74% of CEOs Concerned About Their Organization's Ability to Protect Against Cyber Attacks, Despite Seeing Cybersecurity as Critical

Oct 10, 2023 8:22:31 AM By Stu Sjouwerman

According to the recent The Cyber-Resilient CEO report released by IT services and consulting agency Accenture, a staggering 74% of CEOs have expressed concerns about their organizations' ...

Register for KB4-CON EMEA 2023 Now!

Oct 9, 2023 9:20:10 AM By Stu Sjouwerman

Exciting news, registration for KB4-CON EMEA 2023 is open!

Ransomware Attack Dwell Time Drops by 77% to Under 24 Hours

Oct 9, 2023 8:17:46 AM By Stu Sjouwerman

As attackers evolve their toolsets and processes, the significant drop in dwell time signifies a much higher risk to organizations that now have less time to detect and respond to initial ...

One Out of Five Organizations Must Improve Their Security Posture to be Eligible for Cyber Insurance

Oct 9, 2023 8:16:12 AM By Stu Sjouwerman

As insurers become more educated on what a “secure organization” looks like, they are tightening their requirements that puts the onus on organizations to be more secure.

Healthcare Industry Witnesses 279% Increase in Business Email Compromise Attacks in 2023

Oct 9, 2023 8:15:38 AM By Stu Sjouwerman

The massive uptick in business email compromise (BEC) is considered one of the costliest attack types, requiring organizations to put employees on notice to stay vigilant.

Energy Sector Experiences Three Times More Operational Technology Cybersecurity Incidents Than Any Other Industry

Oct 9, 2023 8:14:04 AM By Stu Sjouwerman

While industries like financial services and healthcare tend to dominate in IT attacks, the tables are turned when looking at Operational Technology (OT) cyber attacks – and the energy ...

Stay a Step Ahead of your #1 Downtime Threat - Business Email Compromise

Oct 9, 2023 5:00:00 AM By Stu Sjouwerman

A new report from Secureworks has found that business email compromise (BEC) remains “one of the most financially damaging online crimes overall for orgs” in 2023. The security firm’s ...

The Role of AI in Email Security and How Real-Time Threat Intelligence Can Supercharge Your SOC Team

Oct 6, 2023 12:43:38 PM By Stu Sjouwerman

In response to improved email security measures, cybercriminals have pivoted to more advanced attack methods, namely artificial intelligence (AI), that bypass existing protections. But ...

Clorox Experiences Significant Financial Loss Stemming From Recent Cyber Attack

Oct 6, 2023 9:53:51 AM By Stu Sjouwerman

American global manufacturer of cleaning products Clorox stated that recent sales and profit loss were related to a cyber attack.

[Risky New Data] More than Half of Phishing Scams Now Use Obfuscation

Oct 5, 2023 3:26:33 PM By Stu Sjouwerman

A new report shows staggering phishing trends using obfuscation techniques that should make any organization feel worried.

New Gartner Forecast Shows Global Security and Risk Management Spending to Increase by 14% in 2024

Oct 5, 2023 3:26:29 PM By Stu Sjouwerman

Gartner issued a press release that forecasted global security and risk management end-user spending to reach $188.1 billion, along with worldwide end-user spending on security and risk ...

[FREE RESOURCES] Celebrate Cybersecurity Awareness Month This October with our Cyber-Monsters!

Oct 5, 2023 10:11:18 AM By Stu Sjouwerman

Cyber threats can be scary, and for good reason.

Senior Executives Beware: The Rise of EvilProxy Phishing Campaigns

Oct 5, 2023 8:20:01 AM By Stu Sjouwerman

Menlo Security warns that a social engineering campaign is using the EvilProxy phishing kit to target senior executives across a range of industries, including banking and financial ...

Malicious URLs In Phishing Emails: Hover, Click and Inspect Again

Oct 5, 2023 8:19:48 AM By Roger Grimes

The most often recommended piece of anti-phishing advice is for all users to “hover” over a URL link before clicking on it. It is great advice.

Open-Source Intelligence (OSINT): Learn the Methods Bad Actors Use to Hack Your Organization

Oct 4, 2023 10:55:26 AM By Stu Sjouwerman

They are out there, watching and waiting for an opportunity to strike; the bad actors who have carefully researched your organization in order to set the perfect trap using easily found ...

[Cybersecurity Awareness Month] Spoofy Steve's Business Email Compromise Scams You Need to Watch Out For

Oct 4, 2023 9:13:04 AM By Roger Grimes

Like a ghost, most business email compromise (BEC) scams are able to sneak through most technical defenses and end up in end-user inboxes.

Generative AI and the Automation of Social Engineering Increasingly Used By Threat Actors

Oct 3, 2023 10:43:44 AM By Stu Sjouwerman

Threat actors continue to use generative AI tools to craft convincing social engineering attacks, according to Glory Kaburu at Cryptopolitan.

[HEADS UP] Aurora Police Department Warns of Contactless Payment Processors Scams

Oct 3, 2023 10:31:37 AM By Stu Sjouwerman

If you didn't trust contactless payment processors before, you really won't after hearing about this recent scam.

CyberheistNews Vol 13 #40 Why BJ Fogg and Daniel Kahneman Are Big Security Pro Must-Knows

Oct 3, 2023 9:00:00 AM By Stu Sjouwerman

Lazarus Attack on Spanish Aerospace Company Started with Messages from Phony Meta Recruiters

Oct 2, 2023 12:29:11 PM By Stu Sjouwerman

A recent attack on an undisclosed Spanish aerospace company all started with messages to the company's employees that appeared to be coming from Meta recruiters, via LinkedIn Messaging. ...

Security Awareness Training Blog

View Topics