Human Risk Management Blog

Keeping you informed. Keeping you aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

KnowBe4 Philosophy

[caption id="" align="alignright" width="250" caption="KnowBe4 Philosophy"][/caption] We are happy to go against the grain. We’re not a massive developer that turns out bloatware year ...

Bank Settles With California Cyberheist Victim

Finally, a positive outcome in a cyberheist lawsuit. Brian Krebs reported that a Professional Business Bank settled with a Village View Escrow Inc, a California cyberheist victim. A ...

60 Million Euro Stolen In Biggest Cyberheist Ever

[caption id="" align="alignleft" width="390" caption="60 million Cyberheist"][/caption] This is exactly what I have been warning against in my book cyberheist. McAfee and Guardian ...

Need to protect a critical machine? Use Whitelisting, not Antivirus

[caption id="" align="alignleft" width="290" caption="2002 Good vs. Bad"][/caption] And now a mainstream antivirus vendor is saying this too. First of all, I have no dog in this fight, ...

Why pill pushing spam pays off

Brian Krebs is on a roll. Here is why pill pushing spam pays off. "Consumer demand for cheap prescription drugs sold through spam-advertised Web sites shows no sign of abating, according ...

OMG - I did not know it was THIS horrible.

More from Brian Krebs's astounding blog post today. "As the chart I compiled above indicates, attackers are switching the lure or spoofed brand quite often, but popular choices include ...

A Closer Look: Email-Based Ransomware Attacks

With the increase of email phishing attacks being the primary attack vector, ransomware payments have risen to 60%, it's important to take a closer look at email-based ransomware attacks.

Kevin Mitnick Security Awareness Training Success Stories

Powerful New System Admin Tool: InstantRevert

[caption id="" align="alignleft" width="370" caption="InstantRevert, a powerful new system admin tool"][/caption] KnowBe4 has released a powerful new system admin tool: InstantRevert. ...

Message From Kevin Mitnick

Kevin sent the folowing letter to 1,442 people that over the last 3 years filled out the his contact us form on the www.mitnicksecurity.com website. Of these, 1082 were delivered. Now, ...

15 social media scams

From Facebook phishing lures to Twitter and Tumblr hoaxes, here are 15 scams to watch out for on social networking sites. CSO online took the time to put this slide show together and it's ...

Microsoft : "Civilian casualties inevitable in government cyber war"

Alastair Stevenson at the V3 site quoted Microsoft: "Cyber attacks such as Duqu, Stuxnet and Flame will inevitably hurt private companies and innocent people as well as governments, ...

Kevin Mitnick Partners With KnowBe4

Kevin Mitnick, at One Time the World's Most-Wanted Hacker, Joins Forces With Leading Internet Security Awareness Training Company KnowBe4, LLC CLEARWATER, Fla., June 18, 2012 -- Internet ...

Double-check that cashiers check

The fake cashier's check scam has gotten more sophisticated. Cathy Bussewitz at the pressdemocrat site reported on this one: "It usually starts when a seller posts a big-ticket item on ...

Scam Of The Week

[caption id="" align="alignleft" width="260" caption="LeakedIn"][/caption] Never 'check' your password. Change it! The last few weeks, it came to light that some major websites were ...

Survey Says: ACH Fraud Losses Down

[caption id="" align="alignleft" width="260" caption="Tracy Kitten"][/caption]It's not all bad news! Tracy Kitten over at BankInfoSecurity reported on a positive trend. "Banks are doing a ...

Half of Small Businesses Not Concerned About Security Breaches [INFOGRAPHIC]

Samantha Murphy at Mashable wrote: "Shred-It conducted a survey among 1,136 U.S. small business owners with companies of fewer than 100 employees, and 100 corporate-level executives who ...

Atomic scientists compare cyberwar to development of nuclear bomb

Foxnews reported on June 15, 2012: "Cyberbombs are the new atom bombs." "The Bulletin of the Atomic Scientists warned Friday that the race to build and deploy cyberweapons -- secret ...

CyberheistNews vol 2, #25

Retelling a Password Nightmare in the Wake of the LinkedIn Password Leak

Alan Shimel tell us an enlightening and cautionary tale how his password was hijacked and how much time it took him to get it all back under control. This is a warmly recommended read ...

Stuxnet, Duqu, Flame: What It Means For You

The cyberweapon genie is out of the bottle, and the U.S. is engaged in a cyberwar. Now it becomes clear why the Government has been trying to get private industry to agree to certain ...

Google to warn users of 'state-sponsored' hacking

The Guardian reported that Google will warn users of 'state-sponsored' hacking: "Search giant says it will alert Gmail users about targeted attacks, in move that could aid human rights ...

CHANGE YOUR LINKEDIN PASSWORD NOW

LinkedIn was hacked and 6.46 million encrypted passwords have been leaked on a Russian forum. This is not good, as the encrypted passwords are relatively easy to crack. If you are using ...

Why antivirus companies failed to catch Flame and Stuxnet

Arstechnica picked up the blog post of F-Secure's Chief Research Officer: A/V outfits were out of their league. Mikko Hypponen is the Chief Research Officer of F-Secure. He has been ...

Apple Releases Guide To iOS Security

Techcrunch wrote: "Apple has introduced a guide to iOS security, which was posted to Apple.com sometime in late May, but is just now being noticed outside the Apple developer community. ...

Microsoft releases 'Anti-Flame' Update

Redmond stated: "We recently became aware of a complex piece of targeted malware known as “Flame” and immediately began examining the issue. As many reports assert, Flame has been used in ...

F-Secure Cautions about Fresh Olympic-themed Spam

F-Secure the security company based in Finland has recently cautioned that spam mails themed on the Olympics are targeting Internauts while carrying web-links to one malevolent PDF file ...

Fake LinkedIn Emails To Reset Your Password

Since LinkedIn had their IPO, they have been in the news a lot more, even if only to compare them with the recent Facebook IPO Debacle. But the better known you are, the bigger target you ...

Free Data Loss Prevention Suite

OpenDLP is a free and open source, agent- and agentless-based, centrally-managed, massively distributable data loss prevention tool released under the GPL. Given appropriate Windows, ...

Over-55s Pick Passwords Twice As Secure As Teenagers

"People over the age of 55 pick passwords double the strength of those chosen by people under 25 years old. That's according to the largest ever study of password security, which also ...

Malicious PowerPoint File Contains Exploit, Drops Backdoor

TrendLabs discovered a malicious MS PowerPoint document that arrives attached to email messages. The file contains an embedded Flash file, which exploits a software bug found in specific ...

Make 30 Bucks In 30 Minutes!: Beta Test

[caption id="" align="alignleft" width="260" caption="30 Bucks In 30 Minutes"][/caption]We need immediate Beta Testers for our Internet Security Awareness Training! This is a THIS WEEKEND ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.