Jane Frankland

JUNE 24, 2025

The UK Government’s refreshed Cyber Governance Code of Practice sets a clear direction with guidance, and is holding boards accountable for human cyber risk. I’m approaching this from my role with OutThink , the Cybersecurity Human Risk Management platform I proudly represent as an advisor and brand ambassador.

Cyber Risk

Trend Micro

JULY 2, 2025

Move faster than your adversaries with powerful purpose-built XDR, cyber risk exposure management, and zero trust capabilities Learn more Extend Your Team Extend Your Team. Respond Faster. Respond Faster. 6 Alerts Back Unread All Inside the criminal mind: Trend’s deep dive into cybercrime.

Cyber Risk

SecureWorld News

FEBRUARY 14, 2025

Avoid phishing emails and messages You may receive emails or texts with fake Valentine's Day deals, electronic greeting cards (e-cards), or delivery notifications. Charity phishing often involves a personal plea for help from an individual, but it can be more sophisticated.

Scams

Jane Frankland

APRIL 10, 2025

3 Smart Moves to Break the Monkey Mindset and Build Cyber Strength Small businesses dont need to become cyber experts overnight. Conduct a Cyber Risk Assessment: Think of this as your “cyber mirror.” Invest in simple, engaging sessions on phishing, password hygiene, and how to spot red flags.

Small Business

SecureWorld News

JANUARY 16, 2025

This significantly reduces the risk of unauthorized access. Conducting regular training sessions on recognizing phishing emails, avoiding suspicious downloads, and following cybersecurity protocols can build a resilient workforce. Employee training and awareness: Human error is a leading cause of security breaches.

Energy and Utilities

The Last Watchdog

DECEMBER 18, 2024

Seara Jose Seara , CEO, DeNexus Recent regulatory updates highlight a shift toward robust cyber risk governance, requiring organizations to adapt. emphasizes governance, while the SEC mandates cyber risk reporting and incident disclosures. The NIST Cybersecurity Framework 2.0

Cybersecurity

SecureWorld News

JULY 17, 2025

This trend reflects increasing awareness of OT cyber risk and the need for executive-level accountability," Fortinet notes. Alarmingly, AI-powered cybercrime is accelerating, with adversaries using it to scale phishing and evade detection.

CISO

SecureWorld News

JUNE 9, 2025

Additionally, a distributed workforce, ranging from remote maintenance technicians to cabin crews, multiplies entry points for social-engineering tactics like phishing. Comprehensive risk assessments across information and operational technology (OT) systems lay the groundwork for targeted defenses.

Cybersecurity

Jane Frankland

APRIL 15, 2025

The hard truth is that technology alone cant fix the root causes of cyber risk. Whether its a mis-click on a phishing email, poor password management, acting on a deepfake, or a misconfiguration, human error accounts for most breaches. These are challenges that require more than just a flashy new tool to overcome.

Risk

Malwarebytes

JULY 2, 2025

The breach at a third party provider is extra painful since Qantas concluded an uplift of third and fourth-party cyber-risk governance processes in 2024. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device can’t be phished. Take your time.

Social Engineering

Security Boulevard

JUNE 18, 2025

Whether it’s stolen data, ransomware, or phishing, attacks are becoming more frequent and severe. The post Cyber Risk Management Strategy: How to Plan appeared first on Security Boulevard. Online threats are everywhere, and no organization is safe from them. That’s why having a clear.

Cyber Risk

SecureWorld News

FEBRUARY 17, 2025

AI-enabled threats: Attackers are using AI to automate phishing, generate deepfakes, and bypass traditional security measures. Future governance frameworks will need to incorporate AI-specific controls and transparency requirements to mitigate risks while leveraging AI's potential for defense.

Government

Trend Micro

JUNE 26, 2025

Move faster than your adversaries with powerful purpose-built XDR, cyber risk exposure management, and zero trust capabilities Learn more Extend Your Team Extend Your Team. Respond Faster. Respond Faster. Under Attack?

Security Awareness

The Last Watchdog

APRIL 22, 2025

Monitor their personal devices and home networks: Proactively identify and mitigate potential cyber risks. The rise of deepfake phishing, as highlighted by the Ponemon Institute, presents a clear and present danger to executives and their companies, exploiting personal vulnerabilities for financial and reputational gain.

Authentication

Cisco Security

JULY 7, 2025

Last updated in 2005, this latest edition of Cyber Hard Problems: Focused Steps Toward a Resilient Digital Future focuses on the massive evolution that has occurred in cybersecurity, digital systems and society as a whole over the last several years. We’d love to hear what you think!

Cyber Risk

SecureWorld News

APRIL 13, 2025

These platforms can automatically recognize and classify threatening behavior such as suspicious network activity, phishing attacks, and transmission of malware. Here's an example that shows how Google performs phishing detection.

Cybersecurity

SecureList

DECEMBER 9, 2024

User data was stolen from Cisco Duo, a service that provides organizations with multi-factor authentication (MFA) and single sign-on (SSO) network access, as a consequence of a phishing attack targeting an employee of a third-party telephony provider. The breach allowed the threat actor to download SMS message logs. Why does it matter?

Internet

Jane Frankland

MAY 3, 2025

Allegedly orchestrated by the same group known as Scattered Spider, these attacks highlight the significant challenges even the most respected and established brands face in defending against modern cyber threats. Once inside, they’ll likely have used other methods to successfully bypass enterprise security tools.

Cyber Attacks

Security Boulevard

MAY 2, 2025

Specifically, CISA and USCG assessors had the most success gaining initial access, attaining network permanence, evading defenses and moving laterally by using valid accounts, phishing schemes and default credentials all simple attack methods. Separately, the red team also breached the networks Windows environment via a phishing attack.

Cybersecurity

IT Security Guru

MARCH 18, 2025

Deepfakes join classic phishing and spear phishing as significant cyber risks for online daters. We have to rely on tech to spot this as human capabilities are diminishing, said Newman. The answer? In this case, fraudsters are one step ahead. So, what should people do to protect themselves?

Scams

SecureWorld News

JULY 1, 2025

Generative AI sustains sophisticated, multi-channel social engineering for phishing campaigns to gain access privileges to critical infrastructure. A decade after the Ukraine blackout began with a spear-phishing email, social engineering remains potent. Critical infrastructure is particularly vulnerable at a device level.

Social Engineering

IT Security Guru

MARCH 26, 2025

Our adversaries are equipped with AI but are not constrained by budget, legal, and ethical factors and will use it against us far beyond phishing and deep fake scenarios for ID compromise led attacks. However, AI is a double-edged sword.

Cybersecurity

Jane Frankland

FEBRUARY 7, 2025

When data breaches escalate, cyber-attacks grow more sophisticated, nation states ramp up their digital warfare, and regulations tighten the noose, staying ahead isnt just an optionits your only line of defence. Amid a backdrop of increasingly sophisticated and frequent cyberattacks, APTs are a growing concern for CISOs and cyber risk owners.

CISO

SecureWorld News

APRIL 29, 2025

Whether it was caused by a sophisticated cyberattack or an ordinary technical failure, the outcome remains the same: millions disrupted, critical services compromised, and economic damage," said Kip Boyle , Instructor and vCISO at Cyber Risk Opportunities LLC.

Cyber Attacks

SecureWorld News

AUGUST 5, 2025

For the first time, phishing has taken the top spot, cited by 50% of respondents, surpassing previous top concerns like ransomware and user behavior. The report notes that phishing was a new category this year, and its immediate rise to the top signals a shift from traditional malware-based attacks to more "complex, human-driven breaches."

Backups

The Last Watchdog

MAY 13, 2025

AI Risk Management Becomes Business-Critical AI security solutions dominated RSAC this year, signaling that as organizations adopt advanced response technologies, comprehensive training must keep pace.

Architecture

Digital Shadows

NOVEMBER 26, 2024

Key Points Phishing incidents rose during the reporting period (August 1 to October 31, 2024), accounting for 46% of all customer incidents. This increase is likely driven by high employee turnover and easy access to phishing kits. Meanwhile, “RansomHub” is rising rapidly due to its attractive ransomware-as-a-service (RaaS) model.

Cyber Attacks

Security Boulevard

MARCH 21, 2025

And get the latest on open source software security; cyber scams; and IoT security. 1 - Tenable: Orgs using AI in the cloud face thorny cyber risks Using AI tools in cloud environments? Make sure your organization is aware of and prepared for the complex cybersecurity risks that emerge when you mix AI and the cloud.

Risk

Trend Micro

JUNE 10, 2025

Move faster than your adversaries with powerful purpose-built XDR, cyber risk exposure management, and zero trust capabilities Learn more Extend Your Team Extend Your Team. Respond Faster. Respond Faster. 6 Alerts Back Unread All Inside the criminal mind: Trend’s deep dive into cybercrime.

Cyber Risk

Trend Micro

JUNE 10, 2025

Move faster than your adversaries with powerful purpose-built XDR, cyber risk exposure management, and zero trust capabilities Learn more Extend Your Team Extend Your Team. Respond Faster. Respond Faster.

Cybersecurity

SecureWorld News

FEBRUARY 24, 2025

Additionally, quantum computing could revolutionize identity and authentication systems by eliminating weaknesses in traditional authentication methods and implementing quantum-secure biometric authentication and digital signatures, thereby significantly reducing the risk of identity theft, phishing attacks, and deepfake-driven fraud.

Cybersecurity

Jane Frankland

JANUARY 12, 2025

In this blog, I’m exploring these changes, grouped under key categories that I’ve used in previous years, to help business leaders and cyber risk owners better prepare for the evolving landscape. An insider unknowingly clicking a phishing link or downloading a malicious file could leave the door wide open for attackers.

Cybersecurity

Centraleyes

MARCH 20, 2025

Supply Chain Risk Monitoring: A financial services firm tracked vendor vulnerabilities through a visualization platform, flagging suppliers with outdated software. Phishing Campaign Detection: A healthcare provider used email traffic heat maps to identify unusual spikes in phishing emails targeting specific departments.

Cyber Attacks

Jane Frankland

MAY 18, 2025

This has given rise to Cybercrime-as-a-Service (CaaS) and Hacking-as-a-Service (HaaS)turnkey offerings that provide everything from ransomware kits to AI-generated malware and phishing campaigns.

Cybersecurity

Centraleyes

MARCH 13, 2025

phishing attacks), and their specific roles in protecting sensitive information. A Key Addition to Existing Law The guidance explicitly addresses inquiries regarding AI and outlines how businesses should adapt their risk assessments and controls to mitigate emerging threats. Train Your Team Cybersecurity is a team effort.

Cybersecurity

Jane Frankland

JULY 22, 2025

Challenge Procurement-Driven Security Decisions Cyber risk leaders (CIOs, CISOs, CTOs etc.) What Enterprises Must Do to Close the Security Gap To prevent large enterprises from falling victim to this broken security model, companies must rethink their approach to cybersecurity partnerships: 1. audits, governance, reporting).

Risk

SecureWorld News

DECEMBER 27, 2024

Expect to see AI-enabled phishing campaigns, deepfake scams, and automated attacks grow in complexity. Defensive AI breakthroughs: Tools that flag phishing attempts and scams more effectively, offering users clearer warnings and peace of mind. Secure digital identities: Broader adoption of services like Clear and ID.me

Cybersecurity