Human Risk Management Blog

Security Awareness Training

Read the latest news about security awareness training, best practices, why you need it, and what happens when you don't have it in place.

Even the tech-savvy get their accounts hacked...

By Steve Ragan , Staff Writer at CSO wrote: "October 22, 2013 — The millennial generation, those of us who were born and raised alongside the Internet, should be wise enough to avoid ...

Half Of Federal Security Breaches Caused By Employees

This week, MeriTalk, a public-private partnership focused on improving the outcomes of government IT, announced the results of a new report. The study compares what cyber security ...

More Likely to Fall for a Phishing Scam If You’re a Neurotic Woman?

Softpedia published an article I have a problem with. There is so much wrong with this that I don't even know where to start. They started out with:

Inside The Adobe Databreach Disaster

Last week Adobe announced probably the worst news ever for a tech company. Both their source code and customer lists had been stolen. EPIC FAIL!

CyberheistNews Vol 3, # 40

CyberheistNews Vol 3, # 40

Scam Of The Week: Affordable Health Care "Advisers"

Tomorrow, Tuesday October 1, 2013, the first stage of the new health care act kicks in. You can start shopping for policies on new insurance "marketplaces". There is going to be an ...

Your Employees' Identity -Has- Been Stolen

There is the expression that there are two kinds of companies. The ones that know they are hacked and the ones that don't. It's safe to assume your network has already been compromised ...

NEW Kevin Mitnick VIDEO: The Word Document Exploit

Check out a brand new 3:25 min Kevin Mitnick video where he shows live how an infected Word document allows a hacker to steal the employee's user name and password. This is just one of ...

FBI: “Beta Bot” malware kills your anti-virus and steals data

This week, the FBI sent out a warning that a strain of malware known as "Beta Bot" can turn off your antivirus, stops access to the websites of antivirus vendors so that your antivirus ...

Is Your Security Awareness Training Program Broken?

Steve Ragan over at CSO Magazine wrote:

RAPID7 SECURING USER RISK

Rapid7 found 66% of IT professionals conduct user security awareness training to reduce the risk of successful phishing attacks.

Scam Of The Week: Ransomware Uses Child Porn Threat

Getting caught viewing child porn is a huge deal and instantly makes you an outcast in most western countries. Cybercriminals have cooked up a new way to blackmail people out of their ...

Scam Of The Week: "U.S. Starts Bombing Syria"

This one is crafty. There is a fake CNN spam being sent with a subject that reads: "The United States began bombing!" in Syria, but clicking on it will likely result in the workstation ...

KnowBe4 Finalist in Tampa Industry Achievement Awards

We just received word from the Tampa Bay Technology Forum that KnowBe4 has been selected as a finalist in TBTF’s 10th Annual Industry Achievement Awards in the Emerging Technology Company ...

Kevin Mitnick Security Awareness Training 2014

Kevin Mitnick Details Modern IT Threats; spear phishing and more

One of the most infamous hackers of all time talks about Website security and what users should do to protect themselves. In the world of computer security hackers, few are as well-known ...

SEA used spear-phishing in attack on NY Times

A spear-phishing attack, one of the most common and oldest cyber tricks in the book, enabled hackers to hijack and modify the DNS records for several domains on Tuesday, including The New ...

Cybercrime Automates Fake ID's For Spear-phishing

Today it was reported through several sources that a new Cybercrime-as-a-Service option is available: creation of fake scanned passports, ID cards, driver's licenses and fake scanned ...

IT Security Is Broken Bad

With the TV show Breaking Bad in its last season, this seems to be a fun title. However, the topic is not all that much fun. You should realize it's not a question of when you will be ...

Are Your Email Addresses On A Russian Phishing Site?

We are finding many U.S. commercial email addresses at the Russianemailsworld.boommer.ru website. It is really a 'staging' area for emails to be posted by the criminal underground. They ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.