When thinking about security, we often think about how we keep threats out: cyber defences, building access controls, travelling with clean devices.
Yet, recent years have emphasised uncomfortable truths: insider threats can be embedded deep within in research communities. Two case studies underscore how this can happen (both intentionally and unintentionally).