Using the right tool for the job is always better. Anyone who does DIY projects around the home knows how using the right tool can dramatically make the job you are doing far easier. Use ...
I received this email the other day to my personal email account. It is a “Security Alert” from “Microsoft Helpdesk.” Oh, my!
AI maturation is leading to more malicious hacking attacks.
One of the biggest reasons why cybercrime is so bad — and is increasing each year —is that so much of it is committed by foreign nationals who are not physically located in the country ...
These days it can be hard to tell if something is or isn’t a scam.
It can happen to the best of us. This story happened a decade ago, when I was working at a Fortune 10 company. “Smartest” is subjective, but most of my former coworkers and external ...
I have been writing about the need to better train our programmers in secure coding practices for decades, most recently here and here.
Fighting voice-based phishing needs to be a big part of your human risk management (HRM) plan.
Protecting humans means protecting the tools humans use.
One of the most common human risk management recommendations is for users to hover over URL links of unexpected messages to see if the involved DNS domain is legitimate or not for the ...
I occasionally get human risk management (HRM) administrators asking me to help them with ideas of “contests” to better educate their end-users.
A super common voice phone call phishing scam (i.e., vishing) is when the scammer calls you and pretends to be a law enforcement official with a warrant for your arrest for not answering ...
“The problem is much, much worse than most people acknowledge.” One of the biggest enduring mysteries for me in cybersecurity is why most cybersecurity curricula don’t teach secure coding ...
In a world so full of digital online scams, it’s hard to remember that scammers abuse our postal mailing systems as well.
I hear about a ton of similar-sounding scam calls, where the scammer is pretending to be from a service you use (or used), offering you a substantial monthly discount (30% or more) if you ...
ClickFix attacks have been around for decades; only the name is new.
There is no other way to say it clearer, social engineering is going to be a lot, lot worse soon and far more successful than it is today. And that’s saying a lot. It’s already pretty bad.
Most Microsoft 365 users aren’t aware of this recently growing serious email threat vector.
I’ve been following ransomware since the first one, the AIDS Cop Trojan, was released in December 1989.
We are working tirelessly on our AI First strategy to better protect both humans and their AI tools.
