Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Pay or Not Pay the Ransom? What’s Your Opinion?

The debate over whether to pay or not to pay the ransom once your system is encrypted is heating up. Yesterday, the US Conference of Mayors approved a resolution coming down in favor of ...
Continue Reading

Effects of Ransomware Don’t End With the Ransom

A Florida city is still struggling to recover from a ransomware attack two weeks after the city paid the ransom, according to the New York Times. The attack began after a city employee ...
Continue Reading

U.S. Coast Guard Warns Shipping Industry on Cybersecurity. Are You Next?

Kim Nash wrote in the WSJ Cybersecurity newsletter: "Avast! Pirates are getting better with cyber weapons on the high seas, WSJ Pro’s James Rundle reports. Maritime freight operators must ...
Continue Reading

Brand-New Ransomware Simulator Tool Now with Two New Ransomware Scenarios

The bad guys are continuing to evolve their approach to evading detection. That’s why we’ve updated our Ransomware Simulation tool “RanSim” to include two new ransomware scenarios! These ...
Continue Reading

Homeland Security Warning About Phishing As A Threat to 2020 Elections

The US Department of Homeland Security is warning state election officials that phishing attacks are one of the greatest threats to watch out for as the 2020 elections approach.
Continue Reading

Automated Tailored EBAY Spam Campaign Leads to Risky Sites

Automated spam on eBay is spreading tailored phishing messages offering to promote users’ products, and the links the spammers share can lead to dangerous websites, according to Paul ...
Continue Reading

Cybersecurity Remains a Top Priority During M&A Diligence

M&A is no longer just about revenue, assets, and intellectual property; many organizations are increasingly worried about cybersecurity posture and risk, requiring appropriate ...
Continue Reading

The Stock Market Doesn’t React Well to Data Breaches

The latest data from UK-based research firm, Comparitech, shows that organizations who suffer a data breach continue to suffer in the stock market well after.
Continue Reading

British Airways Hit With Record $229 Million GDPR Fine Following 2018 Data Breach

U.K.-based airline British Airways (BA) is facing a record fine of £183 million ($229 million) after suffering a cyberattack in September last year. The U.K. Information Commissioner’s ...
Continue Reading

Scam Of The Week: Microsoft OneNote Audio Note Phishing Emails

Phishing scammers are coming up with more innovative methods to convince their targets to provide login credentials. Such is the case with a new OneNote Audio Note phishing campaign that ...
Continue Reading

Phishing And Impersonation Attacks Balloon in South Africa

South African companies saw an increase in phishing attacks containing malicious links or attachments in the past year. This is according to Mimecast’s 2019 State of E-mail Security ...
Continue Reading

KnowBe4’s Year-Over-Year Sales Skyrocket 50% Over Q2 2019 for Another Record-Breaking Quarter

I'm happy to announce that in the Second Quarter of 2019, our team reached an impressive 50% growth over Q2 2018 along with increasing customer accounts to well over 26,000.
Continue Reading

Discovered This Year: 5,334 Kits Offering Evasive Criminal Phishing-as-a-Service

Commodity phishing kits are making it easier for unskilled criminals to run sophisticated phishing campaigns for a low price, according to a report from cloud security provider Cyren.
Continue Reading

[Heads-up] IT Pros In The Trenches Of Iran And China's New Cyber War Against The U.S.

You did not sign up for this, but you are finding yourself in the trenches of a cyber war which is slowly but surely moving from a cold to a hot stage. The latest development is that the ...
Continue Reading

“Lack of Security Awareness” a Major Reason Why Financial Firms Are 300 Time More Likely to Fall Prey to Cyberattacks

The bad guys always go where the money is. And financial firms are grossly ill-prepared for cyberattacks and suffer higher costs in addressing successful attacks. Boston Consulting Group ...
Continue Reading

80% of all Brand Deception Phishing Scams Targeting Execs Pretend to be Microsoft

The prevalence of Office 365 and the Windows OS has caused cybercriminals to choose the software titan as their primary brand used in identity deception phishing scams.
Continue Reading

One more reason to keep your money stuffed under your mattress?

By Eric Howes, KnowBe4 Principal Lab Researcher. Every so often someone flags an email with our Phish Alert Button that isn't a phishing email but is still very interesting. In this case, ...
Continue Reading

"YouTube mystery ban on hacking videos has content creators puzzled"

That was the title of the always entertaining The Register's post about YouTube, under fire since inception for building a business on other people's copyrights and in recent years for ...
Continue Reading

KnowBe4 Translations Update

The first half of the year we added 1,206 pieces of translated content and we plan to release even more in the second half. Here is a summary:
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews