Human Risk Management Blog

Security Awareness Training

Read the latest news about security awareness training, best practices, why you need it, and what happens when you don't have it in place.

KnowBe4 Named a Leader in the Summer 2022 G2 Grid Report for Security Orchestration, Automation, and Response (SOAR)

We are excited to announce that KnowBe4 has been named a leader in the Summer 2022 G2 Grid Report for Security Orchestration, Automation, and Response (SOAR) for the PhishER platform for ...

KnowBe4 Named a Leader in the Summer 2022 G2 Grid Report for Security Awareness Training

We are thrilled to announce that KnowBe4 has been named a leader in the latest G2 Grid Report that compares Security Awareness Training (SAT) vendors based on user reviews, customer ...

[Scam of the Week] Amazon Prime Day or Amazon Crime Day? Don’t Fall Victim to Phishing

As Amazon Prime Day approaches, Checkpoint research is sending a warning that Amazon Prime Day scams will ramp up very soon.

One Employee’s Desire for a New Job Cost His Employer $540 million

A “Fake Job” scam allows cybercriminals to gain entrance to the network at Sky Mavis, makers of the game Axie Infinity, and eventually take the company for half a billion dollars in ...

FBI Issues Warning on China for Attempting to 'Ransack' Western Companies

Bloomberg recently reported that FBI Director Christopher Wray issued a warning to Western companies that China wants to 'ransack' their IP. The goal of this attack would be to dominate ...

Innovative Way to Bypass MFA Using Microsoft WebView2 Is Familiar Nevertheless

An interesting way to bypass multi-factor authentication (MFA) was recently announced by Bleeping Computer. This particular attack method requires a potential victim to be tricked into ...

Technology, Microlearning, and its Impact on Users and Cybersecurity

Technology is everywhere in society these days from our communication, shopping, and commerce capabilities. Whether email, online purchases, or using the blockchain, it amounts to large ...

“Failure to Authenticate” Wire Transaction at the Heart of a Cyber Insurance Appeal Case

Lawsuits over denied cyber insurance claims provide insight into what you should and shouldn’t expect from your policy – and that actions by your own users may make the difference.

40% of CSOs say Their Organization is Not Prepared for Cyberattacks as Phishing is the Top Likely Cause of Breaches

A new survey of executives sheds light on how well organizations fared with cyberattacks in the last 12 month as well as what attack vectors are going to increase future breaches.

“Five Eyes” Nations Cybersecurity Authorities Issue Warning to MSPs of Stepped-Up Cyberattacks

The world’s five leading cybersecurity authorities have again issued a joint report about an increase in malicious cyber activity targeting managed service providers they expect to ...

Your KnowBe4 Fresh Content Updates from May 2022

Check out the 26 new pieces of training content added in April, alongside the always fresh content update highlights and new features.

It's More Than Phishing; How to Supercharge Your Security Awareness Training

Tell people not to click a link, pat each other on the back, and ride off into the sunset. If only security awareness training was that simple in Europe.

WSJ: "Cyber Insurance Went Up A Whopping 92% In 2021"

Whoa Nellie, that's getting to be real money here. This is the kind of thing that starts cutting into your whole IT budget.

Why People Fall for Scams

Scammers use a variety of tried-and-true tactics to trick people, according to André Lameiras at ESET. For example, they can easily find open-source information about people on the ...

Your KnowBe4 Fresh Content Updates from April 2022

Check out the 67 new pieces of training content added in April, alongside the always fresh content update highlights and new features.

Holding a Great Employee Education Meeting

I recently attended a customer’s annual security awareness training employee event. I have attended a bunch of these over the years and I have loved them all. But this particular customer ...

Half of IT Leaders Say their Non-Technical Staff are Unprepared for a Cyber Attack

New data shows IT leadership believes users outside of IT create a “continued significant risk to organizations” despite having a layered security strategy to prevent attacks.

Community Associations Confront Social Engineering

It’s not just deep-pocketed corporations that prove attractive targets for social engineering. Any organization that holds information that can fetch a good price in the criminal ...

UK Information Commissioner: Many Cybersecurity Incidents are “Preventable”

In a recent article about the largest cyberthreats currently facing the UK, John Edwards – the UK’s newly-appointed information commissioner- talks about the need for a security culture ...

Only Half of All Organizations Have Refreshed Their Security Strategy Based on the Pandemic

A new study published by Ponemon Institute shows that a material portion of organizations are still using pre-pandemic security processes and policies, putting the org at risk.


Get the latest insights, trends and security news. Subscribe to CyberheistNews.