Phishing for Ring Customers

Mar 9, 2023 9:17:15 AM By Stu Sjouwerman

INKY warns that a phishing campaign is targeting users of the Ring video security system. The scammers are sending brief phishing emails instructing recipients to click on the attached ...

Three-Quarters of Vulnerabilities Used in Ransomware Attacks Were Discovered Before 2020

Mar 8, 2023 9:24:07 AM By Stu Sjouwerman

Despite a lot of focus on phishing and remote access as initial access vectors, new data shows the use of vulnerabilities is not only on the rise, but simply isn’t being properly ...

Half of all Sites Used in Phishing Attacks Impersonate Financial Institutions

Mar 8, 2023 9:24:04 AM By Stu Sjouwerman

As credential theft-focused phishing attacks continue to assist initial access brokers, new data shows banking fraud continues to be a material threat to individuals and businesses alike.

Google Phishing Pages Jump 1,560% YoY

Mar 8, 2023 9:23:56 AM By Stu Sjouwerman

Vade has released a report looking at phishing trends in 2022. The researchers say the top three most-impersonated brands last year were Facebook, Microsoft, and Google.

Employees Are Feeding Sensitive Biz Data to ChatGPT, Raising Security Fears

Mar 8, 2023 6:12:43 AM By Stu Sjouwerman

Robert Lemos at DARKReading just reported on a worrying trend. The title said it all, and the news is that more than 4% of employees have put sensitive corporate data into the large ...

[SCAM OF THE WEEK] Is ChatGPT Your Next Financial Advisor?

Mar 7, 2023 9:07:00 AM By Stu Sjouwerman

ChatGPT, an artificial intelligence (AI) chatbot created by OpenAI, has risen in popularity since its release last year. Now, cybercriminals are using ChatGPT’s popularity to lure you ...

CyberheistNews Vol 13 #10 [Eye Opener] BusinessWeek: The Satellite Hack Everyone Is Finally Talking About

Mar 7, 2023 9:00:00 AM By Stu Sjouwerman

CyberheistNews Vol 13 #10 | March 7th, 2023 [Eye Opener] BusinessWeek: The Satellite Hack Everyone Is Finally Talking About This week, Bloomberg News pointed at a brand-new article at ...

Three out of Four Organizations Have Experienced a Successful Email-Based Attack as Impacts Increase

Mar 7, 2023 8:00:00 AM By Stu Sjouwerman

New data shows just how impactful these attacks are, with 98% of victim organizations reporting some form of impact from email-based cyber attacks.

Coping With “Double-Extortion” Royal Ransomware

Mar 6, 2023 9:10:12 AM By Stu Sjouwerman

The US Cybersecurity and Infrastructure Security Agency (CISA) and the FBI last week issued a joint advisory on Royal ransomware. Royal is noteworthy for its ability to disable various ...

Ransomware Attacks on Industrial Infrastructure Climb 87% Despite Security Improvements to ICS Environments

Mar 6, 2023 9:09:51 AM By Stu Sjouwerman

Since the goal of ransomware is to initially disrupt operations, the targeting of industrial control systems has been an increasing focus for specific ransomware groups.

Executive Impersonation Business Email Compromise Attacks Go Beyond English Worldwide

Mar 6, 2023 9:09:47 AM By Stu Sjouwerman

Despite hearing mostly about BEC attacks in English-speaking countries, analysis of new attack groups highlight the threat of these kinds of attacks in other languages.

[On-Demand] A Master Class on Cybersecurity: Roger Grimes Teaches Data-Driven Defense

Mar 6, 2023 8:00:00 AM By Stu Sjouwerman

Even the world’s most successful organizations have significant weaknesses in their cybersecurity defenses, which determined hackers can exploit at will. There’s even a term for it: ...

Your KnowBe4 Fresh Content Updates from February 2023

Mar 3, 2023 8:01:00 AM By Stu Sjouwerman

Check out the 24 new pieces of training content added in February, alongside the always fresh content update highlights, events and new features.

Financial Services Sector at Risk of More Significant Impacts of Email-Based Cyber Attacks

Mar 3, 2023 8:00:00 AM By Stu Sjouwerman

Financial services businesses are already in the sights of cybercriminals, and understanding how cyber attacks impact this sector specifically can help establish the need for improved ...

CISA's latest ransomware warning promotes fighting social engineering at the top of the document, once again

Mar 3, 2023 6:58:12 AM By Stu Sjouwerman

So, today CISA released another ransomware notice. The Cybersecurity and Infrastructure Security Agency is an agency of the United States Department of Homeland Security that is ...

[On-Demand] 5 Ways PhishER Saves You Time and Money

Mar 2, 2023 12:01:03 PM By Stu Sjouwerman

Time is the one resource you never get back. Cutting the amount of time between the moment your user reports a suspicious email and when your InfoSec team responds can mean the difference ...

Customer Care Numbers as Phishbait

Mar 2, 2023 8:50:50 AM By Stu Sjouwerman

Researchers at CloudSEK have published a report looking at fraudulent customer service phone numbers in India. The researchers found around 20,000 of these phone numbers targeting users ...

[Eye Opener] Businessweek: The Satellite Hack Everyone Is Finally Talking About

Mar 2, 2023 7:09:33 AM By Stu Sjouwerman

This morning, Bloomberg News pointed at a brand new article at BusinessWeek, one of their media properties. This is an excellent article that exposes the vulnerabilities when ...

Remote Workers Significantly Increase the Cost of Remediating Email-Based Cyberattacks as Costs Average $1 Million

Mar 1, 2023 1:52:30 PM By Stu Sjouwerman

With the average cost of the most expensive successful email attack at over $1 million, it’s necessary to begin to zero in on where the material sources of risk exist to keep these ...

NameCheap’s SendGrid Email Account Compromised, Used to Send Phishing Emails

Mar 1, 2023 1:52:16 PM By Stu Sjouwerman

Since phishing attacks need legitimacy to increase their deliverability, this latest twist shows how phishing scammers and hackers are working together to ensure phishing attacks continue.

Security Awareness Training Blog

View Topics