Herjavec Group

MAY 19, 2022

Conduct regular social engineering tests on your employees to actively demonstrate where improvements need to be made. Build security awareness training modules to educate your employees on how to spot phishing emails or business-related scams. If you don’t have the talent in-house, employ a third-party security firm.

Penetration Testing 98

Penetration Testing Social Engineering Cybercrime InfoSec 98

SecureWorld News

OCTOBER 19, 2023

Additionally, cybercriminals may be able to use inflation to their advantage, such as by sending phishing emails that appear to be from legitimate companies offering discounts or assistance. Too many folks focus on the technology as opposed to the people or process. Investing in security awareness training has a bottom line impact.

Cybersecurity 79

Cybersecurity CISO Education Phishing 79

eSecurity Planet

APRIL 23, 2021

It requires some baseline industry knowledge, but it’s a great way to stay on top of InfoSec current events. Since 2007 (before podcasting in general had really taken off), Patrick Gray and his co-host Adam Boileau have covered a wide range of InfoSec topics with insight from fellow industry leaders. Malicious Life.

Cybersecurity 138

Cybersecurity InfoSec Cybercrime Hacking 138

Security Through Education

DECEMBER 7, 2022

Many people assume that as professional social engineers (SE) we use EVERY method possible to achieve our objective. Are ethics and social engineering compatible? In our first scenario, let’s pretend a client just hired us to do phishing and vishing to test their corporation’s employees. No Code of Ethics.

Social Engineering 64

Social Engineering Engineering Education Phishing 64

SC Magazine

MAY 20, 2021

Social engineering, phishing scams, ransomware, DDoS attacks , and software vulnerabilities are just some of the threats facing overloaded security professionals with limited budgets. Bear in mind that SOAR requires a mix of technologies and tools that deliver the capabilities the infosec team requires.

Social Engineering 73

Social Engineering Internet Internet InfoSec 73

Herjavec Group

DECEMBER 15, 2021

Threat actors have developed social engineering approaches that leverage the uncertainty and chaos of the pandemic in order to deliver their malicious software. When it comes to cyber risks, the most up-to-date cybersecurity technology or regimented program doesn’t make an organization immune to an attack.

Cybersecurity 52

Cybersecurity Digital transformation Ransomware Cyber Risk 52

Security Boulevard

APRIL 7, 2024

Episode 324 features discussions on a significant AT&T data breach affecting 73 million customers and a sophisticated thread jacking attack targeting a journalist.

Data breaches 69

Data breaches Accountability Social Engineering Data privacy 69

Security Boulevard

JANUARY 21, 2024

Then they switch to the best practices to prevent social media account takeovers, highlighting […] The post The World of Scambaiting, Preventing Social Media Account Takeovers, Network Wrenches Hacked appeared first on Shared Security Podcast.

Media 78

Media Accountability Hacking Scams 78

Security Boulevard

JANUARY 10, 2022

A phone scam targeting psychologists reveals that even professionals can become victims, stolen multi-million-dollar NFT’s results in a “all my apes gone” plea for help, and details on a skimmer supply chain attack on more than 100 real estate websites. ** Links mentioned on the show ** The Phone Scam That Targets Psychologists [link] Thieves […].

Scams 104

Scams Social Engineering Engineering Technology 104

Security Boulevard

APRIL 10, 2022

Scott and Tom explain why privacy isn’t dead, why should everyone should care about their privacy, and how you should respond to someone that says “I don’t care about privacy, I have nothing to hide!”. Plus, details on a new attack using fake shopping apps and how a new malware toolkit called “Borat RAT” is […].

Malware 98

Malware Social Engineering Scams Engineering 98

eSecurity Planet

DECEMBER 3, 2021

Brian Krebs is an independent investigative reporter known for his coverage of technology, malware , data breaches , and cybercrime developments. Longtime network and system administrator Jack Daniel is a technology community activist, mentor, and storyteller. Markstedter actively contributes to filling the infosec education gap.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

Duo's Security Blog

OCTOBER 6, 2023

Threat actors have dramatically escalated their attacks – targeting security controls like multi-factor authentication (MFA), conducting wily social engineering attacks and extorting businesses large and small with ransomware. To achieve more resilience in this heightened risk environment, stepping up zero trust maturity is essential.

Authentication 122

Authentication Risk Social Engineering InfoSec 122

eSecurity Planet

DECEMBER 19, 2023

AI Use Danger As with any emerging technology, many organizations should expect errors and growing pains as teams learn the nuances of applying the technology. Some attacks will be aided by technology, while others will be more strategic in nature as companies strengthen cyberdefense against older attacks.

Cybersecurity 140

Cybersecurity CISO Government Technology 140

Krebs on Security

DECEMBER 29, 2022

I seem to be doing most of that activity now on Mastodon , which appears to have absorbed most of the infosec refugees from Twitter, and in any case is proving to be a far more useful, civil and constructive place to post such things. For a variety of reasons, I will no longer be sharing these updates on Twitter.

Cryptocurrency 229

Cryptocurrency Cybercrime Computers and Electronics Scams 229

The Falcon's View

AUGUST 29, 2017

For those unfamiliar with Fogg's work, he started out doing research on Persuasive Technology back in the 90s, which has become the basis for most modern uses of technology to influence people (for example, use of Facebook user data to influence the 2016 US Presidential Election). Well, low-and-behold, it already exists!

Information Security 45

Information Security InfoSec Social Engineering Security Awareness 45

NopSec

FEBRUARY 9, 2017

The year 2016 will be remembered for some big moments in the world of cybersecurity: the largest known distributed denial of service (DDoS) attack, a phishing attack on a United States presidential candidate’s campaign, and ransomware attacks on major healthcare organizations are just a few. 2017 will see major advancements in technology.

Cybersecurity 40

Cybersecurity DDOS IoT Social Engineering 40

Security Boulevard

MARCH 1, 2023

Executive summary In May 2020 EclecticIQ Intelligence and Research Team published a report ( 1 ) on phishing lures impersonating the maritime industry. The campaign uses consistent maritime-related social engineering lures in spearphishing emails almost certainly targeting the maritime industry. The domain `trim[.]cfd`

Phishing 75

Phishing Social Engineering Ransomware Encryption 75

Herjavec Group

JULY 29, 2021

This means learning from the successes and the failures and using those learnings to enhance security measures, standards, and technology. Threat actors have developed social engineering approaches that leverage the uncertainty and chaos of the pandemic in order to deliver their malicious software. Ransomeware-as-a-Service.

Cybersecurity 52

Cybersecurity Digital transformation Cyber Attacks Ransomware 52

Troy Hunt

DECEMBER 4, 2017

All the subsequent reasons given for why it’s necessary have technology solutions which provide traceability back to individual, identifiable users. Her approach to password sharing may simply be evidence of humans working around technology constraints: I don't blame her, I blame the I.T but the topic kept coming up.

Passwords 203

Passwords Accountability Technology InfoSec 203

Identity IQ

MARCH 13, 2021

Reports show phishing emails have been sent out regarding the newest stimulus package. The fraudulent email messages using the COVID-19 American Rescue Plan as bait target the infosec and technology sectors while employing subject lines ranging from “Joe Biden Rescue Plan Act” to “IRS Rescue Plan Form” to “President’s Rescue Plan Act.”

Identity Theft 111

Identity Theft Social Engineering InfoSec Insurance 111