Human Risk Management Blog

IT Security

Get the most current news about the IT Security industry, what the latest threats are and what that means to security professionals.

Court Ruling Could Be Boon to Cyberheist Victims

[caption id="" align="alignleft" width="310" caption="Court Ruling Boon To Cyberheist Victims"][/caption] BrianKrebs reported some very good news. A decision handed down by a federal ...

Cybercriminals Sniff Out Vulnerable Firms

[caption id="" align="aligncenter" width="560" caption="Small Firms Cyberheist Victims"][/caption] I could have written this headline myself. But I didn't, it was Sarah Needleman at the ...

Training Fragmentation Causes Knowledge Gap

[caption id="" align="alignleft" width="350" caption="Training Fragmentation"][/caption] More and more, you see training companies promote their security awareness training products as ...

FBI: High-tech Espionage Costs 13 Billlion

Michael Cooney over at NetworkWorld came up with a number: 13. "Driven by the general ease of stealing electronically stored data and the reality of growing global businesses, US ...

Scam Of The Week Payroll Phish

The nakedsecurity blog over at Sophos highlighted a new phishing scam that would be good to alert your employees about. The bad guys are pretending to be payroll processing company ADP. ...

Malware Metastasizes

A few days ago I wrote about a 60 million Euro cyberheist. I have been digging into this a bit more, as it's the most advanced attack yet. Cybercrime is not revolutionary, it clearly ...

Bank Settles With California Cyberheist Victim

Finally, a positive outcome in a cyberheist lawsuit. Brian Krebs reported that a Professional Business Bank settled with a Village View Escrow Inc, a California cyberheist victim. A ...

60 Million Euro Stolen In Biggest Cyberheist Ever

[caption id="" align="alignleft" width="390" caption="60 million Cyberheist"][/caption] This is exactly what I have been warning against in my book cyberheist. McAfee and Guardian ...

OMG - I did not know it was THIS horrible.

More from Brian Krebs's astounding blog post today. "As the chart I compiled above indicates, attackers are switching the lure or spoofed brand quite often, but popular choices include ...

Microsoft : "Civilian casualties inevitable in government cyber war"

Alastair Stevenson at the V3 site quoted Microsoft: "Cyber attacks such as Duqu, Stuxnet and Flame will inevitably hurt private companies and innocent people as well as governments, ...

Kevin Mitnick Partners With KnowBe4

Kevin Mitnick, at One Time the World's Most-Wanted Hacker, Joins Forces With Leading Internet Security Awareness Training Company KnowBe4, LLC CLEARWATER, Fla., June 18, 2012 -- Internet ...

Retelling a Password Nightmare in the Wake of the LinkedIn Password Leak

Alan Shimel tell us an enlightening and cautionary tale how his password was hijacked and how much time it took him to get it all back under control. This is a warmly recommended read ...

Why antivirus companies failed to catch Flame and Stuxnet

Arstechnica picked up the blog post of F-Secure's Chief Research Officer: A/V outfits were out of their league. Mikko Hypponen is the Chief Research Officer of F-Secure. He has been ...

Apple Releases Guide To iOS Security

Techcrunch wrote: "Apple has introduced a guide to iOS security, which was posted to Apple.com sometime in late May, but is just now being noticed outside the Apple developer community. ...

Microsoft releases 'Anti-Flame' Update

Redmond stated: "We recently became aware of a complex piece of targeted malware known as “Flame” and immediately began examining the issue. As many reports assert, Flame has been used in ...

Free Data Loss Prevention Suite

OpenDLP is a free and open source, agent- and agentless-based, centrally-managed, massively distributable data loss prevention tool released under the GPL. Given appropriate Windows, ...

Over-55s Pick Passwords Twice As Secure As Teenagers

"People over the age of 55 pick passwords double the strength of those chosen by people under 25 years old. That's according to the largest ever study of password security, which also ...

Malicious PowerPoint File Contains Exploit, Drops Backdoor

TrendLabs discovered a malicious MS PowerPoint document that arrives attached to email messages. The file contains an embedded Flash file, which exploits a software bug found in specific ...

Aaaugh! 1 in 5 U.S. Windows PCs Lack Antivirus Defenses

Un-friggin-believable but true. Don't be one of them! Gregg Keizer at ComputerWorld was the first with this story. "Nearly a fifth of Windows PCs in the U.S. lack any active security ...

Chinese hacker brings grief to Calgary’s Catholic school system

Hackers will find any mail server that is not protected and/or configured correctly and use it to send out as much spam as possible. This gets the unsuspecting organization blacklisted ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.