Human Risk Management Blog

Keeping you informed. Keeping you aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Train Employees And Cut Cyber Risks Up To 70 Percent

It's a well-known fact that employees are the weakest link in IT security. There is good news though! New research from our friends at Wombat Security Technologies and the Aberdeen Group ...

AV-TEST: "There are now 12 million new malware variants per month"

The AV-Test reported that they found 143 Million new malware samples in 2014 and 12 million new variants per month.

CyberheistNews Vol 5 #2 Jan 13, 2015 Your Blog Scam Of The Week: Court Notice Email

Scam Of The Week: Court Notice Email There is a current malware email campaign claiming to be from law firm 'Baker & McKenzie' that states you are scheduled to appear in court and ...

CryptoWall 2.1 First Multiplatform Ransomware?

There is a new version of CryptoWall out in the wild that I have dubbed "Version 2.1" because it has some powerful new features. Researchers at Cisco's Talos group published an analysis ...

Antivirus Isn't Dead, It Just Can't Keep Up

A few months ago, a company called LastLine Labs published some explosive data about antivirus products. They studied hundreds of thousands of pieces of malware for a year, and tracked ...

Ransomware on CBS This Morning

January 9, 2015 - CBS This Morning News ran an item about ransomware featuring Shawn Henry, former FBI executive assistant director and president of cyber security firm CrowdStrike ...

KnowBe4 Expands 397 Percent Year Over Year

Hi All, I have some very good news I want to share.

Size Does Not Matter For Cybercrime

Most small- and medium business owners think that they are not a target for cybercrime. Well, if you think you are safe because you are just a little fish in a big pond, think again. ...

The Six Biggest Security Threats We’ll Face in 2015

CyberheistNews Vol 5 #1 Jan 6, 2015 Kim Zetter did her homework and extrapolated for WIRED magazine the current threats and looked at how they would unfold in the coming 12 months. She ...

Cybersecurity Top Risk Consideration In Board Room

The Wall Street Journal polled its readers and asked them to rate the top compliance issues of 2014. The answers were very interesting!

Schneier: Sony Hackers May Have Had Inside Help

Well-known IT Security guru Bruce Schneier commented on recent discoveries related to the Sony Hack. First of all, an analysis of the timestamps on some of the leaked documents shows that ...

Defense In Depth: Your Answer To Social Engineering

Organizations defend their networks on each of the six levels in the green graph you see. End-user Internet Security Awareness Training resides in the outer layer: ‘Policies, Procedures, ...

New ransomware called "extortionware" in 2015? Not so much...

TK Keanini, CTO, Lancope wrote a 2015 Predictions editorial over at SC Magazine. He said he expects more malware like CryptoLocker and CryptoWall over the next 12 months, but also ...

A new strain of "ransomware" is striking

Mitch Lipka of CBS Moneywatch wrote:

2015 Crystal Ball / Three Scams To Warn Your Users About

CyberheistNews Vol 4 #51 Dec 30, 2014 2015 Crystal Ball / Three Scams To Warn Your Users About During my 15-year stint as the editor of WServerNews, I always started the year with a ...

Three Scams To Warn Your Users About

It's the holidays and the bad guys are working overtime. There are three scams you want to warn your users about. Remember the Phil Esterhaus character in Hill Street Blues? To begin ...

Security Awareness Training in 2015

Lance Spitzner at the SANS Securing The Human program and I have a lot in common; we evangelize effective security awareness training and we both drive a Tesla. In his 22 December 2014 ...

Cybercrime group steals millions from Russian banks and targets US

This is actually quite interesting, hackers that are successful inside Russia, as normally these guys are shut down by the FSB in a heartbeat. It must be that they are outside of the ...

Nine Data Breaches That Cost Someone Their Job

Following last year’s big announcement of not just Target’s data breach but executive job loss, CSO lays out 9 data breaches resulting in job loss. They compare Target alongside other ...

Sony Pictures Cyber Attack TIMELINE

This Sony Pictures Cyber Attack TIMELINE by the www.databreachtoday.com site is quite interesting.


Get the latest insights, trends and security news. Subscribe to CyberheistNews.