Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Google: Our hunt for hackers reveals phishing is far deadlier than data breaches

The study finds that victims of phishing are 400 times more likely to have their account hijacked than a random Google user, a figure that falls to 10 times for victims of a data breach. ...
Continue Reading

Spy Vs. Spy? WikiLeaks Says CIA Impersonated Kaspersky Lab

Wow, the plot thickens. Attribution indeed is a very murky business. According to WikiLeaks, its analysis revealed that by using these fake certificates, the CIA made it look like data ...
Continue Reading

Ordinypt Ransomware Intentionally Destroys Files, Currently Targeting Germany

A new ransomware strain called Ordinypt is currently targeting victims in Germany, but instead of encrypting users' documents, the ransomware rewrites files with random data. Discovered ...
Continue Reading

NATO to Increase Cyber Weaponry to Combat Russia

NATO members agreed Wednesday to increase the use of cyber weaponry and tactics during military operations, with the alliance also upgrading other capabilities to combat a resurgent ...
Continue Reading

[On-Demand Webinar] Phishing and Social Engineering in 2018

Ransomware has tipped the 1 billion mark and damages are expected to be around 5 billion before the year is out. Use of ransomware has evolved throughout the year with a 600% rise in URL ...
Continue Reading

KnowBe4 Ranked Number 70 Fastest Growing Company in North America on Deloitte’s 2017 Technology Fast 500™

KnowBe4 today got word that we ranked No. 70 on Deloitte’s Technology Fast 500™, a ranking of the 500 fastest growing technology, media, telecommunications, life sciences and energy tech ...
Continue Reading

Scam Of The Week: Massive Netflix Phishing Campaign

There is a massive scam campaign going on, this time a very well executed Netflix phishing attack. The scam targets subscribers telling them that their account is about to be canceled. ...
Continue Reading

Bad Rabbit Ransomware Attack Was Hiding A Spear Phishing Campaign

During the attacks in eastern Europe with the Bad Rabbit ransomware, a more insidious attack was taking place in Ukraine under its cover, Reuters reported. Serhiy Demedyuk, head of the ...
Continue Reading

Dark Overlord hackers reveal plans to leak 'Hollywood database stolen from top studio'

Criminal hacking group The Dark Overlord is threatening to leak the internal client data of top Hollywood production studio Line 204, IBTimes UK has learned. The seemingly international ...
Continue Reading

How to sell cybersecurity to your executive team

Scott Schlimmer wrote a great post at CSO about the constant battle between profitable business investments and “unprofitable” security investments to protect the current bottom-line.
Continue Reading

Security Awareness Training Is a Team Effort

A security awareness program is a critical part of any security strategy. It is not enough to simply hold everyone in the organization accountable. Chief information security officers ...
Continue Reading

Thirty Percent of CEO Email Passwords Compromised in Breaches: Study

SecurityWeek reported about an interesting F-Secure study showing thirty percent of CEOs from the world's largest organizations have had their company email address and password stolen ...
Continue Reading

Shame and confusion lead to employees paying ransoms out of pocket

Doug Olenick at SC Media reported on something quite surprising. This is the first time we've heard about this! Whether out of shame for being victimized or confusion over what to do more ...
Continue Reading

2018 Is Likely To Be A Worse Year For Ransomware Than 2017

Sophos released their 2018 malware forecast this week. Their predictions would make any IT Pro concerned, a PDF of their report is here. Read on for your executive summary. Ransomware ...
Continue Reading

On Average, How Many Passwords do Employees Manage?

According to the Last Pass Password Exposé report, an employee manages of about 200 passwords. Other industry reports often estimate the number of credentials used and put the figure ...
Continue Reading

EU to Declare Cyber-Attacks “Act of War”. USA likely to follow

"European Union member states have drafted a diplomatic document which states serious cyber-attacks by a foreign nation could be construed as an act of war. The document, said to have ...
Continue Reading

Is combosquatting a new trick hackers use to lure users into visiting malicious websites?

Georgia Tech researchers reported that hackers are using a technique identified with a newly coined term "combosquatting" to trick users into visiting malicious websites. Sorry to break ...
Continue Reading

KnowBe4 Halloween 2017 Was A Blast

Well over 350 employees dressed up and everyone was amazed at the amount of creativity that went into the costumes and the offices. Here is a group shot at the Station Square Park in ...
Continue Reading

Putin Uses Psychiatrists For Social Engineering Attacks Against Individual Targets

Newsweek cross-posted an article that first appeared on The Daily Signal, and this is extremely relevant to what we are battling here today. Kiev, Ukraine—Since 2014, Russia has used ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews