Phishing Attacks Are Abusing Legitimate Services to Avoid Detection

Oct 18, 2024 2:17:30 PM By Stu Sjouwerman

Microsoft warns that threat actors are abusing legitimate file-hosting services to launch phishing attacks. These attacks are more likely to bypass security filters and appear more ...

UK Company Hacked After Accidentally Hiring North Korean Cybercriminal

Oct 18, 2024 2:17:04 PM By Stu Sjouwerman

In a shocking turn of events, an unnamed company based in the UK has fallen victim to a sophisticated cyber attack after inadvertently hiring a North Korean hacker as a remote IT worker.

AI-Enhanced Cyber Attacks Tops the List of Data Security Threats

Oct 17, 2024 1:37:18 PM By Stu Sjouwerman

AI is quickly becoming the basis for more cyber attacks, leading organizations to realize the risk it presents. A new report now shows that AI-enhanced cyber attacks are now the top ...

Chinese Threat Actor Targets OpenAI With Spear-Phishing Attacks

Oct 16, 2024 3:47:17 PM By Stu Sjouwerman

OpenAI has disclosed that its employees were targeted by spear-phishing attacks launched by a suspected Chinese state-sponsored threat actor.

The Number of Malicious Emails Reaching Inboxes Is Declining

Oct 16, 2024 3:47:14 PM By Stu Sjouwerman

New research shows that less malicious emails are getting past security scanners to the inbox, but also provides details about how phishing emails are becoming increasingly dangerous.

North Korean Hackers Continue to Target Job Seekers

Oct 16, 2024 8:53:47 AM By Stu Sjouwerman

A North Korean threat actor is launching social engineering attacks against job seekers in the tech industry, according to researchers at Palo Alto Networks’ Unit 42.

KnowBe4 Named a Leader in the Fall 2024 G2 Grid Report for Security Orchestration, Automation, and Response (SOAR) Software

Oct 16, 2024 8:00:00 AM By Stu Sjouwerman

We are excited to announce that KnowBe4 has been named a leader in the Fall 2024 G2 Grid Report for Security Orchestration, Automation, and Response (SOAR) for the PhishER platform for ...

CyberheistNews Vol 14 #42 [Heads Up] Majority of U.S. Execs Now Rank Cyber Threats as #1 Risk

Oct 15, 2024 9:00:00 AM By Stu Sjouwerman

KnowBe4 Named a Leader in the Fall 2024 G2 Grid Report for Security Awareness Training

Oct 15, 2024 8:33:19 AM By Stu Sjouwerman

We are thrilled to announce that KnowBe4 has been named a leader in the latest G2 Grid Report that compares security awareness training (SAT) vendors based on user reviews, customer ...

What Spending 3 Hours in IKEA Taught Me About Cybersecurity Awareness

Oct 15, 2024 8:07:05 AM By Javvad Malik

It was a Saturday morning, and I had grand plans. By "grand plans," I mean sitting on the sofa, watching reruns of "The IT Crowd," and pretending I didn't hear the lawn mower calling my ...

44% of U.S. Organizations Experienced One or More Ransomware Attacks in the Last Year

Oct 15, 2024 8:07:02 AM By Stu Sjouwerman

As ransomware becomes more pervasive, new data provides insight into how well organizations are responding and the attack vector being used most.

Meet SmartRisk Agent™: Unlock Your New Human Risk Management

Oct 14, 2024 10:33:00 AM By Stu Sjouwerman

Depending on who you ask, between 70 and 90 percent of cyber risk has human error as the root cause. That's why Human Risk Management (HRM) is so important. And here is the next major ...

"Operation Kaerb" Takes Down Sophisticated Phishing-as-a-Service Platform “iServer”

Oct 14, 2024 8:51:36 AM By Stu Sjouwerman

A partnering of European and Latin American law enforcement agencies took down the group behind the mobile phone credential theft of 483,000 victims.

Sextortion Scammers Attempt to Hit “Close to Home”

Oct 14, 2024 8:51:32 AM By Stu Sjouwerman

We live in a world where, despite the sharing of information online, we feel like those interactions will never reach home. But a new scam – covered on WTSP Tampa Bay’s Channel 10 news – ...

Trinity Ransomware Targets the Healthcare Sector

Oct 11, 2024 8:37:56 AM By Stu Sjouwerman

The Trinity ransomware gang is launching double-extortion attacks against organizations in the healthcare sector, according to an advisory from the US Department of Health and Human ...

Google App Scripts Become the Latest Way to Establish Credibility and Automate Phishing Attacks

Oct 11, 2024 8:37:52 AM By Stu Sjouwerman

Cybercriminals have found a new way of leveraging legitimate web services for malicious purposes, this time with the benefit of added automation of campaign actions.

Hurricane Deepfakes Flood Social Media

Oct 9, 2024 6:32:39 AM By Stu Sjouwerman

As the recent hurricane Helene caused major damage and as hurricane Milton has left a path of destruction across Florida, deepfakes are spreading misinformation on social media.

Attackers Abuse URL Rewriting to Evade Security Filters

Oct 8, 2024 10:19:48 AM By Stu Sjouwerman

Attackers continue to exploit URL rewriting to hide their phishing links from email security filters, according to researchers at Abnormal Security.

[Cybersecurity Awareness Month] Keeping Your Mobile Devices Secure from the ‘Inside’ Out

Oct 8, 2024 10:19:44 AM By James McQuiggan

As remote work and connecting while traveling has become the norm, mobile device security responsibilities have also increased.

CyberheistNews Vol 14 #41 [Wake-Up Call] Senator Falls Victim to Deepfake Scam. Are Your Users Next?

Oct 8, 2024 9:00:00 AM By Stu Sjouwerman

Security Awareness Training Blog

View Topics