Nearly Every CIO Identifies at Least One Cyber Threat as a Risk to their Business

Dec 8, 2023 3:40:05 PM By Stu Sjouwerman

When 97% of CIOs all see things the same way, it’s probably a sign to take the risk of cyber threats seriously – a problem new data shows is only going to get worse in the next five years.

Cyber Attacks and Data Breaches Cited as the Number One Business Risk for Organizations

Dec 8, 2023 7:00:00 AM By Stu Sjouwerman

Even when looking at the various kinds of risks to business, cyber attacks still remain the biggest problem. But new data shows there may be a lesson to be learned to minimize losses.

Don't Be Fooled By This Sneaky Disney+ Phishing Scam

Dec 6, 2023 2:23:33 PM By Stu Sjouwerman

A callback phishing campaign is impersonating Disney+ with phony invoices, according to researchers at Abnormal Security. The phishing emails targeted individuals at 22 organizations.

New York Unit of Worlds Largest Bank Becomes Ransomware Victim

Dec 6, 2023 2:23:26 PM By Stu Sjouwerman

The ransomware attack on ICBC Financial Services caused disruption of trading of U.S. Treasuries and marked a new level of breach that could have massive repercussions.

Financial Institutions are the Most Affected by Phishing Attacks and Scams

Dec 5, 2023 11:38:56 AM By Stu Sjouwerman

New data shows how the overwhelming majority of phishing attacks on financial institutions dwarf every other industry sector by as much as a factor of 30-to-1.

PDFs: Friend or Phishing Foe? Don't Get Caught by the Latest Scam Tactic

Dec 5, 2023 11:38:52 AM By Stu Sjouwerman

Researchers at McAfee warn that attackers are increasingly utilizing PDF attachments in email phishing campaigns.

Security Awareness Training Can Help Defeat Deepfake and AI Phishing

Dec 1, 2023 12:26:58 PM By Roger Grimes

There is no doubt that more pervasive deepfake and AI technologies will make for more realistic, sophisticated, phishing attacks, and add to an already huge problem.

Vishing Gang Takes Victims for “Tens of Millions” Using Little More than Social Engineering

Dec 1, 2023 12:26:52 PM By Stu Sjouwerman

Czech and Ukrainian police have arrested six individuals responsible for a call center-based vishing scam designed to trick victims into thinking they were already victims of fraud.

Criminals Are Cautious About Adopting Malicious Generative AI Tools

Nov 30, 2023 11:12:08 AM By Stu Sjouwerman

Researchers at Sophos have found that the criminal market for malicious generative AI tools is still disorganized and contentious.

No One Knows How Online Pharmacy Company was Hit with a Data Breach Impacting 2.3 Million Customers

Nov 29, 2023 10:56:21 AM By Stu Sjouwerman

This is a cautionary tale of both how your data can legally end up in the hands of an organization you never intended and how victims can be largely left in the dark post-breach.

QR Code Phishing Campaigns on the Rise

Nov 29, 2023 10:55:48 AM By Stu Sjouwerman

There’s been a “precipitous rise” in QR code phishing campaigns in 2023, according to Matthew Tyson at CSO.

Users Fall for Smishing Attacks 6-10 Times More Than Email-Based Attacks

Nov 28, 2023 12:20:35 PM By Stu Sjouwerman

With organizations heavily focusing on protecting the corporate endpoint, cybercriminals are switching focus onto mobile devices where users are more prone to fall for their social ...

Who Knew Neanderthals were so High-Tech?

Nov 28, 2023 12:20:27 PM By Stu Sjouwerman

Researchers at ESET describe various types of scams launched by users of Telekopye, a telegram bot that assists in crafting social engineering attacks.

Initial Access Broker Activity Doubles in One Year’s Time

Nov 27, 2023 2:00:13 PM By Stu Sjouwerman

New data sheds light on just how active the Initial Access Broker (IAB) business is, and the growth uncovered doesn’t bode well for potential victim organizations.

Huntress Finds Business Email Compromise (BEC) Increases In Q3, 2024

Nov 27, 2023 2:00:05 PM By Stu Sjouwerman

Huntress has released a report finding that business email compromise (BEC) attacks have risen in the third quarter of 2023.

Old Bloomberg Crypto Account Bio Link Used in Discord Phishing Attack

Nov 21, 2023 4:25:38 PM By Stu Sjouwerman

Scammers used an outdated link found in an X (formerly Twitter) account belonging to Bloomberg Crypto to send users to a phishing site designed to steal Discord credentials, ...

73% of Organizations Affected by Ransomware Attacks Globally in 2023, According to Statista

Nov 21, 2023 4:25:14 PM By Stu Sjouwerman

I recently wrote about how 1 in 34 organizations globally has experienced an attempted ransomware attack. But that statistic doesn’t provide enough context around the impact felt by the ...

With Expected Increases of Holiday Sales Comes Similar Expectations of More Cyber Scams

Nov 20, 2023 3:08:48 PM By Stu Sjouwerman

If increases in cyberattacks this year are any indication of what to expect in the next six weeks of holiday shopping, we should expect a massive uptick in holiday-related scams.

Cybercrime Group "Scattered Spider" is a Social Engineering Threat

Nov 20, 2023 3:08:35 PM By Stu Sjouwerman

The US Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have released a joint Cybersecurity Advisory describing the Scattered Spider cybercriminal gang’s activities.

Johnny Jet's $3,000 Podcast Scam Nightmare – Unveiling the Elaborate Con that Hijacked his Facebook Kingdom

Nov 17, 2023 10:14:29 AM By Stu Sjouwerman

Travel influencer Johnny Jet has disclosed that he fell victim to a scam that caused him to lose access to his Facebook account, which has tens of thousands of followers. The scammers ...

Security Awareness Training Blog

View Topics