadership. Organizations must carefully structure their IT permissions to mitigate this hidden risk.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
JACK: Who’s the person with the most power in
the workplace? You might think it’s the CEO or owner since they can call all the shots and
make policy changes that everyone has to adhere to. But I think the most powerful person in the
workplace might be the sysadmin, the person who has administrative access to the core machines
that are required for the business to operate. They can see what’s in the database and they
can read anyone’s e-mail in the whole company, and they can see what files are on your computer,
and they can sniff all the network traffic from your computer to see where you go and what you
downloaded. Now, not every network is set up like this, where someone can see everything about
everyone, and not all networks have one person who has all this access. But some netw…