Threatpost

JANUARY 14, 2022

Phishing is more successful than ever. Daniel Spicer, CSO of Ivanti, discusses emerging trends in phishing, and using zero-trust security to patch the human vulnerabilities underpinning the spike.

Phishing 109

Phishing CSO Mobile InfoSec 109

Krebs on Security

APRIL 15, 2020

“The group is also using its web of contacts in internet infrastructure providers to squash garden-variety phishing attacks and another financial crime that is using the fear of COVID-19 or the desire for information on it to trick regular internet users,” wrote Reuters’ Joe Menn. ” SURVIVING THE PANDEMIC.

Cybersecurity 342

Cybersecurity Cyber threats Government Phishing 342

Threatpost

NOVEMBER 19, 2020

Watch out for these top phishing approaches this holiday season.

Phishing 122

Phishing InfoSec 122

SecureWorld News

FEBRUARY 25, 2022

Proofpoint has announced its 2022 State of the Phish report, which is the latest in-depth look at end-user awareness, vulnerability, and resilience. The eighth annual study features an analysis of global survey responses, simulated phishing exercises, and real-world attacks.

Phishing 98

Phishing Risk Security Awareness Social Engineering 98

Security Boulevard

MARCH 9, 2021

When it comes to email communications today, phishing and spam are both unwelcome nuisances in everyone's inbox. Even though the words “phishing” and “spam” are often used [.]. The post Phishing, Scam, & Marketing Emails: What’s the Difference? The post Phishing, Scam, & Marketing Emails: What’s the Difference?

Marketing 111

Marketing Scams Phishing InfoSec 111

Security Boulevard

JANUARY 3, 2025

What is consent phishing? Most people are familiar with the two most common types of phishingcredential phishing and phishing payloads, where attackers trick users into revealing credentials and downloading malicious software respectively. However, there is a third type of phishing on the rise: consent phishing.

Phishing 83

Phishing Authentication Accountability Threat Detection 83

SecureWorld News

FEBRUARY 15, 2021

The State of the Phish is the industry benchmark report around the world's leading cyberattack vector. We want to understand that average person, and the average InfoSec professional and what they are experiencing," says Gretel Egan Sr. "We Security Awareness Finding #2: what phishing attacks lead to. And we have 53% of U.S.

Phishing 95

Phishing Security Awareness Ransomware InfoSec 95

Digital Guardian

APRIL 9, 2021

New phishing schemes, a debate over rhetoric in cybersecurity, and the new Global Trends Report - catch up on all of the week's infosec news with the Friday Five!

InfoSec 108

InfoSec Phishing Cybersecurity 108

Digital Guardian

JANUARY 22, 2021

Copycats, searchable phishing campaigns, and cybersecurity policy in the new administration - catch up on all of the week's infosec news with the Friday Five!

InfoSec 105

InfoSec Phishing Cybersecurity 105

Security Boulevard

JUNE 18, 2021

Phishing attacks continue to plague organizations across the globe with great success, but why? The post The Business Value of the Social-Engineer Phishing Service appeared first on Security Boulevard. Cybercriminals are targeting the human element of organizations. Additionally, they are developing techniques to use an.

Social Engineering 102

Social Engineering Engineering Phishing Penetration Testing 102

Digital Guardian

JULY 16, 2021

chipmaking, and the disruption of a phishing ring - catch up on all of the week's infosec news with the Friday Five! iOS zero days, the state of U.S.

InfoSec 105

InfoSec Phishing 105

Security Boulevard

NOVEMBER 5, 2023

Next, we discuss the emerging threat of “quishing,” a combination of voice calls and phishing that preys on unsuspecting victims. The post Okta Hacked Again, Quishing Is The New Phishing, Google Play Protect Real-Time Scanning appeared first on Security Boulevard.

Phishing 109

Phishing Hacking Data privacy Data breaches 109

Threatpost

NOVEMBER 18, 2021

Phishing emails are now skating past traditional defenses. Justin Jett, director of audit and compliance at Plixer, discusses what to do about it.

Phishing 101

Phishing InfoSec Malware 101

Digital Guardian

NOVEMBER 12, 2021

Apple fixes a macOS zero day, Microsoft warns of HTML smuggling phishing attacks, and more - catch up on the infosec news of the week with the Friday Five!

InfoSec 96

InfoSec Phishing 96

Security Boulevard

FEBRUARY 11, 2022

The post BSides Perth 2021 – Andre de Moeller Samarin & ‘There Are Plenty Of Phish In The Sea’ appeared first on Security Boulevard. Many thanks to BSides Perth for publishing their tremendous videos from the BSides Perth 2021 Conference on the organization’s YouTube channel.

Phishing 119

Phishing Education InfoSec Information Security 119

Security Affairs

APRIL 2, 2019

InfoSec Knowledge is Power. GARY BERMAN AND HIS TEAM BELIEVE THAT INFOSEC KNOWLEDGE IS POWERFUL – TAKE YOUR AVERAGE EMPLOYEE AND MAKE THEM A CYBER HERO – YOU WILL EMPOWERED THEM AGAINST THE LATEST SPEAR PHISHING ATTACKS AND RANSOMWARE, IN A FUN EDUCATIONAL WAY. Cyber Defense eMagazine April 2019 Edition has arrived.

InfoSec 105

InfoSec Advertising Education Media 105

Threatpost

SEPTEMBER 21, 2021

Nick Kael, CTO at Ericom, discusses how phishing is gaining sophistication and what it means for businesses.

Phishing 105

Phishing InfoSec Malware 105

Security Boulevard

MARCH 27, 2022

The LAPSUS$ hacking group has claimed to have hacked both Microsoft and Okta, details about a novel phishing technique called a browser-in-the-browser (BitB) attack, and how a popular software package that has 1.1

Phishing 98

Phishing Software Hacking Social Engineering 98

Spinone

SEPTEMBER 8, 2020

Phishing attacks are one of the main cyber threats involving mistakes by workers. Arranging training for your employees is a great way to protect your company against phishing and its expensive and time-consuming consequences. So, let’s take a look at notable phishing awareness training providers.

Phishing 52

Phishing InfoSec Social Engineering Backups 52

SC Magazine

MAY 4, 2021

Infosec’s Choose Your Own Adventure training game “Deep Space Danger” tests employees on their knowledge of social engineering. “B” is obviously the correct choice, but not all companies succeed in motivating their workers to learn the ins and outs of phishing, social engineering and other cyber threats. .

Security Awareness 111

Security Awareness InfoSec Social Engineering Engineering 111

SC Magazine

APRIL 12, 2021

James McQuiggan, security awareness advocate at KnowBe4, said organizations should hold repetitive simulated phishing assessments and additional training throughout the year, in addition to computer-based training.

Cybersecurity 137

Cybersecurity InfoSec Phishing Security Awareness 137

Security Boulevard

APRIL 28, 2024

In episode 327 Tom, Scott, and Kevin discuss the findings from Mandiant’s M-Trends 2024 report, highlighting a significant rise in traditional vulnerability exploitation by attackers while observing a decline in phishing. Despite phishing’s decreased prevalence, it remains the second most popular method for gaining initial network access.

Phishing 72

Phishing Data privacy Passwords Security Awareness 72

Security Boulevard

AUGUST 21, 2021

The post DEF CON 29 Main Stage – Jenko Hwong’s ‘New Phishing Attacks Exploiting OAuth Authentication Flows’ appeared first on Security Boulevard. Our thanks to DEFCON for publishing their outstanding DEFCON Conference Main Stage Videos on the groups' YouTube channel.

Authentication 98

Authentication Phishing Education InfoSec 98

CyberSecurity Insiders

MAY 22, 2021

NEW YORK–( BUSINESS WIRE )– Veridium , a leading developer of frictionless, passwordless authentication solutions, is proud to announce that it’s won the 2021 Global InfoSec Award in the category of Next-Gen in Passwordless Authentication. “We Veridium is the industry’s only end-to-end passwordless platform provider.

InfoSec 52

InfoSec B2C B2B Authentication 52

Threatpost

OCTOBER 29, 2018

Sophisticated nation-state groups now integrate phishing as a core component of their statecraft.

Phishing 71

Phishing InfoSec Government Hacking 71

Threatpost

SEPTEMBER 4, 2020

Cybercriminals can use social media in many ways in order to trick employees.

Media 109

Media Phishing Authentication InfoSec 109

SC Magazine

FEBRUARY 18, 2021

A graph representing the NIST Phish Scale scoring methodology. Introduced in September 2020, the NIST Phish Scale scores phishing emails based on certain key properties to determine their level of sophistication and deceptiveness. their organization faces.”.

Phishing 114

Phishing Mobile Security Awareness Media 114

Security Affairs

JANUARY 28, 2021

AddressIntel is actively tracking malicious #phishing #malware address [link] #Italy since 2021-01-25 #cybersecurity #infosec Follow trends and statistics on [link] — AddressIntel (@AddressIntel) January 25, 2021. ” read the advisory published by Italy’s CERT-AGID (Italian language).

Malware 131

Malware Phishing InfoSec Cryptocurrency 131

Security Boulevard

SEPTEMBER 10, 2023

energy organization fell victim to a QR code phishing attack, highlighting the ever-evolving tactics used by attackers. Finally, we […] The post The FBI’s Qakbot Takedown, QR Code Phishing Attacks, Dox Anyone in America for $15 appeared first on Shared Security Podcast. Next, we explore how a major U.S.

Phishing 75

Phishing Cryptocurrency Ransomware Social Engineering 75

Herjavec Group

MAY 17, 2021

HG Phishing HG Vulnerability Management . About CDM InfoSec Awards . This is Cyber Defense Magazine’s ninth year of honoring global InfoSec innovators. Join a webinar at [link] and realize that infosec knowledge is power. . HG Mana ged Detection & Response (MDR) . HG Security Engineering . HG Threat .

InfoSec 52

InfoSec Technology Marketing B2C 52

Daniel Miessler

SEPTEMBER 29, 2020

Since 2007 the InfoSec industry has been talking about TheBigOne™—the event that would change cyber threats from annoyances to existential concerns. Once they get in— via RDP or Phishing or Drive-bys —they are not only extorting people who want to get their data back. They called it Cyber Pearl Harbor.

Ransomware 246

Ransomware Government Social Engineering Small Business 246

Digital Guardian

FEBRUARY 16, 2024

Law enforcement notched another win in the fight against cybercrime this past week, but state hackers, phishing campaigns, and AI are keeping organizations on their toes. Catch up on the latest InfoSec news in this week's Friday Five!

InfoSec 72

InfoSec Cybercrime Phishing 72

SecureWorld News

MARCH 17, 2022

These attackers will use a variety of lures to pull people in, but a lot of the phishing has been centered around updating the VPN for a client or employee, or redirecting users to phishing sites that look a lot like their collaborative platform login page. And you know, that can cause a potential loss for that organization.".

InfoSec 97

InfoSec Social Engineering Phishing Cybercrime 97

Security Affairs

AUGUST 10, 2022

Once obtained the credentials, the attackers launched voice phishing attacks in an attempt to trick the victim into accepting the MFA push notification started by the attacker. cybersecurity #infosec #ransomware pic.twitter.com/kwrfjbwbkT — CyberKnow (@Cyberknow20) August 10, 2022.

Ransomware 135

Ransomware Hacking VPN Phishing 135

Security Boulevard

JANUARY 11, 2022

The post BSides Berlin 2021 – Sourya Biswas’ ‘Psychology Of The Phish: Leveraging the 7 Principles of Influence’ appeared first on Security Boulevard. Our thanks to BSides Berlin for publishing their tremendous videos from the BSides Berlin 2021 Conference on the organization’s’ YouTube channel.

Phishing 85

Phishing Education InfoSec Information Security 85

Daniel Miessler

MAY 19, 2020

Verizon’s Breach Report is one of the best infosec reports out there, and I’m always excited when I hear it’s been released. 22% involved phishing. Phishing is usually going after credentials, but stealing money is continues to rise in popularity. The top 2 incident threat actions were DoS, and Phishing.

Data breaches 130

Data breaches Phishing Malware Hacking 130

SC Magazine

FEBRUARY 26, 2021

Phishing warning seen on Google Chrome when visiting a website that has been recognized as phishing website. The goal was to see if they could quantify the correlation between implementing a strong security culture and the reduction of unwanted phishing behaviors such as link clicking and credential sharing.

CISO 88

CISO Security Awareness Phishing InfoSec 88