New Research: Smaller Companies Receiving Higher Rates Of Phishing Emails

Aug 2, 2024 9:44:44 AM By Stu Sjouwerman

Researchers at Barracuda have found that smaller companies tend to receive a higher rate of phishing attacks spread across the organization, according to a report looking at the phishing ...

Half of Travel-Themed Spam Emails Are Scams

Jul 31, 2024 1:31:04 PM By Stu Sjouwerman

Researchers at Bitdefender have found that half of all travel-themed spam emails contain scams.

The First Half of 2024 Results in More Than 1 Billion Data Breach Victims

Jul 31, 2024 1:31:00 PM By Stu Sjouwerman

New data shows that cyber attacks have resulted in double the number of data breaches in 2024 than throughout all of 2023.

Organizations Prepare for More Evolved AI-Based Cyber Attacks as Deepfakes Become Top Concern

Jul 30, 2024 1:47:32 PM By Stu Sjouwerman

New data on how the threat of AI in cyber crime is being seen as a growing risk provides insight into how organizations are shifting from reaction to prevention.

New Phishing Kit Uses Voice Call Generator to Impersonate Spanish Banks

Jul 30, 2024 1:47:23 PM By Stu Sjouwerman

A new cybercriminal group is selling “a sophisticated AI-powered phishing-as-a-service platform” that targets 36 Spanish banks, according to researchers at Group-IB.

Scammers Exploit Interest in Generative AI Tools

Jul 29, 2024 1:50:36 PM By Stu Sjouwerman

Researchers at Palo Alto Networks’s Unit 42 are tracking phishing attacks exploiting interest in generative AI tools. The researchers observed spikes in suspicious domain registrations ...

The 2024 Olympics Offers Plenty of Opportunity For Online Scammers

Jul 29, 2024 1:50:30 PM By Stu Sjouwerman

Fortinet’s Threat Intelligence Report covering the Paris Olympics provides some very detailed coverage of how threat actors are taking advantage of individuals and organizations who have ...

QR Code Phishing is Still on the Rise. The SEG is Dead.

Jul 29, 2024 8:19:34 AM By Stu Sjouwerman

Organizations need to be aware of the threat posed by QR code phishing (quishing), according to researchers at Trend Micro.

Nearly All Ransomware Attacks Now Include Exfiltration of Data…But Not All Are Notified

Jul 29, 2024 8:19:31 AM By Stu Sjouwerman

Organizations are falling victim to ransomware attacks where data is stolen, but the victim isn’t being told about it. I have a theory as to why this is happening.

Roger’s Hacking Stories

Jul 29, 2024 8:17:49 AM By Roger Grimes

In this post, I'll share two fascinating hacking stories I've experienced: one involving a sophisticated scam that targeted a major U.S. Fortune 500 conglomerate, and another detailing ...

New Phishing Scam Leverages Chat To Add Credibility And Ensure Success

Jul 26, 2024 11:53:18 AM By Stu Sjouwerman

A new phishing scam is leveraging trusted aspects of ecommerce to make their scams look legitimate.

Phishing Campaigns Continue To Exploit CrowdStrike Outage

Jul 26, 2024 8:34:01 AM By Stu Sjouwerman

As expected, threat actors are taking advantage of the global IT outage caused by a faulty CrowdStrike update last Friday, SC Media reports.

Russian Super-Threat Group Fin7 Comes Back from the Dead

Jul 26, 2024 8:33:58 AM By Stu Sjouwerman

Declared “dead” by the U.S. Attorney’s Office in 2023, the Russian cyber crime group Fin7 is impersonating some of the top global brands.

Phishing Campaigns Abuse Cloud Platforms to Target Latin America

Jul 23, 2024 1:55:11 PM By Stu Sjouwerman

Several threat actors are abusing legitimate cloud services to launch phishing attacks against users in Latin America, according to Google’s latest Threat Horizons Report.

Is Your Bank Really Calling? How to Protect Yourself from Financial Impersonation Fraud

Jul 23, 2024 1:55:08 PM By Anna Collard

Protecting your financial information has never been more crucial. With the rise of sophisticated scams, it's becoming increasingly difficult to distinguish between legitimate bank ...

Crypto Data Breach Continues to Fuel Phishing Scams Years Later

Jul 23, 2024 1:55:04 PM By Stu Sjouwerman

According to security researchers at Cisco Talos, emails impersonating legitimate officers at the Cyprus Securities and Exchange Commission are being sent to prior Opteck customers that ...

Phishing Attacks Will Likely Follow Last Week’s Global IT Outage

Jul 22, 2024 2:36:16 PM By Stu Sjouwerman

Organizations should expect to see phishing attacks exploiting the global IT outage that occurred last Friday, the Business Post reports.

7 in 10 Organizations Experienced a Business Email Compromise Attack in the Last 12 Months

Jul 18, 2024 11:30:02 AM By Stu Sjouwerman

Despite ransomware getting the lion’s share of the tech pub headlines, business email compromise (BEC) attacks are alive and well… and having a material impact.

[NEW FREE TOOL]: Reveal Your Network's Hidden Weaknesses with KnowBe4's BreachSim Data Exfiltration Simulator

Jul 17, 2024 8:00:00 AM By Stu Sjouwerman

As cyber threats evolve, the target has become crystal clear: your data. A staggering 90% of ransomware attacks now include a data exfiltration component. With this in mind, KnowBe4 has ...

SEC Fines Publicly Traded Company $2.125 Million For Negligence Before, During, and After a Ransomware Attack

Jul 16, 2024 12:26:30 PM By Stu Sjouwerman

According to the filing, the organization in question failed to devise controls to adequately detect, respond to, and disclose an attack that included data exfiltration and service ...

Security Awareness Training Blog

View Topics