From pen-test to penitentiary: Infosec duo cuffed after physically breaking into courthouse during IT security assessment
Two men hired to assess a court record system's computer security were arrested Wednesday – after they were caught physically sneaking into a courthouse.
According to the Des Moines Register today, the duo were cuffed by deputies in Iowa, USA, after they tripped an intruder alarm at a Dallas County courthouse.
The two men, who now face burglary charges, said they were attempting the break-in as part of a penetration test the county court had paid their employer, security biz Coalfire, to perform against the court's electronic records system.
In other words, the ethical hacker duo were pen-testers just trying to get physical access to computers managing or storing court records as part of a planned security probe.
Here's where things jump the tracks. The Dallas County court officials fully acknowledged they hired the two experts to test the security of their IT system. The bureaucrats were, however, unaware the tests could also involve physical break-ins, it is claimed.
"The two men arrested work for a company hired by [the state court administration, or SCA] to test the security of the court’s electronic records," Iowa's judicial branch said in a statement on the matter.
"The company was asked to attempt unauthorized access to court records through various means to learn of any potential vulnerabilities. SCA did not intend, or anticipate, those efforts to include the forced entry into a building."
Those familiar with pen-testing procedures were quick to point out just what a colossal failure had to occur to create these sort of circumstances.
Industry: Cyber Security
- CONTRACT- Security engineer AWS | SIEM. OUTSIDE IR35
- Outside IR35
Security engineer AWS | SIEM. CONTRACT OUTSIDE IR35 Deep understanding of AWS Security (Security Hub, Guard duty, Firewall Manager etc) Extensive experience with the development, implementation, monitoring and optimisation of SIEM solutions. Experience working within a cloud migration environment. Additional key experience with Hardening, DevOps, PKI etc Financial Service experience preferred. London Outside IR 35
- Architect | Cyber Security | Public sector Permanent
Architect | Cyber Security | Public sector Permanent Seeking a Security Architect with Public Sector / Cloud Security experience for a lead technical role. Public sector security architecture design experience essential. (MoD) Current project experience delivering HLD / assurance of computer networks / build evaluations. Active Security clearance required. If you are open to hear about a new / exclusive opportunity where you are interested to be more than a number in a company reach out to team today. Chris.firstname.lastname@example.org 07884666351
- CIAM Architect Azure B2C
We are seeking a highly skilled and experienced Azure B2C CIAM Architect for a contract starting on Jan 2024. As an Azure B2C CIAM Architect, you will be responsible for designing, implementing, and deploying an new Azure B2C Solution . Responsibilities: Design and implement an Azure B2C-based CIAM solution that meets the needs of our clients organization. Maintain and support the Azure B2C-based CIAM solution. Provide training and support to our employees on the use of the CIAM solution. Background designing, implementing, and maintaining CIAM solutions. Experience with cloud-based identity and access management (IAM) solutions. Experience with OAuth, OpenID Connect,and SAML. Excellent written and verbal communication skills
- Senior IAM Consultant
- Upto €110,000 depending on level of position
Senior IAM Consultant is needed to help lead and deploy IAM Projects for this expand IAM Consultancy The ideal candidate will have a deep understanding of IAM concepts and technologies, as well as experience in deploying and managing complex IAM solutions. Responsibilities Lead the deployment of IAM solutions for our clients Work with clients to understand their IAM requirements and design solutions that meet their needs Configure and implement IAM solutions using best practices Integrate IAM solutions with other enterprise systems Provide training and support to clients on the use of IAM solutions Stay up-to-date on the latest IAM technologies and trends We are looking for an experieneced IAM Consutlatn with: Strong understanding of IAM concepts and technologies,including identity lifecycle management,access control,and authentication Experience in deploying and managing complex IAM solutions Experience with IAM products and solutions,such as SailPoint,One Identity Manager,and Azure Active Directory Excellent communication and interpersonal skills Ability to work independently and as part of a team Fluent in German Candidates witll need to live and have the right to work within Germany to be considered.