Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Security Is Not Only Training It Is Culture

We all went to school, but how would you do if you were asked to retake your finals? Neither would I. Education fades unless it is regularly reinforced. And even the reinforcement is ...
Continue Reading

Bank Sues Customer Over ACH/Wire Fraud

[caption id="" align="alignleft" width="180" caption="Bank Sues Customer"][/caption] Tracy Kitten at BankInfo Security reported on this: "In another legal wrangling over liability linked ...
Continue Reading

VIDEO: The new 90-second Kevin Mitnick Security Awareness Training Elevator Pitch

[caption id="" align="alignleft" width="455" caption="Kevin Mitnick Security Awareness Training 90-second Video"][/caption] July 2012, KnowBe4 officially released Kevin Mitnick Security ...
Continue Reading

I Was Interviewed On TV Thursday

[caption id="" align="aligncenter" width="500" caption="Stu TV Interview"][/caption] Cyber threats reported by U.S. energy companies, public water districts and other infrastructure ...
Continue Reading

Released! Kevin Mitnick Security Awareness Training

[caption id="" align="alignleft" width="460" caption="Released! Kevin Mitnick Security Awareness Training"][/caption] I am super excited to officially announce we have released the new ...
Continue Reading

Court Ruling Could Be Boon to Cyberheist Victims

[caption id="" align="alignleft" width="310" caption="Court Ruling Boon To Cyberheist Victims"][/caption] BrianKrebs reported some very good news. A decision handed down by a federal ...
Continue Reading

Cybercriminals Sniff Out Vulnerable Firms

[caption id="" align="aligncenter" width="560" caption="Small Firms Cyberheist Victims"][/caption] I could have written this headline myself. But I didn't, it was Sarah Needleman at the ...
Continue Reading

Cisco Cloud Calamity

[caption id="" align="alignleft" width="350" caption="Cisco Cloud Calamity"][/caption] Cisco's Linksys marketing division got themselves soaking wet. Customers that own the Linksys E2700, ...
Continue Reading

Training Fragmentation Causes Knowledge Gap

[caption id="" align="alignleft" width="350" caption="Training Fragmentation"][/caption] More and more, you see training companies promote their security awareness training products as ...
Continue Reading

FBI: High-tech Espionage Costs 13 Billlion

Michael Cooney over at NetworkWorld came up with a number: 13. "Driven by the general ease of stealing electronically stored data and the reality of growing global businesses, US ...
Continue Reading

Scam Of The Week Payroll Phish

The nakedsecurity blog over at Sophos highlighted a new phishing scam that would be good to alert your employees about. The bad guys are pretending to be payroll processing company ADP. ...
Continue Reading

Malware Metastasizes

A few days ago I wrote about a 60 million Euro cyberheist. I have been digging into this a bit more, as it's the most advanced attack yet. Cybercrime is not revolutionary, it clearly ...
Continue Reading

KnowBe4 Philosophy

[caption id="" align="alignright" width="250" caption="KnowBe4 Philosophy"][/caption] We are happy to go against the grain. We’re not a massive developer that turns out bloatware year ...
Continue Reading

Bank Settles With California Cyberheist Victim

Finally, a positive outcome in a cyberheist lawsuit. Brian Krebs reported that a Professional Business Bank settled with a Village View Escrow Inc, a California cyberheist victim. A ...
Continue Reading

60 Million Euro Stolen In Biggest Cyberheist Ever

[caption id="" align="alignleft" width="390" caption="60 million Cyberheist"][/caption] This is exactly what I have been warning against in my book cyberheist. McAfee and Guardian ...
Continue Reading

Need to protect a critical machine? Use Whitelisting, not Antivirus

[caption id="" align="alignleft" width="290" caption="2002 Good vs. Bad"][/caption] And now a mainstream antivirus vendor is saying this too. First of all, I have no dog in this fight, ...
Continue Reading

Why pill pushing spam pays off

Brian Krebs is on a roll. Here is why pill pushing spam pays off. "Consumer demand for cheap prescription drugs sold through spam-advertised Web sites shows no sign of abating, according ...
Continue Reading

OMG - I did not know it was THIS horrible.

More from Brian Krebs's astounding blog post today. "As the chart I compiled above indicates, attackers are switching the lure or spoofed brand quite often, but popular choices include ...
Continue Reading

A Closer Look: Email-Based Ransomware Attacks

With the increase of email phishing attacks being the primary attack vector, ransomware payments have risen to 60%, it's important to take a closer look at email-based ransomware attacks.
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews