Make sure 'challenge questions' aren't a backdoor into your account!

Apr 30, 2012 9:21:33 AM By Stu Sjouwerman

The Lookout Mobile Security Blog pointed out something important. Patty talked about the man who hacked hollywood: "Finding a working e-mail address was a simple process of trial and ...

Omaha cast net that caught cyberthieves

Apr 29, 2012 8:24:21 AM By Stu Sjouwerman

Matthew Hansen, World-Herald Staff Writer just wrote a great article that illustrates what I have been warning about these last years. It starts out like this: "Imagine for a moment that ...

Hacking The Hackers: A Counter-Intelligence Operation

Apr 28, 2012 7:27:46 AM By Stu Sjouwerman

Marc Weber Tobias, a contributor to Forbes Magazine wrote a very interesting article: "One of our security lab team members is an ex-cyberspook who spent his career in the military doing ...

2012 Doomsday Scam Continues to Serve up Doom, Giftcards

Apr 27, 2012 9:34:49 AM By Stu Sjouwerman

Chris Boyd over at GFI wrote: "If we survive the Mayan Apocalypse of 2012, does that mean were technically immortals? Ive no idea, but it will probably mean we dont see quite as many ...

How to Start an IT Security Awareness Program

Apr 27, 2012 2:44:36 AM By Stu Sjouwerman

Mike Chapple is an IT professional and assistant professor of computer applications at the University of Notre Dame. He wrote at biztechmagazine:"Are your users aware of their ...

If PCI Is Your Whole Security Program, Youre Not Doing Your Job Right

Apr 26, 2012 6:51:22 AM By Stu Sjouwerman

Steve Ragan at the SecurityWeek site, wrote: "Painless PCI assessments are possible if you work for them. For most CISOs, the pain of an audit is part of the job, but it doesnt have to ...

Check Out This NY Traffic Ticket Phish!

Apr 26, 2012 4:29:04 AM By Stu Sjouwerman

Kevin Mitnick sent this phish over. It's a classic attempt to get you to avaid a problem, but the moment you click this link, life will become a lot more painful. So... Stop. Look. Think ...

The Latest Anti-Phishing Working Group Report

Apr 26, 2012 3:46:45 AM By Stu Sjouwerman

This week, the new APWG Global Phishing Report is being today at the Anti-Phishing Working Group meeting in Prague. This report is published every six months, detailing how phishers are ...

New 2011 Report on Russian Cybercrime

Apr 26, 2012 3:38:11 AM By Stu Sjouwerman

Group-IB, a leading Russian cybercrime investigation and computer forensics company and LETA Group subsidiary, this week announced a 28-page report on the Russian cybercrime market in ...

Antivirus 10-Second Flash Survey: Is this bonus attractive?

Apr 25, 2012 4:26:16 AM By Stu Sjouwerman

You're in the market to replace your existing Antivirus. One of the vendors on your shortlist has a Special Bonus they are offering. They are going to give you a free high-quality ...

CyberheistNews vol 2, #19

Apr 24, 2012 9:51:45 AM By Stu Sjouwerman

This is cool. USB drive uses voice recognition security

Apr 23, 2012 5:07:54 AM By Stu Sjouwerman

Fingerprint recognition has long been used to protect sensitive data on USB drives - heres another approach. This 8GB USB storage device uses voice recognition software to detect a ...

Bogus Olympics 2012 Email Warning Blindside Users With Malware

Apr 23, 2012 4:26:22 AM By Stu Sjouwerman

The upcoming London Olympics is undoubtedly one of the most highly-anticipated sports event of the year. It is also a favorite social engineering ploy among cybercriminals. Just recently, ...

Weak passwords STILL subvert IT security

Apr 23, 2012 4:07:55 AM By Stu Sjouwerman

Jaikumar Vijayan over at Computerworld observed correctly: "A recent data breach that exposed the Social Security numbers of more than 280,000 people served as yet another reminder of the ...

CyberheistNews vol 2 #18

Apr 20, 2012 8:52:16 AM By Stu Sjouwerman

8 Dirty Secrets Of The IT Security Industry

Apr 20, 2012 8:35:57 AM By Stu Sjouwerman

Bill Brenner at CSO Magazine is quoting IBM ISS Security Strategist Joshua Corman who has been on a crusade with his 8 Dirty Secrets campaign. Here they are and I'm quoting Dirty Secret ...

Scam Of The Week: 'The Evil Unsub'

Apr 20, 2012 3:56:05 AM By Stu Sjouwerman

An ordinary piece of spam slips through the filters, and you see a gorgeous sandy beach with palm trees. It's an enticing ad for a vacation to a tropical island, basically a big picture ...

Six Steps To Successful Security Awareness Training

Apr 19, 2012 3:48:25 AM By Stu Sjouwerman

You Got Hacked! What Now?

Apr 18, 2012 9:55:57 AM By Stu Sjouwerman

Neil Rubenking, who has been writing about antivirus for 30 years now, came up with an excellent article about what to do when your personal email or social media account. This is a ...

BYOD: 'the inmates of the asylum have control'

Apr 18, 2012 9:20:57 AM By Stu Sjouwerman

IT pros surveyed by Network World and SolarWinds shared a range of tactics for handling the mobile device management challenge. Mobile devices are multiplying and -- sanctioned or ...

Spoiler alert: Your TV will be hacked

Apr 17, 2012 6:26:30 AM By Stu Sjouwerman

Last week you may have read a headline that blared "100 million TVs will be Web-connected by 2016." Regular readers of this blog know I'm always on the lookout for new threats, so the ...

Pinpoint Unsavory Elements In Your Neighborhood

Apr 17, 2012 3:42:42 AM By Stu Sjouwerman

The Criminal Tracker app by U.S. Publications Inc says that a study by the U.S. Department of Justice has revealed that sex offenders are four times more likely to re-offend than other ...

CyberheistNews vol 2, #17

Apr 16, 2012 3:01:49 AM By Stu Sjouwerman

Antivirus is 30 years old

Apr 13, 2012 9:46:50 AM By Stu Sjouwerman

[caption id="" align="alignleft" width="260" caption="Vaccine"][/caption] Simon Edwards created a great blog post about this April 12, 2012. He started out with: " Once upon a time, ...

Blast from the Antivirus Past

Apr 12, 2012 9:08:33 AM By Stu Sjouwerman

[caption id="" align="alignleft" width="250" caption="MS DOS 6.0"][/caption] Remember MS-DOS Version 6? It was released March 1993. The new 6.0 had a lot of new stuff including a basic ...

Video: How a crimepack works

Apr 12, 2012 5:37:16 AM By Stu Sjouwerman

Cybercriminals are as organized and industrious as any legitimate business. Case in point: exploit kits, also known as crimepacks, which bad guys can purchase and which make infecting ...

SMS-controlled Malware Hijacks Android Phones

Apr 11, 2012 4:25:32 AM By Stu Sjouwerman

Researchers at NQ Mobile, working alongside researchers at North Carolina State University, have discovered new Android malware that is controlled via SMS that can do a number of things ...

99 Percent Of Malicious Action Starts On Workstations

Apr 9, 2012 10:43:45 AM By Stu Sjouwerman

Roger Grimes made this remark on InfoWorld when he commented on the 2012 Verizon Data Breach Investigations Report that was released last week. What he said was: "You should enable event ...

AV Vendor claims 600,000 Infected Macs in Botnet

Apr 6, 2012 1:51:26 AM By Stu Sjouwerman

The CSO website reported: "A Mac trojan horse spotted by security analysts since last year has infected more than 600,000 Apple computers, says Dr. Web, a Russian antivirus vendor. Apple ...

Remove Hidden Data And Personal Information By Inspecting Documents

Apr 5, 2012 3:22:52 AM By Stu Sjouwerman

This is a good hint for your users from the Microsoft website: "If you plan to share an electronic copy of a Microsoft Word document with clients or colleagues, it is a good idea to ...

If You Do The Cyber Crime, Expect To Do The Time

Apr 3, 2012 9:17:55 AM By Stu Sjouwerman

Roger Grimes at InfoWorld observes something encouraging..."Every public speaker and writer likes a good catchphrase or refrain that will grab the audience's attention. One of mine: ...

CyberheistNews Vol 2, #15

Apr 3, 2012 3:56:12 AM By Stu Sjouwerman

Finally Defined: 'Advanced Persistent Threat'

Apr 2, 2012 4:30:40 AM By Stu Sjouwerman

[caption id="" align="alignleft" width="650" caption="Advanced Persistent Threat"][/caption]

Security Awareness Training Blog

View Topics

Search Our Blog

Subscribe To Our Blog

Posts By Topic

Get the latest about social engineering

Subscribe to CyberheistNews

Get the latest about social engineering

Subscribe to CyberheistNews