Human Risk Management Blog

Keeping you informed. Keeping you aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Shooting Ourselves in the Foot: The Biases We All Have

We humans like to believe that we are rational beings, fully in control of our decisions and actions. But psychologists and behavioral economists disagree. They argue that we are — by ...

Merchant fined for failing to train employees — Former NYDFS Superintendent Vullo Talks About Cybersecurity Regs

Mark Harrop, Director of Communications, Corporates at Thomson Reuters made me aware of a very interesting interview with Maria Vullo, the former Superintendent of New York’s Department ...

‘Professional’ ransomware gang targets 1,800 large organizations worldwide, Dutch investigators find

Filip Truta at Bitdefender blogged: "A confidential report from the Netherlands’ National Cyber Security Center warns that ransomware operators are targeting at least 1,800 large ...

Phishing scams on the up in the Netherlands

Mina Solanki, an expat in Holland wrote: "After years of declining, phishing is on the up. In 2018, the (monetary) damage caused by it had almost quadrupled compared to previous years. ...

Singapore government must realise human error also a security breach

Eileen Yu, for By The Way at ZDNet wrote: "A recent data breach has highlighted a need for the Singapore government to realise human errors are cybersecurity risks that need to be ...

The Top Lesson From The Recent Louisiana 2,000-server Ransomware Infection: "User Education, User Education, User Education"

Louisiana suffered a ransomware attack last week that took down more than two thousand of the state’s computers and servers. The ransomware apparently entered the network after a user ...

Google Sent 12K Nation-State Phishing Warnings In Three Months

Google's Threat Analysis Group (TAG) delivered thousands of alerts of government-backed attempts to spearphish gmail users over just a three-month period earlier this year, they reported.

A Look at Cryptocoin Scams

Scammers are taking advantage of the allure of new cryptocurrencies to trick people who want to get in early on the next Bitcoin, according to Naked Security. Criminals set up Initial ...

Click Confessions of a Security Expert

As a “human security” expert, I used to take a lot of pride in my well-honed security hygiene. Yeah… that all ended back in early 2017 when I joined KnowBe4. You see, up until that time, ...

The Bank of Hawaii early alert of scam phone calls spoofing caller ID

In an early-alert sign, The Bank of Hawaii is warning of a spate of scam phone calls that are spoofing the caller ID of the bank’s real call center, the Honolulu Star-Advertiser reports. ...

Phishing Simulations Should be Educational, not Punitive

Phishing training programs need to be focused on educating employees rather than on shaming them, according to David Spark and Allan Alford, co-hosts of the Defense in Depth podcast. On ...

They Know If You've Been Bad or Good...

Like most of the rest of us, malicious actors the world over love the holidays. It's a prime season to run social engineering schemes on users who are already of a mind to open their ...

Responsibility...just because they are aware, doesn’t mean that they actually care.

This blog was cowritten by Joanna Huisman, KnowBe4's new SVP Strategic Insights & Research and Aimee Laycock. They say it takes a village to raise a child. It’s similar to any ...

110 Nursing Homes Cut Off from Health Records in Ransomware Attack

Brian Krebs reported: "A ransomware outbreak has besieged a Wisconsin based IT company that provides cloud data hosting, security and access management to more than 100 nursing homes ...

Waterloo Brewing loses $2.1 million in social engineering cyberattack

Waterloo Brewing Ltd. says it has lost $2.1 million in what it calls a social engineering cyberattack. The Ontario brewery says the incident occurred in early November and involved the ...

Scripting the Language of Fraud

Scammers are constantly improving their craft and reusing techniques that are proven to work, and they sometimes share the most effective lines with other scammers, according to NPR. ...

Companies Expected to Lose $5.2 Trillion in Opportunity Due to Cyber Attacks Over the Next Five Years

The big business of cyberthreats gets stamped with a huge price tag by professional services company Accenture in their latest report on Securing the Digital Economy.

Ransomware Claims Are Up 50% in 2019 With Attacks Outpacing the Previous Five Years

According to cyber insurer Chubb, ransomware attacks are shifting industry focus and are becoming both more frequent and more expensive to address.

[Heads-up. This Is Ugly] After Refusing The Maze Ransomware Payment, Their Stolen Data Was Leaked

After a deadline was missed for receiving a ransom payment, the group behind Maze Ransomware has published almost 700 MB worth of data and files stolen from a security staffing firm. Our ...

French Hospital Crippled by Ransomware

Patient care at a large hospital in northern France has suffered considerably after a major ransomware attack at the weekend, according to local reports. The University Hospital Center ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.