Security Awareness Training Blog

Social Engineering Blog

Latest social engineering news, analysis, tactics the bad guys are using and what you can do to defend your organization.

Firm Bankrupted by Cyberheist Sues Bank

Continue Reading

KnowBe4 Grows 427% Year Over Year

Continue Reading

Windows Crash Reports Let NSA Spy On People

Continue Reading

Eastern European Hackers Hit Target Phish Out 40M Credit Cards

During the Black Friday shopping week, tens of millions of credit and debit card records were "phished" out of Target. The data breach was nationwide, and has extended for as far as ...
Continue Reading

Interesting info on phishing and social engineering on 60 minutes

Last weekend, 60-minutes had a special about the NSA which spoke out on Snowden and spying. The headline was: "The NSA gives unprecedented access to the agency's HQ and, for the first ...
Continue Reading

10 Social Engineering Predictions for 2014

Here are 10 predictions for 2014, all cyber attacks using social engineering to penetrate the network. Have fun reading, and I will try to report back in 12 months which ones came out as ...
Continue Reading

Ponemon: Phishing part of 50% of APT's

Continue Reading

Social Engineering Causes Seattle Hospital 90K Databreach

Personal Health Information of 90,000 patients was accesssed by hackers because an employee opened an infected email attachment early October this year. When will they learn that ...
Continue Reading

Your AntiVirus Does Not See NSA's Botnet

The revelations are getting wilder by the week. The NSA has its own botnet, they infected more than 50,000 computer networks worldwide with malicious software designed to steal sensitive ...
Continue Reading

Why you shouldn’t connect to just any free Wi-Fi

Our friends at MalwareBytes put up a great blog post that explains in detail why you should not just connect to any free Wi-Fi. The risk is that you will connect to a hostile Wi-Fi access ...
Continue Reading

Edward Snowden Used Social Engineering To Hack NSA

Ex-NSA contractor Edward Snowden used user names and passwords that colleagues at a spy base in Hawaii gave him to access some of the classified material he exfiltrated. Around 20-25 ...
Continue Reading

A Serious Legal Liability: Bad or No Security Awareness Training

Please read this article and then forward it to the head of your legal department or the person in your organization who is responsible for compliance. Recently, the Department of Health ...
Continue Reading

Spear phishing alert: Hong Kong Monetary Authority Invoice

Experts warn that cybercriminals are using fake Hong Kong Monetary Authority invoices to distribute a piece of malware. The emails are entitled “Invoice #3404196 – Remit File” and they ...
Continue Reading

More Likely to Fall for a Phishing Scam If You’re a Neurotic Woman?

Softpedia published an article I have a problem with. There is so much wrong with this that I don't even know where to start. They started out with:
Continue Reading

Inside The Adobe Databreach Disaster

Last week Adobe announced probably the worst news ever for a tech company. Both their source code and customer lists had been stolen. EPIC FAIL!
Continue Reading

Your Employees' Identity -Has- Been Stolen

There is the expression that there are two kinds of companies. The ones that know they are hacked and the ones that don't. It's safe to assume your network has already been compromised ...
Continue Reading

FBI: “Beta Bot” malware kills your anti-virus and steals data

This week, the FBI sent out a warning that a strain of malware known as "Beta Bot" can turn off your antivirus, stops access to the websites of antivirus vendors so that your antivirus ...
Continue Reading

Is Your Security Awareness Training Program Broken?

Steve Ragan over at CSO Magazine wrote:
Continue Reading

RAPID7 SECURING USER RISK

Rapid7 found 66% of IT professionals conduct user security awareness training to reduce the risk of successful phishing attacks.
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews