Lenny Zeltser

JULY 1, 2020

Writing about cybersecurity threats, such as phishing campaigns, malware infections, and attack groups, is challenging for many reasons. I’m happy to share what I’ve learned over the years about writing effective threat reports in the following 36-minute video. How should you decide what details to include?

Phishing 145

Phishing Cybersecurity IT Information Security 145

IT Governance

SEPTEMBER 11, 2019

We’re back for another round-up of phishing scams that caught our eye over the past month. This series provides real-life examples of phishing emails, helping you understand how they work and what you should do to avoid falling victim. You can check out last month’s list if you missed it. Utility providers targeted with spyware.

Phishing 83

Phishing Retail Cloud Data breaches 83

IT Governance

JUNE 8, 2020

Indeed, organisations are equally at risk of phishing scams, credential-stuffing attacks or other incidents in which human error plays a major role. A cyber security training course will increase your IT team’s awareness of your organisation’s wider defence mechanisms. Book this training course today to get 25% off.

IT 96

IT Security Phishing Passwords 96

The Last Watchdog

JULY 26, 2021

Over the long term, VMCs, and the underlying Brand Indicators for Message Identification (BIMI) standards, could very well give rise to a bulwark against email spoofing and phishing. It was thought that wide implementation of the DMARC standard would help dramatically reduce BECs and the rising Tsunami of phishing attacks.

Cybersecurity 240

Cybersecurity Marketing Phishing Authentication 240

Krebs on Security

OCTOBER 2, 2023

Many organizations — including quite a few Fortune 500 firms — have exposed web links that allow anyone to initiate a Zoom video conference meeting as a valid employee. j/5551112222/pwd=jdjsklskldklsdksdklsdkll Using your PMI to set up new meetings is convenient, but of course convenience often comes at the expense of security.

Encryption 233

Encryption Phishing Passwords Access 233

eSecurity Planet

DECEMBER 15, 2022

Phishing accounts for nearly 90% of malware attacks, according to HP Wolf Security research. “The technology will enable attackers to efficiently combine the volume of generic phishing with the high yield of spear phishing,” said Robert Blumofe, who is the CTO and EVP at Akamai Technologies. ChatGPT Security Threats.

Cybersecurity 135

Cybersecurity Phishing Data science Blockchain 135

IT Governance

JULY 5, 2018

The vast majority of malware is spread by drive-by downloads and phishing campaigns, both of which exploit human error. A programme of staff awareness interventions, from regular e-learning courses to awareness posters, is an excellent way of ensuring your employees understand their responsibilities and can act appropriately.

Phishing 64

Phishing Education Government Security 64

IT Governance

FEBRUARY 7, 2024

He also delivers ISO 27001 training courses. Damian recently updated our Ransomware Staff Awareness E-learning Course – a 30-minute, non-technical course that’s suitable for all staff. Why is this elearning course so important? What are the key topics covered in this staff awareness course?

Ransomware 52

Ransomware Artificial Intelligence Phishing Risk 52

IT Governance

MAY 14, 2020

This includes threats such as phishing , with cyber criminals demonstrating their ability to adapt scams to the current climate. Organisations must also be wary of vulnerabilities in third-party video conferencing tools, such as Zoom , which will still be in widespread use if large numbers of employees continue to operate remotely.

Risk 130

Risk Phishing Authentication Security 130

IT Governance

APRIL 29, 2020

You can’t argue with that if you think our health should be our top priority, but keeping the status quo will of course continue to affect our jobs, our organisational security and our wellbeing. Phishing scams. Do you know someone who, in every video call they’re in, appears heavily pixelated and constantly lagging?

Security 84

Security Phishing Communications Government 84

Security Affairs

APRIL 15, 2022

While there are numerous approaches to promoting a more cyber secure workplace, here are the most common and effective ways: Trick Employees via a Phishing Campaign. You can test your employees’ ability to distinguish authentic email content from fraudulent attachments by mass spear-phishing them. Introduce Data Privacy Laws.

Cybersecurity 78

Cybersecurity Data Privacy Data breaches Privacy 78

Troy Hunt

OCTOBER 28, 2020

But let's also keep some perspective here; look at how many pixels are different between an "i" and an "l": Are we really saying we're going to combat phishing by relying on untrained eyes to spot 6 pixels being off in a screen of more than 2 million of them?! Poor Googie! More on that soon.

Phishing 145

Phishing Passwords Education IT 145

IT Governance

APRIL 9, 2020

Until three weeks ago, you had probably never heard of the video conferencing software Zoom. For example, The Intercept reported that video calls are not end-to-end encrypted, despite the company’s claims that they are. And do they understand the dangers of phishing scams ? So, which side of the divide should you be on?

Passwords 137

Passwords Privacy Security Government 137

IT Governance

MAY 20, 2020

It’s no surprise that phishing emails have been on the rise since the lockdown began, but a new report has found that the problem is just as bad – if not worse – for organisations directly involved in the coronavirus response. Phishing scams. Cyber crime. Britons have been scammed out of £3.5

Security 118

Security Phishing Insurance Risk 118

The Last Watchdog

APRIL 28, 2020

That, of course, presents the perfect environment for cybercrime that pivots off social engineering. Sadly, coronavirus phishing and ransomware hacks already are in high gear. I agree wholeheartedly with Levin on this, as I imagine most folks would. Businesses are being heavily targeted, as well.

Ransomware 131

Ransomware Phishing Communications Access 131

KnowBe4

APRIL 4, 2023

Security solutions will help stop most attacks, but for those that make it past scanners, your users need to play a role in spotting and stopping BEC, VEC and phishing attacks themselves – something taught through security awareness training combined with frequent simulated phishing and other social engineering tests.

Phishing 76

Phishing Security awareness Cybersecurity Education 76

KnowBe4

DECEMBER 6, 2022

Roger covers these three scams in a short [VIDEO] and in detail on the KnowBe4 blog: You Need to Pay a Bill Using Gift Cards. Phish You for Information to Supposedly Get a Gift Card. Blog post with 2:13 [VIDEO] and links you can share with your users and family: [link]. Maliciously Modified Gift Cards in Stores. Did You Know?

Security awareness 82

Security awareness Phishing Risk Insurance 82

Troy Hunt

JULY 12, 2018

So that's precisely what I've done - intercepted my own traffic passed over an insecure connection and put together a string of demos in a 24-minute video explaining why HTTPS is necessary on a static website. Here's the video and there's references and code samples for all the demos used immediately after that: HTTPS Is Easy.

Risk 110

Risk Phishing Encryption IT 110

Adam Levin

NOVEMBER 25, 2020

The Covid-19 pandemic has meant increased virtual visits with loved ones, and of course remote work. Additionally, the political season gave rise to phishing campaigns, a phenomenon that is likely to continue through the end of the year. Be careful with emails containing invitations.

Cybersecurity 76

Cybersecurity Retail Phishing Sales 76

Troy Hunt

NOVEMBER 14, 2023

How I got to this resource is also interesting, having come by someone I was discussing the data with a couple of years ago: The YouTube video is a walkthrough of a campaign management tool to send emails to customers. So how many "Acuity" companies are out there in total?!

Insurance 122

Insurance Data breaches Mining IT 122

Troy Hunt

JULY 13, 2018

I published Pwned Passwords V3 (which, of course, includes all the Pemiblanc passwords so hopefully that helps people who found themselves in that data set). Your static website needs HTTPS (I kinda love this video, it was fun and the feedback has been sensational ).

Passwords 46

Passwords Military Data breaches Phishing 46

eSecurity Planet

JULY 20, 2023

Mitnick often represented the company at conferences and discussed his experience in KnowBe4 training videos. He helped design KnowBe4’s training based on his social engineering tactics, and he became a partial owner of KnowBe4 in November 2011.

Cybersecurity 90

Cybersecurity Education Military Government 90

The Last Watchdog

MARCH 29, 2019

Threat actors, of course, responded by engaging AV vendors in what has turned out to be a decades-long contest of one-upmanship. Gupta: We’ve really pushed the frontiers of AI in the last decade in things like video, scene-understanding, natural language processing and even driverless cars. At its core, AV still does that today.

Artificial Intelligence 101

Artificial Intelligence Cybersecurity Phishing Security 101

IT Governance

JANUARY 13, 2022

Welcome to the first review of phishing attacks for 2022, in which we explore the latest scams and the tactics that cyber criminals use to trick people into handing over their personal information. People spend money – often tens of thousands of pounds – to own a digital file, such as a photo or video. NFT trader scammed out of £1.5

Phishing 110

Phishing Passwords Privacy Access 110

eSecurity Planet

OCTOBER 31, 2023

Capture the technical details: Include notes, screenshots, and log files in the report, but to make documentation less disruptive, take video and narrate while conducting the pentest and take screenshots later. Of course, with hundreds of reports, it can be overwhelming to figure out where to start.

Compliance 84

Compliance Risk Computer and Electronics Cybersecurity 84

Troy Hunt

SEPTEMBER 17, 2020

As I started delving back through my own writing over the years, the picture became much clearer and it really crystallised just this week after I inadvertently landed on a nasty phishing site. In the end I broke it down into 3 Ps: padlocks, phishing and privacy. Here's the value proposition of a VPN in the modern era: 1.

Privacy 143

Privacy Phishing Encryption Security 143

Troy Hunt

SEPTEMBER 9, 2021

What happens if someone obtains, say, my fingerprint just like they may obtain my password in a data breach or a phishing attack? Assuming we're attempting to compare them both as means of uniquely identifying an individual, of course. Very simple - data breaches, phishing, shoulder-surfing and in many cases, simply guessing.

Authentication 134

Authentication Passwords Data breaches Phishing 134

Schneier on Security

JANUARY 5, 2018

The security of pretty much every computer on the planet has just gotten a lot worse, and the only real solution -- which of course is not a solution -- is to throw them all away and buy new ones. We're already seeing this with home routers, digital video recorders, and webcams.

Cloud 77

Cloud Phishing Paper Security 77

Troy Hunt

MAY 7, 2018

And let's be fair to Barclays - it's not just them offering outdated and inaccurate advice about the true meaning of the padlock: Taking a mandatory Cyber Awareness Course. Last year, I wrote a long piece on certs and phishing which I'll come back to and talk about more a little later on. But the option does not exist.

Phishing 46

Phishing Security Encryption Education 46

The Last Watchdog

NOVEMBER 13, 2018

Cybersecurity vendors, of course, have been responding. These baseline account takeovers can then be leveraged to spread spam, distribute phishing scams, launch denial of service attacks, infiltrate and plunder networks, execute wire fraud and more.

Security 104

Security Digital transformation B2C B2B 104

IT Governance

DECEMBER 30, 2019

Among other news: The ICO began an investigation into how the TikTok video-sharing app handles children’s personal data. BEC attacks begin with a spear phishing attack sent to someone in the organisation who handles payments. This follows on from the US FTC (Federal Trade Commission) issuing TikTok a $5.7 million (£4.2

Data breaches 78

Data breaches Personal data GDPR Ransomware 78

IT Governance

SEPTEMBER 7, 2021

Welcome to September’s review of phishing scams, in which we look at criminals’ latest tactics and provide examples of successful frauds. This month, we review a pair of phishing campaigns centred on sex-related offences. Our Simulated Phishing Attack service sends your employees a mock phishing email without the malicious payload.

Phishing 138

Phishing Passwords Access Government 138

Adam Levin

OCTOBER 21, 2019

Maintaining workplace safety can seem like a rare form of torture–videos and quizzes and talks and such. Of course, it also involves the establishment and policing of an organization’s social and cultural norms. For most of us, it’s a necessary chore. But despite the looks among employees with each new H.R.

IT 43

IT Cybersecurity Data breaches Risk 43

Troy Hunt

JANUARY 19, 2023

Of course there's all the nasty stuff (phishing, identity theft, spam), but there are also some amazingly positive uses for data illegally taken from someone else's system. These can be massively popular and, par for the course of this blog, released in short demand. But don't worry, he has a discount code!

Data breaches 140

Data breaches Risk Sales Phishing 140

KnowBe4

APRIL 25, 2023

Soon, the CEO of security firm Adversa AI had GPT-4 spouting homophobic statements, creating phishing emails, and supporting violence." Blog post with (lots of) links: [link] [Live Demo] Ridiculously Easy Security Awareness Training and Phishing Old-school awareness training does not hack it anymore. Users beware.

Insurance 67

Insurance Security awareness Phishing Ransomware 67

Krebs on Security

DECEMBER 29, 2022

Facing a backlash from lawmakers and the public, the IRS soon reverses course , saying video selfies will be optional and that any biometric data collected will be destroyed after verification. Super Bowl Sunday watchers are treated to no fewer than a half-dozen commercials for cryptocurrency investing.

Passwords 220

Passwords Ransomware Computer and Electronics Encryption 220

KnowBe4

JUNE 27, 2023

Blog post with links: [link] [Live Demo] Ridiculously Easy Security Awareness Training and Phishing Old-school awareness training does not hack it anymore. Join us Wednesday, July 12, @ 2:00 PM (ET) , for a live demonstration of how KnowBe4 introduces a new-school approach to security awareness training and simulated phishing.

Security awareness 80

Security awareness Phishing Ransomware Security 80