Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

DOJ Charges Hackers from the Chinese People Liberation Army with 2016 Equifax Data Breach

Four hackers have been charged with hacking the U.S. credit reporting agency where data on U.S. citizens and proprietary Equifax secrets were stolen.
Continue Reading

Email Account Takeover Attacks Get Smarter, Sophisticated, and More Patient

New data from Barracuda shows attackers take their time to leverage the credential compromise and to avoid detection when taking over email accounts.
Continue Reading

FTC Alert: Coronavirus Scammers Love Scary Bad News

Scary news stories in the headlines always bring out the bad guys looking to make a quick illegal buck.
Continue Reading

Most British Breaches Traced to Human Error

90% of data breaches in the UK during 2019 were caused by human mistakes, Infosecurity Magazine reports. CybSafe analyzed all the data breach reports received by the UK Information ...
Continue Reading

Safer Internet Day: What You Can Do to Stay Safe

February 11, 2020 is Safer Internet Day, a worldwide event aimed at promoting the safe and positive use of digital technology for all users, especially children and teens. This year's ...
Continue Reading

One Pricy Hospital Bill: Ransomware Attack Costs Hospital $1 Million, Requiring Notice to Municipal Bond Holders

Most organizations think about the impact of a ransomware attack being limited to recovery, legal, PR, and perhaps paying the ransom. In this case bond holders could take a hit.
Continue Reading

Ransomware Attacks Increase 41 Percent as Cybercriminals Double-Down on Taking Your Money

New data from New Zealand security firm Emsisoft shows that more organizations are being successfully being attacked and held for ransom, putting operations at risk.
Continue Reading

Education is Necessary to Stay Ahead of Threats

Most people don’t realize how vulnerable they are to social engineering until they experience it, according to Anna Collard, the founder of KnowBe4’s South African security awareness ...
Continue Reading

Phishing Attacks Use Victim Interest in Oscar-Nominated Movies to Steal Credit Cards, Install Malware

People wanting to watch high-profile movies are the latest target in scams that trick users into offering up credit card details for a chance to download films not yet available for ...
Continue Reading

[Heads-up] New Ransomware Strain Hijacks A Vulnerable Windows Driver To Turn Off Your Antivirus And Infect The Network

Security company Sophos warns of a new ransomware strain that uses a vulnerable driver in an attempt to break into a Windows system and then disable the running security software.
Continue Reading

Trenton School Treasurer Spots a 'Phishing Expedition'

Someone went on a ‘phishing expedition’ trying to trick a Trenton School Board of Education member into transferring thousands of dollars into their account, but a Trenton School ...
Continue Reading

Another SMS Scam

A new PayPal SMS phishing campaign is making the rounds, according to Paul Ducklin at Naked Security. The text messages in this campaign purport to come from PayPal and inform recipients ...
Continue Reading

SEC Releases Results of Cybersecurity and Resiliency Practices Examinations

The SEC’s Office of Compliance Inspections and Examinations (OCIE) published a new report on the findings from examining the methods used by market participant organizations.
Continue Reading

Ransomware Attack Leaves Logistics Company with Disabled Systems, Manual Processes, and Customer Delays

The devastation after a ransomware attack on global logistics company Toll Group demonstrates the impact a simple ransomware attack can have on operations.
Continue Reading

Email Test Finds More Than 50% of Kingston School District Employees Vulnerable to Phishing

More than half of the people who have Kingston school district email accounts opened a potentially damaging phishing email sent to them by a firm that's helping the district gauge ...
Continue Reading

January Content Update: Including the new 2020 KnowBe4 Social Engineering Red Flags Training Module

Here are a few important updates to share with you from the month of January.
Continue Reading

Anatomy of a Rental Phishing Scam

There was an unsuccessful phishing attempt that security professional Jeffrey Ladish almost fell for. Jeffrey was house searching and was looking on Craigslist and Zillow for rental ...
Continue Reading

Six Security Questions You Should Keep in Mind for Third Parties

Organizations are beginning to understand the consequences of a data breach or a phishing attack and the negative impact they can really have. But what are the security risks for third ...
Continue Reading

Ransomware Takes its Toll

Ransomware is defined as vicious malware that locks users out of their devices or blocks access to files until a sum of money or ransom is paid. Ransomware attacks cause downtime, data ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews