Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

One surprising statistic explains why phishing will remain the most common cyberattack for the next few years

Phishing will remain the primary email attack vector through 2020. A new report from Comodo Security Threat Lab's VP, Fatih Orhan, brings up an interesting statistic from Friedrich ...
Continue Reading

Book Review: A Data-Driven Computer Security Defense: THE Computer Security Defense You Should Be Using

Excellent book about InfoSec that has everything you need to know and nothing you don't. A Data-Driven Computer Security Defense: THE Computer Security Defense You Should Be Using by ...
Continue Reading

Which EU 2018 Directive Is More Important Than GDPR?

If you have sales offices in Europe, or full subsidiaries, you need to be aware of the NIS directive. Peter Dekker at Enisa warned about the following: During 2017, the GDPR buzz reached ...
Continue Reading

Report: Most Government Agencies Vulnerable To Phishing

Nearly half of federal agency email domains have adopted policies to collect data on unauthorized emails, a move mandated by the Department of Homeland Security in October, according to a ...
Continue Reading

Chinese Cybercrime Develops Lucrative Hacking Services

The McAfee blog gave an interesting perspective on an area we do not look at too closely normally. Underground cybercrime profits in China have likely already exceeded US$15.1 billion ...
Continue Reading

An inventive YouTube moderator phishing scam

Full marks for inventiveness If you have a YouTube channel, and have had your fill of sifting through the vile torrent of abusive comments left on your video masterpieces, you can invite ...
Continue Reading

"123456" Remains Most Common Password Found in Data Dumps in 2017

For the second year in a row, "123456" remained the top password among the millions of cleartext passwords exposed online thanks to data breach incidents at various providers. While ...
Continue Reading

Scam Of The Week: New Massive Data Breach Poses Major Threat

Here’s a fun question to pose to the family dinner table: Have you ever heard of Alteryx? 100 to 1 you never heard of them, but chances are good that they have heard of you. Alteryx is a ...
Continue Reading

Nearly 250,000 user logins are being hacked every week and become phishing targets

A research team from Google collaborated with the cybersecurity experts from the University of California, Berkeley to scrutinize the activities of these online miscreants. After about 1 ...
Continue Reading

The Top 5 Reasons Why You Need To Deploy New-school Security Awareness Training In 2018

2017 was a dumpster fire of privacy and security screw-ups. To implement a simple, effective, IT security strategy will help your CEO to keep their job in 2018. Better yet, thousands of ...
Continue Reading

CEO Fraud Costs Major Airline Millions Of Dollars

This week the international carrier Japan Airlines (JAL) admitted it had fallen victim to CEO Fraud that cost it 384 million yen (about $3.39 million). The incidents took place in ...
Continue Reading

File-less Malware Attacks Hit Milestone in 2017 And Ransomware Grows to $5 Billion Industry

New data shows that file-less malware attacks are now the majority of all attacks this year, and ransomware grows to a whopping 5 billion industry. Fileless malware attacks using ...
Continue Reading

The Massive Cyber Attacks Slated For 2018 Will Make You WannaCry

If you think 2017 was bad, hold on for dear life because 2018 is going to be the worst yet when it comes to cyber attacks, with new and better coordinated attacks looming large. Why? ...
Continue Reading

Cancer Center Discloses $2.3 Million Data Breach Settlement In Their Bankruptcy Filing

As reported in BNA Privacy Law Watch, on December 6, 2017, health care provider 21st Century Oncology agreed to pay $2.3 million to settle charges by the Department of Health and Human ...
Continue Reading

Roll back time when users click on a bad link with our new free tool, Second Chance!

Wouldn't it be great if your users had a way to "roll back time" when they forgot to think before they click on a bad link? Now they can! We are excited to announce Second Chance, a ...
Continue Reading

86% of security pros worry about a phishing future where criminals are using Artificial Intelligence

A new survey by Webroot shows that 86% of security professionals worry that AI and ML (machine learning) technology could be used against them. And they are right, because it will and ...
Continue Reading

Complex regulations and sophisticated cyber attacks inflate non-compliance costs

The cost of non-compliance has significantly increased over the past few years, and the issue could grow more serious. 90 percent of organizations believe that compliance with the GDPR ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews