Human Risk Management Blog

Security Awareness Training

Read the latest news about security awareness training, best practices, why you need it, and what happens when you don't have it in place.

[Heads-up] A GA County School System Only Just Escaped A 2 Million Dollar Cyber Attack

Armor, a leading global cloud security solutions provider, read the news about a recent cyberattack, where hackers targeted the payroll department of the city of Tallahassee, FL and ...

Scammers Impersonate Big UK Law

The UK’s Solicitors Regulation Authority (SRA) warned that scammers are impersonating a London law firm, Linklaters LLP, using phony job offers. The documents purport to come from the ...

Smishing Down Under

Banking malware is being installed on Android devices via malicious links in SMS messages, CRN reports. Cisco Talos discovered the malware being advertised on an exploit forum, and found ...

[SCAM OF THE WEEK]: Notre Dame Disaster Causes FireStorm Of Social Engineering And Misinformation

The Notre Dame Cathedral in Paris caught fire and was barely saved from total destruction. Millions of people visit every year and hundreds of millions feel a powerful, and personal, ...

Island Hopping Grows in Popularity as Attackers use One Victim to Create the Next

Cybercriminals no longer see your organization as just their next target; they see the organization as a valuable source of intel and the launch point for their next attack. In business ...

Insurers Discuss What to Expect from a Ransomware Attack, and How to Defend Yourself Against One

Ransomware tops the list of attacks for insurers of the food and beverage industry. Outdated software and lax user concern for security controls provide attacker with a way in.

Staff and Students Put School Districts at the Greatest Risk of Cyber Attack

Inadvertent sharing, phishing attacks, and ransomware top the list of attack vectors, with teachers, students, and vendors all contributing to the risk of breach.

Ottawa City Treasurer sends $128,000 to fraudsters in email phishing scam

The treasurer of the city of Ottawa, Marian Simulik, fell for a business email compromise (BEC) scam and sent $100,000 to a scammer, the city’s auditor general revealed this week. Simulik ...

[Heads-up] Survey Finds 82% Of You Are Impacted By Payment Fraud

Payment fraud continues to soar, as a record 82 percent of organizations reported incidents in 2018, according to the 2019 AFP Payments Fraud & Control Survey, underwritten by J.P. ...

A Powerful Malware That Tried To Blow Up A Saudi Plant Strikes Again

A highly capable malware reportedly used in a failed plot to blow up a Saudi petrochemical plant has now been linked to a second compromised facility.

Organizations Face a 63% Likelihood of Being the Victim of Successful Cyberattack in Next 12 Months

The latest data from 1,200 IT organizations shows organizations seeing attacks as inevitable and, for some industries, successful compromise as even more a given.

Pro Tip: Social Security Numbers Can’t be “Suspended”

A popular robocall scam is telling people that their Social Security numbers have been “suspended,” and then asking them to call back to speak a government agent about the issue, ...

The Total Risk Value of Cybercrime Has Risen to $5.2 Trillion Over the Next Five Years

According to new data from Accenture, the average company sees 145 security breaches annually, with the cost of experiencing any kind of cyberattack rising.

90 Percent Of Critical Infrastructure Hit By Cyberattacks

A new survey of professionals in industries using industrial control systems (ICS) and operational technology (OT) finds 90 percent of respondents say their environment has been damaged ...

New 2019 Report: "AI Is Here To Stay: Are You Prepared?"

I contributed to a new Foley & Lardner report, “Artificial Intelligence is Here to Stay: Are You Prepared?” which outlines the use, opportunities and legal risks of AI. I strongly ...

NCAA-themed Scams During Basketball Playoffs

Scammers are capitalizing on the hype for March Madness with a bevy of malicious streaming sites and phishing scams, according to Lindsey O’Donnell at Threatpost. Researchers at Zscaler ...

Game of Thrones as Phishbait, with Hook

Game of Thrones is the top TV show used to deliver malware-infected pirated content, researchers at Kaspersky Lab have found. Threatpost says the researchers saw nearly 21,000 users ...

Inside A Massive Spam Operation, And Shutting It Down

We’ve blogged before about spammers using publicly accessible databases to help them with large-scale spam campaigns. Here’s what one such recent campaign looks like from the insider. ...

Business Email Compromise (BEC) Attacks Go Mobile Using SMS to Increase Attack Success

Compromise-by-Text turns out to be an even better medium for cybercriminals to fool users into becoming victims. A new article from security vendor Asigra demonstrates how and why.

AV-Test compares 19 Antivirus Tools: Windows Defender Reaches Maximum Detection Score

The German AV-Test lab compared 19 antivirus products, including the free Windows Defender which comes with the Win10 OS. Defender reached the max detection score, which was better than a ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.