The approach to cybersecurity historically has revolved around self-interest. It’s time to change that to think about the collective, according to Ciaran Martin, founder of the U.K.’s National Cyber Security Centre. “We’re all interested in cybersecurity because we’re professionals, but … Read More
Monthly Archives: October 2022
#ISC2CONGRESS: Congress Speaker: Effective Cybersecurity Takes Collaboration
#ISC2Congress 2022: Approach Cybersecurity as a Science
In a thought-provoking presentation during Security Congress, Walmart’s chief security architect challenged cybersecurity professionals to take a more scientific approach to their work. Ira Winkler urged organizations to implement comprehensive behavioral cybersecurity programs that use statistical analysis to understand human … Read More
Could 100% of Phishing Be Eliminated One Day?
Occasionally you will hear people or organizations claiming that they are on the verge of eliminating all social engineering from reaching end-users. Could it be true? Could it happen one day? Could some product or service be created that prevented … Read More
#ISC2CONGRESS 2022: Lessons from a Ransomware Attack
When an organization suffers a ransomware attack, how well they can respond comes down to preparedness. An up-to-date, comprehensive incident response plan (IRP) can make a big difference, said Joseph Carson, Chief Security Scientist and Advisory CISO at Delinea. Joseph … Read More
#ISC2Congress 2022: Empowering the Cyber Community
(ISC)² CEO Clar Rosso opened Security Congress in Las Vegas today by revealing this year’s event theme – EMPOWER. “Security Congress is about (ISC)² helping to empower you to strengthen your efforts against the bad guys, helping you to more effectively … Read More
[Heads Up] Almost 19 percent of phishing emails bypass Microsoft Defender
Check Point Software is one of the world’s best-known and largest infosec companies. In September 2021 they acquired email security company Avanan and recently they updated Check Point’s initial 2020 research about the email security effectiveness of Microsoft 365 and … Read More
[Head Scratcher] The cyber insurance market is badly broken. But why exactly?
Greg Noone at the Techmonitor site covered this problem early October 2022, starting with a horror story.
October is #CybersecurityAwarenessMonth
The month of October is widely acknowledged as Cybersecurity Awareness Month and an opportunity for the global community to join together in the mission of educating those outside of the profession with daily practices that can be implemented so that … Read More
Hiring Inexperienced Cybersecurity Practitioners: What’s Not to Like?
Managers who hire entry- and junior-level cybersecurity practitioners may do so to free up senior staff for more advanced work. But what they often find is that new hires contribute more than expected. Those new to cybersecurity bring fresh perspectives and … Read More
Proposed Amendments to (ISC)² Bylaws – Member Vote Opens Soon
One of the many things that makes the (ISC)² community special is we have members who seek out challenges and we see that demonstrated by our (ISC)² Board of Directors. The board, elected by members, is made up of all … Read More
Latest Cyberthreats and Advisories – October 7, 2022
U.S. government cyber alerts, updates on major data breaches and U.K. privacy crime…. Here are the latest threats and advisories for the week of October 7, 2022. Threat Advisories and Alerts Voters Should Remain Vigilant of Cyber-tampering Ahead of U.S. … Read More
KnowBe4 Celebrates Winning a Tech Cares Award From TrustRadius 2022
For the third consecutive year, we received a Tech Cares Award from TrustRadius! This third annual award celebrates companies that have gone above and beyond to provide strong Corporate Social Responsibility (CSR).
Cybercriminal Faces Prison Time Over Romance Scams and Business Email Compromise Attacks
A man from Atlanta, Georgia has been convicted of running romance scams and business email compromise attacks that netted him over $9.5 million, the US Justice Department has announced.
IRS Warns of A Spike in Smishing Attacks
The US Internal Revenue Service (IRS) has issued an alert warning of a significant rise in text message phishing scams (smishing) impersonating the IRS since the beginning of the year.
Phishing Do’s & Don’ts
Here are some do’s and don’ts for your phishing simulation exercises.
KnowBe4 Named a Leader in the Fall 2022 G2 Grid Report for Security Orchestration, Automation, and Response (SOAR)
We are excited to announce that KnowBe4 has been named a leader in the Fall 2022 G2 Grid Report for Security Orchestration, Automation, and Response (SOAR) for the PhishER platform for the sixth consecutive quarter!
KnowBe4 Named a Leader in the Fall 2022 G2 Grid Report for Security Awareness Training
We are thrilled to announce that KnowBe4 has been named a leader in the latest G2 Grid Report that compares Security Awareness Training (SAT) vendors based on user reviews, customer satisfaction, popularity and market presence.
FCC Warns of Post-Hurricane Scams
The US Federal Communications Commission (FCC) offers advice on how to avoid falling for scams that follow in the wake of natural disasters like Hurricane Ian. Scammers target victims of disasters as well as people trying to donate to charities.