[Heads Up] Reinforce Your Defenses Against Rising Supply-Chain Cyber Threats

Mar 20, 2024 10:57:05 AM By Stu Sjouwerman

James Rundle at The Wall Street Journal today reported that in response to escalating supply-chain cyberattacks, companies are intensifying their scrutiny over suppliers to protect ...

State-Sponsored Russian Phishing Campaigns Target a Variety of Industries

Mar 19, 2024 1:18:02 PM By Stu Sjouwerman

Researchers at IBM X-Force are monitoring several ongoing phishing campaigns by the Russian state-sponsored threat actor ITG05 (also known as “APT28” or “Fancy Bear”). APT28 has been tied ...

CISA: Healthcare Organizations Should Be Wary of Increased Ransomware Attacks by ALPHV Blackcat

Mar 18, 2024 10:14:00 AM By Stu Sjouwerman

A joint cybersecurity advisory published last week discusses ransomware attack impacts on healthcare, along with ALPHV’s attack techniques, indicators of compromise (IoCs) and proper ...

If Social Engineering Accounts for up to 90% of Attacks, Why Is It Ignored?

Mar 15, 2024 10:32:57 AM By Roger Grimes

Social engineering and phishing are involved in 70% to 90% of all successful cybersecurity attacks. No other initial root hacking cause comes close.

Organizations Are Vulnerable to Image-based and QR Code Phishing

Mar 14, 2024 10:23:31 AM By Stu Sjouwerman

A majority of organizations have a false sense of security regarding their resistance to phishing attacks, according to a new report from researchers at IRONSCALES and Osterman Research.

Despite Feeling Prepared for Image-Based Attacks, Most Organizations Have Been Compromised by Them

Mar 14, 2024 10:20:00 AM By Stu Sjouwerman

With QR-code phishing attacks on the rise, new data sheds light on just how unprepared organizations actually are in stopping and detecting these device-shifting attacks.

New Research: BEC Attacks Rose 246% in 2023

Mar 14, 2024 10:18:23 AM By Stu Sjouwerman

Business email compromise (BEC) attacks surged by 246% last year, according to researchers at ReliaQuest.The researchers believe the increase is due to widely available phishing kits that ...

Compromised Credentials Postings on the Dark Web Increase 20% in Just One Year

Mar 13, 2024 9:31:15 AM By Stu Sjouwerman

Data trends show a clear upward momentum of posts from initial access brokers on the dark web, putting the spotlight on what may become cybersecurity’s greatest challenge.

Dodging Digital Deception: How to Spot Fake Recruiters and Shield Your Career Search from Phishing Scams

Mar 12, 2024 9:28:58 AM By Stu Sjouwerman

Scammers are impersonating job-seeking platform Dice with phony employment opportunities designed to steal victims’ information.

How Much Will AI Help Cybercriminals?

Mar 12, 2024 9:27:29 AM By Roger Grimes

Do not forget, AI-enabled technologies, like KnowBe4’s Artificial Intelligence Defense Agents (AIDA), will make defenses increasingly better.

Generative AI Results In 1760% Increase in BEC Attacks

Mar 12, 2024 9:24:38 AM By Stu Sjouwerman

As cybercriminals leverage tools like generative AI, making attacks easier to execute and with a higher degree of success, phishing attacks continues to increase in frequency.

Three Essential Truths Every CISO Should Know To Guide Their Career

Mar 11, 2024 9:11:56 AM By Roger Grimes

According to my research, it became clear that if CISO's focused on these three items, it would take care of 99% of the vulnerabilities.

European Diplomats Targeted With Phony Invitations to a Wine-Tasting Party

Mar 7, 2024 3:21:56 PM By Stu Sjouwerman

Researchers at Zscaler observed a cyberespionage campaign that targeted European diplomats with malicious PDFs disguised as invitations to a wine-tasting party hosted by the Ambassador of ...

Chicago Man Sentenced to Eight Years in Prison for Phishing Scheme

Mar 6, 2024 2:24:11 PM By Stu Sjouwerman

A 30-year-old man from Chicago, Joseph Alexander Valdez, has been sentenced to eight years in prison for conducting a Snapchat phishing scheme that victimized more than 700 women, CBS ...

Game-Changer: Biometric-Stealing Malware

Feb 28, 2024 2:25:55 PM By Roger Grimes

I have been working in cybersecurity for a long time, since 1987, over 35 years. And, surprisingly to many readers/observers, I often say I have not seen anything new in the ...

Credential Theft Is Mostly Due To Phishing

Feb 28, 2024 12:21:10 PM By Roger Grimes

According to IBM X-Force’s latest Threat Intelligence Index, 30% of all cyber incidents in 2023 involved abuse of valid credentials. X-Force’s report stated that abuse of valid ...

[SCARY] You knew about OSINT, but did you know about ADINT?

Feb 27, 2024 10:27:09 AM By Stu Sjouwerman

WIRED just published a scary (long) article. I am summarizing it here and highly recommend you read the whole thing.

Face off: New Banking Trojan steals biometrics to access victims’ bank accounts

Feb 23, 2024 10:11:50 AM By Stu Sjouwerman

Venturebeat had the scoop on a fresh Group-IB report. They discovered the first banking trojan that steals people’s faces. Unsuspecting users are tricked into giving up personal IDs and ...

Nearly One in Three Cyber Attacks In 2023 Involved The Abuse of Valid Accounts

Feb 23, 2024 9:02:47 AM By Stu Sjouwerman

Thirty percent of all cyber incidents in 2023 involved abuse of valid credentials, according to IBM X-Force’s latest Threat Intelligence Index. This represents a seventy-one percent ...

[INFOGRAPHIC] KnowBe4’s Learner App by the Numbers

Feb 21, 2024 8:00:00 AM By Stu Sjouwerman

The KnowBe4 Learner App enables your users to complete their security awareness and compliance training conveniently from their smartphones and tablets.

Security Awareness Training Blog

Social Engineering Blog

View Topics