Kevin Mitnick Details Modern IT Threats; spear phishing and more

Sep 2, 2013 12:50:00 PM By Stu Sjouwerman

One of the most infamous hackers of all time talks about Website security and what users should do to protect themselves. In the world of computer security hackers, few are as well-known ...

SEA used spear-phishing in attack on NY Times

Aug 29, 2013 1:45:00 PM By Stu Sjouwerman

A spear-phishing attack, one of the most common and oldest cyber tricks in the book, enabled hackers to hijack and modify the DNS records for several domains on Tuesday, including The New ...

Cybercrime Automates Fake ID's For Spear-phishing

Aug 28, 2013 9:39:00 AM By Stu Sjouwerman

Today it was reported through several sources that a new Cybercrime-as-a-Service option is available: creation of fake scanned passports, ID cards, driver's licenses and fake scanned ...

IT Security Is Broken Bad

Aug 18, 2013 11:48:00 AM By Stu Sjouwerman

With the TV show Breaking Bad in its last season, this seems to be a fun title. However, the topic is not all that much fun. You should realize it's not a question of when you will be ...

Are Your Email Addresses On A Russian Phishing Site?

Aug 18, 2013 11:34:00 AM By Stu Sjouwerman

We are finding many U.S. commercial email addresses at the Russianemailsworld.boommer.ru website. It is really a 'staging' area for emails to be posted by the criminal underground. They ...

Spear-phishing attackers vandalize CNN, TIME and Wash Post

Aug 16, 2013 8:40:00 AM By Stu Sjouwerman

You would think that by now journalists and people in media and advertising would be on the alert for social engineering red flags. But no. Syrian hacktivists sent a spear-phishing attack ...

Hackers put a bull's-eye on small business

Aug 15, 2013 10:05:00 AM By Stu Sjouwerman

Less than 500 employees? You’ve got a 20 percent chance of being hacked, and if it happens there’s a good chance your business is finished.

We started trusting bad code from Day One

Aug 11, 2013 2:08:00 PM By Stu Sjouwerman

Vint Cerf – Photo by Charles Haynes

Scam Of The Week: "Held For Ransom"

Aug 10, 2013 9:16:00 AM By Stu Sjouwerman

You should alert your users that a particularly effective scam is growing by leaps and bounds recently. It's not new, but it's bursting into mainline cybercrime these last few weeks. The ...

Watching Porn on a Mobile …Risky?

Aug 8, 2013 11:26:00 AM By Stu Sjouwerman

The Internet has its own Red Light District, and it is one of the most unsafe areas you can browse. Online porn is a profitable sideline for the adult industry, but a mainline business ...

U.S. Commercial Banking In Top 10 Riskiest Industries.

Jul 31, 2013 11:58:00 AM By Stu Sjouwerman

Mark Holan at the Tampa Bay Business Journal reported on something remarkable. Commercial Banks are in the #6 slot of the Top 10 Riskiest industries in the U.S. (!) "Industry research ...

Scam Of The Week: Christian Singles

Jul 28, 2013 1:21:00 PM By Stu Sjouwerman

Employees the Weakest Link of Cyber Security, Report Finds

Jul 22, 2013 10:31:00 AM By Stu Sjouwerman

Antivirus company Bitdefender reported something important. Here is their blog post of July 17, 2003.

Congressional Aides Targeted By Spear-phishing Attacks

Jul 19, 2013 10:05:00 AM By Stu Sjouwerman

Reuters just reported that Congressional aides in the Senate and House of Representatives said on Thursday that they were notified of a potential security risk involving email and other ...

My New Pebble Smartwatch: A Social Engineering Problem

Jul 19, 2013 9:44:00 AM By Stu Sjouwerman

Why help desk employees are a social engineer's favorite target

Jul 18, 2013 9:37:00 AM By Stu Sjouwerman

Steve Rangan over at the The CSO site wrote:

Phishing Attack: Your Twitter friend may not really be your friend

Jul 15, 2013 2:03:00 PM By Stu Sjouwerman

There is a new phishing campaign doing the rounds trying to get your Twitter login credentials. The scam arrives as a direct messages to prospective victims from one of their contacts. ...

7 reasons for security awareness failure

Jul 11, 2013 12:04:00 PM By Stu Sjouwerman

Ira Winkler and Samantha Manke just wrote a great article at the CSO site about why security awareness programs fail. They started out with: "There is a great dichotomy in Security ...

CTO of media company faked-out employees with "phishing" emails

Jul 8, 2013 10:54:00 AM By Stu Sjouwerman

There is a fascinating article in SC Magazine dated July 3, 2013 which tells the story of Atlantic Media Chief Technology Officer Tom Cochran, who blasted out a simulated phishing email ...

Five Ways Your Employees Can Kill Your Company

Jul 6, 2013 1:17:00 PM By Stu Sjouwerman

One - Insider Threat: Stealing valuable information for either profit or idealistic motives. Examples: Software developers taking home code for their next job, sales people downloading ...

Security Awareness Training Blog