Threat actors launched 156,000 business email compromise (BEC) attempts per day between April 2022 and April 2023, according to Microsoft’s latest Digital Defense Report. While most of these attempts go unanswered, criminals can receive massive payouts when they succeed.
Monthly Archives: October 2023
New Cyber Attack Techniques Will Not Replace Old-School Social Engineering
Even though there are new attack types for cybercriminals, they are still leveraging old-school attack vectors. Why? Because they still work.
Harvested Credentials Are Put Up for Sale Monthly on the Dark Web at a Rate of 10,000 a Month
Credential harvesting has become a business in and of itself within the cybercrime economy. New insight from Microsoft details the types of attacks your organization should watch out for.
“Human-Operated” Ransomware Attacks Double in the Last Year
As attackers leave little-to-no traces of their attack patterns, more ransomware groups are shifting from automated attacks to manual attacks.
KnowBe4 Named a Leader in the Fall 2023 G2 Grid Report for Security Awareness Training
We are thrilled to announce that KnowBe4 has been named a leader in the latest G2 Grid Report that compares security awareness training (SAT) vendors based on user reviews, customer satisfaction, popularity and market presence.
[DISINFORMATION ALERT] Israel-Hamas war causes deluge of dis- and misinformation
Social media, and it seems particularly X (former Twitter) seems to drown in an almost instant deluge of disinformation caused by the horrendous Israel-Hamas war that broke out last weekend. Unfortunately this is going to be used for social engineering … Read More
[Cybersecurity Awareness Month] Password Security: Do Not Get Bit by Count Hackula
Our login credentials of a username and password are sometimes all that stands between our personal identifiable information and cybercriminals. Count Hackula could be waiting in the shadows to bite on your weak or reused password. Cybersecurity Awareness Month is … Read More
Smishing Triad Threat Actor Sets Its Sights on the UAE
Resecurity warns that the Smishing Triad threat actor has “vastly expanded its attack footprint” in the United Arab Emirates (UAE).
74% of CEOs Concerned About Their Organization’s Ability to Protect Against Cyber Attacks, Despite Seeing Cybersecurity as Critical
According to the recent The Cyber-Resilient CEO report released by IT services and consulting agency Accenture, a staggering 74% of CEOs have expressed concerns about their organizations’ ability to protect their businesses from cyber attacks. This is despite the fact … Read More
CyberheistNews Vol 13 #41 [Risky New Data] More Than Half of Phishing Scams Now Use Obfuscation
Register for KB4-CON EMEA 2023 Now!
Exciting news, registration for KB4-CON EMEA 2023 is open!
Energy Sector Experiences Three Times More Operational Technology Cybersecurity Incidents Than Any Other Industry
While industries like financial services and healthcare tend to dominate in IT attacks, the tables are turned when looking at Operational Technology (OT) cyber attacks – and the energy sector is the clear “winner.”
Healthcare Industry Witnesses 279% Increase in Business Email Compromise Attacks in 2023
The massive uptick in business email compromise (BEC) is considered one of the costliest attack types, requiring organizations to put employees on notice to stay vigilant.
One Out of Five Organizations Must Improve Their Security Posture to be Eligible for Cyber Insurance
As insurers become more educated on what a “secure organization” looks like, they are tightening their requirements that puts the onus on organizations to be more secure.
Ransomware Attack Dwell Time Drops by 77% to Under 24 Hours
As attackers evolve their toolsets and processes, the significant drop in dwell time signifies a much higher risk to organizations that now have less time to detect and respond to initial attacks.
Stay a Step Ahead of your #1 Downtime Threat – Business Email Compromise
A new report from Secureworks has found that business email compromise (BEC) remains “one of the most financially damaging online crimes overall for orgs” in 2023. The security firm’s 2023 State of the Threat report says BEC “exceeds even ransomware … Read More
The Role of AI in Email Security and How Real-Time Threat Intelligence Can Supercharge Your SOC Team
In response to improved email security measures, cybercriminals have pivoted to more advanced attack methods, namely artificial intelligence (AI), that bypass existing protections. But security defenders are also using AI in remarkable new ways to fortify their networks.
Clorox Experiences Significant Financial Loss Stemming From Recent Cyber Attack
American global manufacturer of cleaning products Clorox stated that recent sales and profit loss to a cyber attack.
New Gartner Forecast Shows Global Security and Risk Management Spending to Increase by 14% in 2024
Gartner issued a press release that forecasted global security and risk management end-user spending to reach $188.1 billion, along with worldwide end-user spending on security and risk management projected to be $215 billion in 2024.
[New Report] Over Half of Phishing Emails Use Obfuscation
A new report shows staggering phishing trends using obfuscation techniques that should make any organization feel worried.