Three-Quarters of Ethical Hackers Can Collect and (Potentially) Exfiltrate Data in 10 Hours or Less

Oct 12, 2022 12:00:00 PM By Stu Sjouwerman

New insight from the SANS Institute surveying 300 ethical hackers sheds some light on how they perceive your security stance – and how easy it is for them to break in despite your efforts.

Could 100% of Phishing Be Eliminated One Day?

Oct 11, 2022 12:59:34 PM By Roger Grimes

Occasionally you will hear people or organizations claiming that they are on the verge of eliminating all social engineering from reaching end-users. Could it be true? Could it happen one ...

[Heads Up] Almost 19 percent of phishing emails bypass Microsoft Defender

Oct 9, 2022 1:05:35 PM By Stu Sjouwerman

Check Point Software is one of the world's best-known and largest infosec companies. In September 2021 they acquired email security company Avanan and recently they updated Check Point's ...

Top 5 Phishing Do's & Don'ts

Oct 5, 2022 9:25:36 AM By James McQuiggan

Here's the Top 5 Do’s and Don'ts for your phishing simulation exercises.

IRS Warns of A Spike in Smishing Attacks

Oct 5, 2022 9:22:59 AM By Stu Sjouwerman

The US Internal Revenue Service (IRS) has issued an alert warning of a significant rise in text message phishing scams (smishing) impersonating the IRS since the beginning of the year.

German Police Collar Alleged Phishing Cybercriminals

Oct 3, 2022 9:07:51 AM By Stu Sjouwerman

The Bundeskriminalamt (BKA), Germany's federal criminal police, raided three homes on Thursday, September 29th, in the course of an investigation of a cyber criminal operation the BKA ...

Response-Based Phishing Scams Targeting Corporate Inboxes Hit New Records

Sep 30, 2022 9:14:06 AM By Stu Sjouwerman

Setting a record for both highest count and share in volume with other types of phishing scams, response-based attacks are at their highest since 2020 and are continuing to grow.

American Airlines Traces Breach to Phishing Incident

Sep 28, 2022 9:05:46 AM By Stu Sjouwerman

American Airlines has disclosed that an attacker used phishing attacks to breach the company’s systems, BleepingComputer reports.

FBI: Cyber Criminals Will Continue Targeting Healthcare Payment Processors Through Phishing Campaigns and Social Engineering

Sep 27, 2022 9:00:42 AM By Stu Sjouwerman

Despite the pandemic being largely considered over, a recent Private Industry Notification focused on the Healthcare industry indicates that organizations should remain vigilant.

Fake Emails Purporting to be from UK Energy Regulator

Sep 27, 2022 9:00:35 AM By Stu Sjouwerman

A phishing campaign is impersonating UK energy regulator Ofgem, according to Action Fraud, the UK’s cybercrime reporting centre.

Sentence in a Catphishing Case

Sep 26, 2022 9:59:32 AM By Stu Sjouwerman

A convict serving twenty-five years in South Carolina for voluntary manslaughter and attempted armed robbery, Darnell Kahn, has now also been convicted in a US court on Federal sextortion ...

Phishing Campaign Targets GitHub Users

Sep 23, 2022 9:15:50 AM By Stu Sjouwerman

GitHub has issued an alert warning of a phishing campaign targeting users by impersonating the popular DevOps tool CircleCI, BleepingComputer reports. The phishing emails inform users ...

Security Practices Are Improving, But Cybercriminals Are Keeping Up

Sep 21, 2022 2:48:10 PM By Stu Sjouwerman

A survey by the Spanish GetApp software rating site has found that the number of organizations using phishing simulations has risen from 30% in 2019 to 70% in 2022. Despite this positive ...

Phishing Attacks Reach an All-Time High, Quadrupling That of Early 2020

Sep 21, 2022 10:20:31 AM By Stu Sjouwerman

New quarterly data from the Anti-Phishing Working Group shows unprecedented phishing activity with increases in BEC, use of social media, vishing, and smishing.

Do Not Use Easily Phishable MFA and That Is Most MFA!

Sep 21, 2022 9:25:43 AM By Roger Grimes

Everyone should use multifactor authentication (MFA), where they can, to protect valuable information. Everyone!

Social Engineering Targets Healthcare Payment Processors

Sep 19, 2022 8:57:39 AM By Stu Sjouwerman

The US Federal Bureau of Investigation (FBI) has issued an alert warning of an increase in phishing and other social engineering attacks against healthcare payment processors.

[HEADS UP] Bank of America Warns About Recent Scams That Request Zelle Payment Due to 'Suspicious Activity'

Sep 16, 2022 3:17:35 PM By Stu Sjouwerman

Bank of America recently sent a customer service email warning users to watch out for this new phishing attack.

Phishing from a French Government Career Website

Sep 15, 2022 10:30:54 AM By Stu Sjouwerman

Attackers are exploiting a legitimate French government website to send phishing messages, according to researchers at Vade. The website, Pôle Emploi, is a career site for companies ...

[MSP News] Manage Your Multiple KnowBe4 Accounts Faster with Managed Training and Phishing Rolled Into One

Sep 15, 2022 8:00:00 AM By Stu Sjouwerman

You wanted the ability to manage both phishing and training campaigns across multiple KnowBe4 accounts, and we listened!

Cisco Attempt Attributed to Lapsus$ Group

Sep 14, 2022 12:40:18 PM By Stu Sjouwerman

Security researchers at Cisco Talos have issued an update on the cyberattack Cisco sustained earlier this year. The attack began with a phishing attack against a Cisco employee, which led ...

Security Awareness Training Blog

Phishing Blog

View Topics