Human Risk Management Blog

Keeping you informed. Keeping you aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Need to protect a critical machine? Use Whitelisting, not Antivirus

[caption id="" align="alignleft" width="290" caption="2002 Good vs. Bad"][/caption] And now a mainstream antivirus vendor is saying this too. First of all, I have no dog in this fight, ...

Why pill pushing spam pays off

Brian Krebs is on a roll. Here is why pill pushing spam pays off. "Consumer demand for cheap prescription drugs sold through spam-advertised Web sites shows no sign of abating, according ...

OMG - I did not know it was THIS horrible.

More from Brian Krebs's astounding blog post today. "As the chart I compiled above indicates, attackers are switching the lure or spoofed brand quite often, but popular choices include ...

A Closer Look: Email-Based Ransomware Attacks

With the increase of email phishing attacks being the primary attack vector, ransomware payments have risen to 60%, it's important to take a closer look at email-based ransomware attacks.

Kevin Mitnick Security Awareness Training Success Stories

Powerful New System Admin Tool: InstantRevert

[caption id="" align="alignleft" width="370" caption="InstantRevert, a powerful new system admin tool"][/caption] KnowBe4 has released a powerful new system admin tool: InstantRevert. ...

Message From Kevin Mitnick

Kevin sent the folowing letter to 1,442 people that over the last 3 years filled out the his contact us form on the www.mitnicksecurity.com website. Of these, 1082 were delivered. Now, ...

15 social media scams

From Facebook phishing lures to Twitter and Tumblr hoaxes, here are 15 scams to watch out for on social networking sites. CSO online took the time to put this slide show together and it's ...

Microsoft : "Civilian casualties inevitable in government cyber war"

Alastair Stevenson at the V3 site quoted Microsoft: "Cyber attacks such as Duqu, Stuxnet and Flame will inevitably hurt private companies and innocent people as well as governments, ...

Kevin Mitnick Partners With KnowBe4

Kevin Mitnick, at One Time the World's Most-Wanted Hacker, Joins Forces With Leading Internet Security Awareness Training Company KnowBe4, LLC CLEARWATER, Fla., June 18, 2012 -- Internet ...

Double-check that cashiers check

The fake cashier's check scam has gotten more sophisticated. Cathy Bussewitz at the pressdemocrat site reported on this one: "It usually starts when a seller posts a big-ticket item on ...

Scam Of The Week

[caption id="" align="alignleft" width="260" caption="LeakedIn"][/caption] Never 'check' your password. Change it! The last few weeks, it came to light that some major websites were ...

Survey Says: ACH Fraud Losses Down

[caption id="" align="alignleft" width="260" caption="Tracy Kitten"][/caption]It's not all bad news! Tracy Kitten over at BankInfoSecurity reported on a positive trend. "Banks are doing a ...

Half of Small Businesses Not Concerned About Security Breaches [INFOGRAPHIC]

Samantha Murphy at Mashable wrote: "Shred-It conducted a survey among 1,136 U.S. small business owners with companies of fewer than 100 employees, and 100 corporate-level executives who ...

Atomic scientists compare cyberwar to development of nuclear bomb

Foxnews reported on June 15, 2012: "Cyberbombs are the new atom bombs." "The Bulletin of the Atomic Scientists warned Friday that the race to build and deploy cyberweapons -- secret ...

CyberheistNews vol 2, #25

Retelling a Password Nightmare in the Wake of the LinkedIn Password Leak

Alan Shimel tell us an enlightening and cautionary tale how his password was hijacked and how much time it took him to get it all back under control. This is a warmly recommended read ...

Stuxnet, Duqu, Flame: What It Means For You

The cyberweapon genie is out of the bottle, and the U.S. is engaged in a cyberwar. Now it becomes clear why the Government has been trying to get private industry to agree to certain ...

Google to warn users of 'state-sponsored' hacking

The Guardian reported that Google will warn users of 'state-sponsored' hacking: "Search giant says it will alert Gmail users about targeted attacks, in move that could aid human rights ...

CHANGE YOUR LINKEDIN PASSWORD NOW

LinkedIn was hacked and 6.46 million encrypted passwords have been leaked on a Russian forum. This is not good, as the encrypted passwords are relatively easy to crack. If you are using ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.