The NoRelationship Attack Bypasses Office 365 Email Attachment Security

Feb 24, 2019 10:28:34 AM By Stu Sjouwerman

Attackers are bypassing Office 365 email attachment security by editing the relationship files that are included with Office documents, according to Yoav Nathaniel at Avanan. A ...

Hackers take over Tampa Mayor Bob Buckhorn's Twitter account, make bomb threat at Tampa Airport

Feb 21, 2019 10:03:21 AM By Stu Sjouwerman

TAMPA, Fla. (WFLA) - Tampa police are investigating a bomb threat made against Tampa International Airport after hackers took over Tampa Mayor Bob Buckhorn’s Twitter account Thursday ...

Remote Access Credentials Are the Latest Malware Attack Target

Feb 18, 2019 2:38:44 PM By Stu Sjouwerman

The latest iteration of notable banking trojan, Trickbot, now includes a password grabbing module designed to provide cybercriminals with remote access to internal systems.

It’s Time to Have a Security Plan Around Consumer Data Privacy

Feb 18, 2019 2:33:39 PM By Stu Sjouwerman

The growth in both consumer concern and laws seeking to protect consumer data means organizations need to take specific measures to ensure the safeguarding of customer data.

Business Email Compromise, Credential Theft, and Many Other Attack Vectors Surged as High as 5x in Q4 2018

Feb 14, 2019 11:30:32 AM By Stu Sjouwerman

The latest data from Proofpoint shows many types of cyberattacks making massive jumps in comparison to both previous quarters and years.

Cyberheist On Bank Causes Shutdown Of All Operations

Feb 14, 2019 8:51:11 AM By Stu Sjouwerman

Reuters reported that the Bank of Valetta, which accounts for almost half of Malta’s banking transactions, had to shut down all of its operations on Wednesday after hackers broke into its ...

New York State Education Department Proposes New Regulations to Strengthen PII Security

Feb 13, 2019 2:47:23 PM By Stu Sjouwerman

The new proposed amendments seek to protect the personally identifiable information for students and school personnel accessible by both educational agencies and contractors.

Bogus Security Alerts Aren’t From Norton

Feb 12, 2019 10:55:52 AM By Stu Sjouwerman

Con artists are targeting thousands of people with tech support scams that pose as security alerts from Norton Security, researchers at Symantec have found. The phony alerts pop up in the ...

Surge in Email-enabled Healthcare Fraud

Feb 12, 2019 10:49:51 AM By Stu Sjouwerman

Email fraud targeting healthcare professionals has spiked 453% over the past two years, according to a new report by Proofpoint. Proofpoint researchers tracked business email compromise ...

Company Sues Employee After She Falls For USD 250K CEO Fraud Scam

Feb 12, 2019 10:02:32 AM By Stu Sjouwerman

A woman is being sued for sending approx. 250K of her employer's cash to an online fraudster. Patricia Reilly, who was working for the UK Peebles Media Group fell for a CEO Fraud Scam ...

Scammers Still Exploit Hijacked GoDaddy Domains

Feb 7, 2019 7:18:05 AM By Stu Sjouwerman

Criminals are still using hijacked GoDaddy domains to launch large-scale spam campaigns, despite GoDaddy taking steps last month to address the authentication flaw exploited by the ...

Today I was attacked through an existing vendor using a real email thread

Feb 5, 2019 10:39:55 AM By Stu Sjouwerman

We have been dealing with a vendor of ours for on-hold messages for many years. I send them a Word file with the hold messages, their studio records them, and they send us a wave file ...

KnowBe4 Fresh Content & Feature Updates - January 2019

Feb 4, 2019 1:59:09 PM By Stu Sjouwerman

Here's a few important updates to share with you for the month of January!

[Brilliant New Social Engineering Phish] "Please Docusign: Funding For Your Business"

Jan 31, 2019 7:13:19 AM By Stu Sjouwerman

A friend was sent this email and he forwarded it to me. It's a brilliant new social engineering phishing scam. It will sail through all your spam / malware filters and email protection ...

Awareness Training is the Key to a Culture of Security

Jan 14, 2019 3:47:52 PM By Stu Sjouwerman

Here’s a follow-up to an earlier post of ours, with amplification of points well-worth making.

It Only Takes 1 Phish: “Unremarkable” Phishing Attack Results in a Breach in the European Union’s Diplomatic Communications Network

Jan 9, 2019 7:02:51 AM By Stu Sjouwerman

A three-year-long cyber-attack led to the successful breach of the all communications between all EU member states, putting countries and their futures at risk.

Security Awareness Training Blog