Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

[Heads-up] Bad Guys Are Now Taking Over Email Inboxes Without Phishing Attacks

I found a great article in SecurityWeek by Alastair Paterson, the CEO of Digital Shadows. Could not have said it better myself, and he alerted everyone about an attack vector that was ...
Continue Reading

75% of users reuse passwords across different accounts – this is up from 56% in 2014!

We’ve always known users are the weakest link in your security chain, but new report data from SailPoint shows just how bad users are behaving in 2018 – and how it affects security.
Continue Reading

KnowBe4 Wins UK Security Excellence Awards!

Computing's Security Excellence Awards celebrate the achievements of the IT industry's leading security companies, solutions, products and personalities - those are keeping every other ...
Continue Reading

Do Your Emails Make the Naughty or Nice List?

Black Friday is just as popular with hackers as it is with shoppers. So is Cyber Monday, for that matter.
Continue Reading

More Details On New Bill That Poses Jail Time and Fines for Senior Executives of Victim Organizations

We covered this in the recent CyberheistNews, but now there is more detail.
Continue Reading

CEOs are Prime Targets for Social Engineering Attacks

CEOs can be the weakest link in an organization’s security posture, according to Mimecast’s Matthew Gardiner. Carole Theriault talked to Gardiner last week on The CyberWire’s Hacking ...
Continue Reading

Dutch audit finds Microsoft Office leaks confidential data

The diagnostics Microsoft Office collects from users should be a source of concern for any government CISO, according to a DPIA audit ComputerWeekly reported: "A report commissioned by ...
Continue Reading

MSPs: Ransomware Downtime Costs SMBs 10x the Ransom

With 79% of MSPs indicating their clients have experienced ransomware attacks, every organization needs to take the financial impact of ransomware seriously.
Continue Reading

"Quebec is an embarrassment": Province urged to do more on cybersecurity

MONTREAL — On Sept. 10, municipal employees in a region between Montreal and Quebec City arrived at work to discover a threatening message on their computers notifying them they were ...
Continue Reading

IRS Issues Urgent Warning On Tax Transcript Scam

The Internal Revenue Service (IRS) is warning about a new “tax transcript” scam. In the scam, taxpayers are tricked into opening emails that look like they are from the IRS—but they ...
Continue Reading

Expert Insights Recognizes KnowBe4 as a ‘2018 Market Leader’ for Security Awareness Training

KnowBe4 has been ranked the top vendor in the category of Security Awareness Training by Expert Insights
Continue Reading

Phishing Accounts for 50% of All Fraud Attacks [InfoGraphic]

According to the latest research from RSA, attacks intent on committing financial fraud most frequently begin with tried and true phishing.
Continue Reading

Now here is something new: Russian Banks Targeted by Sophisticated Phishing Emails

This does not happen too often, and these attackers must be outside of Russia. If hackers inside Russia attack their own country, the FSB is on their doorstep with a SWAT team in no time.
Continue Reading

How better training, cybersecurity upgrades made one credit union safer

America’s Christian Credit Union, Glendora, Calif., reduced its cybersecurity threat plane by 90 percent by upgrading both its hardware and its resistance to phishing – and earned a ...
Continue Reading

Russian APT Comes Back To Life With New Us Spear-Phishing Campaign

A Russian state-sponsored cyber-espionage group has come back to life after a one-year period of inactivity with a relative large spear-phishing campaign that has targeted both the US ...
Continue Reading

Hacked Law Firm Can't Claw Back $580,000 From Bank That Completed Transfer

Max Mitchell at Law.com has an interesting and rather painful story. Don't let this happen to your organization.
Continue Reading

KnowBe4 Modstore Release: Captain Awareness Has Arrived And Is Here To Help

The KnowBe4 Courseware Team is excited to announce the release of the first 6 episodes in a new comic book style animated series: Captain Awareness. These first two-minute modules cover ...
Continue Reading

KnowBe4 Named a Leader in the 2018 Gartner Magic Quadrant for Security Awareness Training

KnowBe4 has been positioned by Gartner, Inc. in the Leaders quadrant of the 2018 Gartner Magic Quadrant for Security Awareness Computer-Based Training for the second year in a row. ...
Continue Reading

Watch Out Banks: New PDF Attack Avoids Antivirus Detection

The latest attack from the Cobalt Gang targeting banking institutions used specific tactics to ensure AV doesn’t detect the malicious PDF at the heart of the attack.
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews