Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Phishing Via Social Media Up 100 Percent

Fabian Libeau at InformationSecurityBuzz wrote: "The most interesting trend to surface in Q4 of RiskIQ’s phishing report was a 100 percent increase in phishing campaigns leveraging social ...
Continue Reading

New Phishing Security Test - See How You Compare to Peers in Your Industry!

We've got something really cool for you: the new Phishing Security Test v3.0!
Continue Reading

W-2 information of Scottsboro City Schools employees compromised in phishing incident

SCOTTSBORO, Ala. - The information of Scottsboro City Schools employees became compromised after a phishing scam hit the payroll department. The superintendent issued a letter addressed ...
Continue Reading

Some Important News From KnowBe4. Please Read This Now

We've got four important things to cover, but we'll keep it short! 1) Save the Date for KnowBe4’s First Ever 2018 User Conference KB4-Con in Orlando, FL May 17 & 18 2) KnowBe4 Expands ...
Continue Reading

[VIDEO] Avoid These 10 Common Security Awareness Training Program Fails

If you want to succeed with your organization's security awareness training program, here are some of the top "faux-pas" we have seen over the years that you should be sure to avoid:
Continue Reading

Accenture Cyber Security Survey: 18% of Health Employees Would Sell Confidential Data

Those who said they were willing to sell the data would do so for as little as between $500 and $1,000. Alexandia Wilson at HealthLeadersMedia had some disconcerting news. "Patients trust ...
Continue Reading

FBI Warns of Spike in W2 Phishing But Two Central Texas Employers Fall For The Scam

The FBI has joined the IRS in warning that W2 tax form phishing is on the rise. The US tax filing deadline is now less than a month-and-a-half away, and tax-themed phishing is trending ...
Continue Reading

[On-Demand Webinar] What Most Computer Security Defenses Are Doing Wrong and How to Fix It

Most companies have huge gaps in their computer security defenses, and can be compromised at will by a determined hacker. The industry even has a term for it: “Assume Breach”. But it ...
Continue Reading

Another Ransomware Variant Strikes Colorado DOT Days after Initial Attack

Colorado’s Department of Transportation (CDOT) has suffered an infection from another variant of the same ransomware family that attacked it just days earlier. On 1 March, a variant of ...
Continue Reading

UK University Students Lose £100,000 to Phishing

Phishing technique aided by social engineering in the form of using social channels to friend victims and create fake events to get creds. UK university students have been conned out of ...
Continue Reading

Almost One Quarter Of Canadians Have Clicked On A Phishing Link

TORONTO, March 1, 2018 /CNW/ - Online payment fraud like phishing is a growing trend, and Canadians are worried about it. According to a new survey conducted by Interac Corp., Canadians ...
Continue Reading

Ad Network Uses Advanced Malware Technique To Conceal Cryptojacking Ads

I blogged a few days ago about a method to embed a crypto-mining script in a Word doc. Turns out an ad network has done an even better job! Arstechnica wrote: "Domain-name algorithms are ...
Continue Reading

Financial phishing accounts for over 50% of all phishing attacks for the first time

In 2017 Kaspersky Lab’s anti-phishing technologies detected over 246 million user attempts to visit different kinds of phishing pages. Of those, over 53 per cent were attempts to visit a ...
Continue Reading

Hackers Invade German Ministries of Defense and Foreign Affairs

Foreign hackers have invaded secure networks of various German government departments. According to German and Dutch media, the Ministries of Foreign Affairs and Defense were among the ...
Continue Reading

Organizations Are Failing To Learn From Phishing And Ransomware Attacks

Warwick Ashford, security editor at ComputerWeekly had an interesting observation after reading CyberArk's latest cyber threat report: "Organisations are failing to learn from cyber ...
Continue Reading

Defender Comes To Aid Of Older Microsoft Windows Versions

Antivirus companies are not going to like this. Microsoft blogged that their Windows Defender Advanced Threat Protection (ATP) security service soon will be coming to Win7 and Win8.1 ...
Continue Reading

Annabelle: The Terrifying New Ransomware Variant

A new ransomware variant called Annabelle has been discovered, which seems to have been designed to ‘show off the skills’ of the developer who created it, by being as difficult to deal ...
Continue Reading

Which phishing messages have a near 100% click rate?

Zeljika at HelpnetSecurity had a great summary of Wombat's latest State of the Phish report: "Training employees to spot phishing emails, messages and phone calls can’t be done just once ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews