Phishing Emails Use SVG Files to Avoid Detection

Nov 22, 2024 11:39:14 AM By Stu Sjouwerman

Phishing emails are increasingly using Scalable Vector Graphics (SVG) attachments to display malicious forms or deliver malware, BleepingComputer reports.

Threat Group Use AI Adult-Based “Deepnude” Image Generator Honeypots to Infect Victims

Nov 22, 2024 11:39:11 AM By Stu Sjouwerman

The threat group FIN7 is using the lure of generating nude images of favorite celebrities to get victims to download their NetSupport RAT.

Phishing Attacks Exploits the Open Enrollment Period

Nov 22, 2024 9:18:17 AM By Stu Sjouwerman

A phishing campaign is impersonating HR to target employees who are making annual insurance changes during the open enrollment period, according to researchers at Abnormal Security.

Fraud Awareness Week

Nov 21, 2024 4:00:22 PM By John Just

The Association of Certified Fraud Examiners (ACFE) recently released a report Occupational Fraud 2024: A Report to the Nations, where they estimated that most organizations lose about 5% ...

Ransomware Gangs Evolve: They're Now Recruiting Penetration Testers

Nov 20, 2024 2:22:16 PM By Stu Sjouwerman

A new and concerning cybersecurity trend has emerged. According to the latest Q3 2024 Cato CTRL SASE Threat Report from Cato Networks, ransomware gangs are now actively recruiting ...

Out of 29 Billion Cybersecurity Events, Phishing was the Primary Method of Initial Attack

Nov 20, 2024 2:22:11 PM By Stu Sjouwerman

The newly released single largest analysis of cyber attacks across all of 2023 show a strong tie between the use of phishing and techniques designed to gain credentialed access.

Beware of Fake Tech Support Scams

Nov 20, 2024 2:22:06 PM By Roger Grimes

About five years ago, I was having trouble with an expensive brand-name refrigerator that my wife and I had bought. It was a great refrigerator feature-wise. My wife and I initially loved ...

Dark Side of Deals: Emerging Scams for Black Friday, Cyber Monday and Giving Tuesday

Nov 20, 2024 10:41:06 AM By Javvad Malik

As the holiday shopping season kicks into high gear, cybercriminals are gearing up too. This year, alongside the usual suspects, we're seeing some crafty new scams, so let’s take a look ...

Threat Actors are Sending Malicious QR Codes Via Snail Mail

Nov 20, 2024 10:40:54 AM By Stu Sjouwerman

The Swiss National Cyber Security Centre (NCSC) has warned of a QR code phishing (quishing) campaign that’s targeting people in Switzerland via physical letters sent through the mail, ...

A New Era In Human Risk Management:Introducing KnowBe4 HRM+

Nov 19, 2024 2:03:25 PM By Stu Sjouwerman

Cybersecurity threats grow more sophisticated by the day. Amid this constant change, one truth remains: people are simultaneously our greatest security vulnerability and our strongest ...

Purina’s Champions Program Is the Best I Have Seen

Nov 19, 2024 9:02:42 AM By Roger Grimes

In my most recent book, Fighting Phishing: Everything You Can Do to Fight Social Engineering and Phishing, I highlight the use of “champions," which are co-workers in your organization ...

The World Premiere of The Inside Man - Season 6 in St. Petersburg, Florida

Nov 19, 2024 9:02:32 AM By John Just

KnowBe4, the leading platform for security awareness training, is excited to bring the award-winning original series, "The Inside Man,” back to your screens with more excitement, drama, ...

CyberheistNews Vol 14 #47 Step-by-Step To Creating Your First Realistic Deepfake Video in a Few Minutes

Nov 19, 2024 9:00:00 AM By Stu Sjouwerman

Phishing Attacks Exploit Microsoft Visio Files and SharePoint

Nov 15, 2024 10:06:32 AM By Stu Sjouwerman

Threat actors are exploiting Microsoft Visio files and SharePoint to launch two-step phishing attacks, according to researchers at Perception Point.

Half of all Ransomware Attacks This Year Targeted Small Businesses

Nov 15, 2024 10:05:57 AM By Stu Sjouwerman

New data shows just how crippling ransomware has been on small businesses that have fallen victim to an attack and needed to pay the ransom.

[World Premiere] KnowBe4 Debuts New Season 6 of Netflix-Style Security Awareness Video Series - “The Inside Man”

Nov 14, 2024 10:00:00 AM By Stu Sjouwerman

We’re thrilled to announce the long-awaited sixth season of the award-winning KnowBe4 Original Series - “The Inside Man” is now available in the KnowBe4 ModStore!

Fortifying Defenses Against AI-Powered OSINT Cyber Attacks

Nov 13, 2024 3:08:55 PM By James McQuiggan

In the ever-evolving landscape of cybersecurity, the convergence of Artificial Intelligence (AI) and Open-Source Intelligence (OSINT) has created new opportunities for risk.

Criminal Threat Actor Uses Stolen Invoices to Distribute Malware

Nov 13, 2024 3:08:32 PM By Stu Sjouwerman

Researchers at IBM X-Force are tracking a phishing campaign by the criminal threat actor “Hive0145” that’s using stolen invoice notifications to trick users into installing malware.

Nation-State Threat Actors Rely on Social Engineering First

Nov 12, 2024 3:38:33 PM By Stu Sjouwerman

A new report from ESET has found that most nation-state threat actors rely on spear phishing as a primary initial access technique.

Step-by-Step To Creating Your First Realistic Deepfake Video in a Few Minutes

Nov 12, 2024 3:38:29 PM By Roger Grimes

Learn how to step-by-step create your first realistic deepfake video in a few minutes.

Security Awareness Training Blog

View Topics