Human Risk Management Blog

Security Awareness Training

Read the latest news about security awareness training, best practices, why you need it, and what happens when you don't have it in place.

Only 5% of U.S. Healthcare Employees Receive Continual Cybersecurity Awareness Training

A recent report by security vendor Kaspersky highlights how healthcare organizations are at risk of cyberattack – and how a lack of training is responsible.

Global Phishing Campaign Targets Universities

Researchers at Secureworks’ Counter Threat Unit (CTU) have been tracking a major phishing campaign that’s using library-themed emails to target more than sixty universities around the ...

Germany Gets Hit With Destructive Filewiper Phishing Attack

Cyber security remains the biggest threat to business in Africa

CAPE TOWN – African business owners who attended the World Economic Forum (WEF) on Africa in Cape Town have flagged cybersecurity as the biggest threat to business.

Ethical Hackers as Educators

Ethical hackers are especially well-positioned to use their knowledge of attack techniques to educate people, according to Zoë Rose, a white-hat hacker based in the UK. On the CyberWire’s ...

FBI Cyber Warning: Attacks On Key Employees Up 100%, As 281 Are Arrested

Zak Doffman, contributor at Forbes reported: "There is a cyberattack epidemic hitting businesses around the world, targeting individuals responsible for requesting fund transfers or ...

The Legal Profession's Catfishing Problem

Scammers frequently impersonate lawyers in fraudulent emails in order to get recipients to take those emails seriously, according to Victoria Hudgins at Legaltech News. Legal threats or ...

The FBI Updates Their Numbers And BEC Is Now A 26 Billion Dollar Scam

FBI's Internet Crime Complaint Center (IC3) says that Business Email Compromise (BEC) scams —aka CEO Fraud—are continuing to grow every year, with a 100% increase in the identified global ...

Cybersecurity: 99% of email attacks rely on victims clicking links

Danny Palmer at ZDNet had the scoop: "Social engineering is by far the biggest factor in malicious hacking campaigns, warn researchers – so how can it be stopped?"

Nemty Ransomware Infests Bogus PayPal Site

BleepingComputer describes a PayPal phishing site that’s delivering a new strain of Nemty ransomware. The attackers used Unicode characters from different alphabets to make their URL look ...

Visa Scam in the UK Targets Chinese Students

Scammers are using bogus threats of deportation to coerce Chinese students studying in the UK into handing over tens of thousands of dollars, the Guardian reports. The scammers are posing ...

Cybercriminals Unleash Ransomware Attack Designed to Compromise the Security of 120 French Hospitals

A ransomware infection has left one hospital in a group of 120 resorting to pen and paper as they work to remediate an attack custom-designed to attempt to take down all 120.

Targeted Business Email Compromise Now Includes Validating Your Email

A new scammer group out of Nigeria is taking additional steps to verify email addresses are valid before launching BEC campaigns designed to commit fraud.

Two-Thirds of Security Budgets Expected to Increase as Risk of Cyberattack Shifts to the Cloud

Organizations are feeling the impact of attacks and are taking tangible steps to lock in budget specifically to address security concerns with Cloud Security seeing the largest increase.

Social Media and Their Exploitation in Social Engineering

Phishing is most commonly associated with email, but social media are quickly becoming a major hunting grounds for scammers, according to Elliot Volkman from PhishLabs. Social media ...

U.K. Charity Workers Most At Risk From Phishing

Tessian report finds a large amount of U.K. charity workers aren't getting proper security awareness training. Michael Moore at ITProPortal wrote: "UK charities are leaving themselves ...

KnowBe4 Fresh Content and Feature Update - August 2019

Check out the content and feature updates in the KnowBe4 platform for the month of August!

Advanced Android SMS Phishing

Attackers can launch SMS phishing attacks to remotely change settings on a victim’s Android device, researchers at Check Point have found. These attacks take advantage of weak ...

Why Do People Keep Falling For Facebook Hoaxes?

Falling for social media hoaxes indicates a deeper underlying need for online awareness, according to Ben Yelin from the University of Maryland Center for Health and Homeland Security.

Connecting Security Awareness Training Data to your Security Operations

Highlighting the value of connecting user security awareness trainings to the critical resources those users can access


Get the latest insights, trends and security news. Subscribe to CyberheistNews.