Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Quishing: QR Codes as Phishbait

Researchers at Trustwave are tracking an increase in the use of QR codes to spread phishing links.
Continue Reading

Case Study: LoanLogics Combined Compliance & Security Awareness Training to Improve Security Culture

In the drive to build a strong security culture, security awareness and compliance training should work hand in hand.
Continue Reading

Top 10 Trends in Business Email Compromise for 2023

Researchers at Trustwave have published a report outlining trends in business email compromise (BEC) attacks, finding that these attacks spiked in February of 2023.
Continue Reading

Use KnowBe4’s New Callback Phishing Feature to Boost Your Organization's Security Awareness

What's the Deal with Callback Phishing?
Continue Reading

Your KnowBe4 Fresh Content Updates from August 2023

Check out the 21 new pieces of training content added in August, alongside the always fresh content update highlights, events and new features.
Continue Reading

Duolingo Users Should Be on the Lookout for Targeted Phishing Attacks

Users of the language learning app Duolingo should be wary of targeted phishing attacks following a recent data leak, according to Anthony Spadafora at Tom’s Guide. Criminals scraped the ...
Continue Reading

Data Breaches Involving Social Engineering Attacks Take Longer to Identify and Contain

Continuing coverage of IBM’s recently-released Cost of a Data Breach report, we focus on the impact attacks involving social engineering have on data breach costs.
Continue Reading

Ransomware Attacks Rise 69% and 1500 Organizations Feel the Hurt

A new report from Rapid7 has found that the number of ransomware attacks increased by 69% in the first half of 2023. Rapid7 incident response data found that at least 1500 organizations ...
Continue Reading

Social Engineering Is the Number One Cybersecurity Problem by Far

The number one way that hackers and malware compromise people, devices, and networks is social engineering. No one argues that anymore, but it was not always known or discussed that way. ...
Continue Reading

LinkedIn Deception: How a Chinese Spy Tricked Thousands of UK Officials

In last few years, cyber espionage has taken a new form. A recent investigation by The Times has unveiled a Chinese intelligence officer's extensive use of LinkedIn to target UK ...
Continue Reading

Phishing Tops the List as the Most Costly Initial Attack Vector in Data Breaches

After you come to grips with the massive average cost of a data breach to an enterprise organization measured in the millions, it’s time to look at the factors that increase – and lower – ...
Continue Reading

Data Breach Costs in Healthcare Rise 53% to More than Double the Average

It appears that one of the most regulated industries also holds the title for the highest average data breach costs – coming in at just under $11 million per breach.
Continue Reading

Deceptive Links, Brand Impersonation, and Identity Deception Top the List of Phishing Attack Tactics

As phishing attacks continue to dominate as an initial attack vector, new data shows that attackers maintain the use of tried-and-true techniques as the means to successful attacks.
Continue Reading

Phishing Campaigns Targeting Microsoft Login Credentials Jump an Unprecedented 6100%

Monitoring of traffic to phishing pages hosted on the free hosting service Cloudflare R2 show an unheard of spike of 6100%, many going undetected by many security solutions due to the ...
Continue Reading

Scammers Impersonate the Australian Tax Office

The Australian Taxation Office (ATO) has warned of an increase in SMS and email phishing attacks targeting taxpayers, News.com.au reports. The scams attempt to steal credentials or ...
Continue Reading

[Eye-Opening] Increase of Phishing Attacks in Australia Should Alarm Organizations

Phishing attacks are on the rise in Australia, the Australian Broadcasting Corporation (ABC) reports.
Continue Reading

Bloomberg Reports: Stealth QR Code Phishing Attack On Major US Energy Company

During my two years as the CEO of a Public Company, Bloomberg became one of my go-to sources for financial news. I am still subscribed and today found an interesting story from Drake ...
Continue Reading

[Must Know] Cybercriminals May Already Have Hacked Your LinkedIn Account. How To Secure.

New reports show many LinkedIn users have reported complaints about accounts being taken over by bad actors.
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews