Krebs on Security

AUGUST 19, 2020

The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers’ networks. The employee phishing page bofaticket[.]com. Image: urlscan.io.

Phishing 363

Phishing VPN Social Engineering Media 363

SecureWorld News

JUNE 9, 2025

The expanding threat landscape: vulnerabilities and attack types The aviation ecosystem is an intricate web of airlines, airports, air navigation service providers, maintenance suppliers, and third-party technology vendors. A cyberattack on any link, be it a ground-handling contractor or a software provider, can trigger cascading failures.

Cybersecurity 118

Cybersecurity Social Engineering Computers and Electronics Risk 118

Thales Cloud Protection & Licensing

OCTOBER 17, 2023

Cyber Security Awareness Month – Answering Google’s Most Commonly Asked Questions madhav Wed, 10/18/2023 - 05:25 This month is Cyber Security Awareness Month , highlighting how far security education needs to go in order to enable a secure interconnected world.

Security Awareness 129

Security Awareness Passwords Authentication Encryption 129

Jane Frankland

APRIL 15, 2025

While these technological investments have their value, theyre not enough to solve the fundamental problem the majority of risks come from humans. Leadership, culture, and human risk management need to become the core focus if were to build a sustainable and secure framework for the future.

Risk 100

Risk Technology Cybersecurity Security Awareness 100

SecureWorld News

JANUARY 7, 2025

Their themes touch on phishing, man-in-the middle attacks, cryptography and decryption, incident response, and more. Lured by the Sweet: Avoiding the Phishing Trap Similar to Hansel and Gretel, who were tempted by a candy-coated trap, phishing attacks entice victims with seemingly irresistible offers or legitimate-looking emails and websites.

Cybersecurity 113

Cybersecurity Social Engineering Phishing Engineering 113

Security Boulevard

MAY 18, 2023

However, its widespread use has raised concerns about the potential for bad actors to misuse the technology. Experts are worried that ChatGPT’s ability to source recent data about an organization could make social engineering and phishing attacks more effective than ever.

Phishing 130

Phishing Social Engineering Engineering Technology 130

SecureList

FEBRUARY 20, 2025

Kaspersky Managed Detection and Response service (MDR) provides round-the-clock monitoring and threat detection, based on Kaspersky technologies and expertise. For organizations with in-house security operations teams, internal processes and technologies must be equipped to handle the modern threat landscape.

Social Engineering 101

Social Engineering Phishing Government Threat Detection 101

Webroot

OCTOBER 19, 2021

Earlier this year, the National Institute for Standards and Technology (NIST) published updated recommendations for phishing simulations in security awareness training programs. Phishing tests that are too easy do little to address a problem that’s become one of the most common methods of entry for ransomware attacks.

Phishing 124

Phishing Security Awareness Scams Social Engineering 124

The Last Watchdog

OCTOBER 24, 2022

Employee security awareness is the most important defense against data breaches. Related: Leveraging security standards to protect your company. Create security awareness for employees. One of the most important ways to protect against data breaches is to increase employee security awareness.

Security Awareness 214

Security Awareness Passwords Data breaches Cybersecurity 214

CSO Magazine

DECEMBER 13, 2022

Threat adversaries inevitably have more opportunities to carry out targeted attacks as more people are online shopping and checking emails for coupons that could actually be phishing attacks. Well-staffed security teams using the right technologies can undoubtedly go a long way in protecting organizations against cybercrime.

Security Awareness 114

Security Awareness Cybercrime Phishing Technology 114

SecureWorld News

APRIL 1, 2024

A new Phishing-as-a-Service (PhaaS) threat called "darcula" is taking advantage of encrypted mobile messaging services to unleash a wave of sophisticated smishing attacks targeting organizations across more than 100 countries. Mobile devices tend to have weaker security compared to desktop systems, making them an attractive target vector."

Phishing 109

Phishing Mobile Encryption Technology 109

Security Boulevard

SEPTEMBER 9, 2024

The rise in sophisticated phishing threats like polymorphic attacks, social engineering tactics, and the use of compromised accounts have undoubtedly highlighted the significant gaps in perimeter technology, leading to a notable increase in bypassed attacks.

Phishing 121

Phishing Social Engineering Engineering Accountability 121

SecureWorld News

SEPTEMBER 14, 2023

Microsoft has recently brought attention to a highly-sophisticated and targeted phishing campaign conducted by a notorious threat actor group known as Storm-0324. Microsoft's Threat Intelligence team said: "In July 2023, Storm-0324 began using phishing lures sent over Teams with malicious links leading to a malicious SharePoint-hosted file.

Phishing 119

Phishing Ransomware Cybercrime Threat Detection 119

SecureWorld News

FEBRUARY 28, 2025

Because no firewall, no AI-powered SOC, no quantum-proof encryption will save you if your employees keep clicking phishing emails, because let's face it. Security teams can't keep fighting human vulnerabilities with technical solutions alone. (Cue the Dunning-Kruger effect in full force.) This is a disaster waiting to happen.

Cybersecurity 114

Cybersecurity Risk Social Engineering Phishing 114

SC Magazine

JANUARY 26, 2021

companies as a primary target of a new phishing scheme. Cybercriminals have been using a phishing kit featuring fake Office 365 password alerts as a lure to target the credentials of chief executives, business owners and other high-level corporate leaders. The company could not be certain, however, if the V4 phishing kit was involved.

Phishing 118

Phishing Passwords Security Awareness Social Engineering 118

SecureWorld News

SEPTEMBER 24, 2020

The National Institute of Standards and Technology (NIST) recently developed a new method that will help prevent organizations and their employees from falling victim to phishing cyberattacks, which it calls the Phish Scale. A tool like the Phish Scale could be very useful for organizations in the fight against phishing.

Phishing 98

Phishing CISO Cybercrime Technology 98

The Last Watchdog

MAY 11, 2023

Phishing is still the main way bad actors slip into networks; and Business Email Compromise ( BEC ) attacks can instantly translate into crippling losses. IRONSCALES, for instance, applies natural language processing technology to identify patterns and flush out anything suspicious. ICES solutions vet the messages that slip through.

Security Awareness 214

Security Awareness Phishing Internet Internet 214

SC Magazine

FEBRUARY 5, 2021

A phishing attack recently uncovered by researchers pretends to share information about an electronic funds transfer (EFT) by offering up a link to download an HTML invoice that then loads to a page with Microsoft Office branding that’s hosted on Google Firebase. The email attack bypassed native Microsoft email security controls.

Phishing 112

Phishing Media Engineering Accountability 112

The Last Watchdog

JANUARY 2, 2024

Related: How AI is transforming DevOps The constant evolution of technology, increased connectivity, and sophisticated cyber threats pose significant challenges to organizations of all sizes and industries. Lack of security awareness and education. Promote security awareness and education among employees.

Cyber Risk 202

Cyber Risk Risk Security Awareness Education 202

SC Magazine

FEBRUARY 23, 2021

Researchers reported Tuesday that they found two email phishing attacks targeting at least 10,000 mailboxes at FedEx and DHL Express that look to extract a user’s work email account. In the FedEx attack, the final phishing page spoofs an Office 365 portal packed with Microsoft branding. Brand impersonation.

Phishing 119

Phishing Social Engineering Accountability Technology 119

Spinone

MARCH 20, 2019

Despite all the technological solutions to any problem in today’s world, there is always the human-factor to consider. The best technology cannot account for the actions and specifically the mistakes that humans can make which may totally undermine the solution that technology provides.

Security Awareness 70

Security Awareness Wireless Ransomware Passwords 70

eSecurity Planet

JUNE 17, 2021

Back in the day, security training was largely reserved for IT security specialists and then extended to include IT personnel in general. These days, all employees need to be well educated in security best practices and good habits if the organization wishes to steer clear of ransomware and malware. Key Differentiators.

Cybersecurity 133

Cybersecurity Phishing Security Awareness Education 133

Security Boulevard

APRIL 20, 2022

Download your free copy of the 2022 ThreatLabz Phishing Report, and check out our infographic. For decades, phishing has been a complex and time-consuming challenge for every security team. Avoiding the latest breed of phishing attacks requires heightened awareness from users, additional context, and a zero trust approach.

Phishing 115

Phishing Retail Architecture Risk 115

Security Boulevard

JUNE 20, 2023

Over the past year, the Cofense Intelligence team saw a whopping 569% increase in malicious phishing emails bypassing standard email security solutions. Just when you thought your email was secure, our insights are telling a much different story. The problem?

Technology 92

Technology Phishing Internet Internet 92

The Last Watchdog

NOVEMBER 1, 2021

Experts define CaaS as what happens when sophisticated hackers and criminals work together to create technology, toolkits, and methodologies geared toward carrying out cyberattacks. For example, a hacker may choose one vendor whose specialty uses open-source intelligence (OSINT) to identify the most lucrative targets for phishing scams.

Phishing 150

Phishing Cybercrime Technology Hacking 150

SecureWorld News

MARCH 18, 2025

Some reports indicate that Chinese smishing groups are selling SMS phishing kits, enabling scammers to efficiently spoof toll operators and target users in multiple states, including Massachusetts, Florida, and Texas. 84% of IT leaders globally recognize that phishing and smishing have become harder to detect due to AI-powered tools.

Scams 85

Scams Mobile Phishing Education 85

The Last Watchdog

FEBRUARY 3, 2021

26 posting confirming that the compromise was at the hands of the same nation-state threat group behind the SolarWinds hack and subsequent attacks on various technology companies and federal government agencies. Meanwhile, Mimecast followed its Jan. 12 disclosure of a digital certificate compromise with a Jan.

Phishing 252

Phishing Hacking Accountability Social Engineering 252

SecureList

MARCH 25, 2025

Key findings Phishing Banks were the most popular lure in 2024, accounting for 42.58% of financial phishing attempts. Amazon Online Shopping was mimicked by 33.19% of all phishing and scam pages targeting online store users in 2024. Cryptocurrency phishing saw an 83.37% year-over-year increase in 2024, with 10.7

Phishing 77

Phishing Banking Scams Mobile 77

eSecurity Planet

AUGUST 23, 2023

Spear phishing is a more targeted and effective phishing technique that attempts to exploit specific individuals or groups within an organization. While phishing uses a broader range of tactics, such as mass emailing to random recipients, spear phishing is often well-researched and tailored to high-value targets.

Phishing 98

Phishing Social Engineering Authentication Security Awareness 98

SecureWorld News

JULY 26, 2023

A new potential cybercrime tool called "FraudGPT" appears to be an AI bot exclusively being used for offensive purposes, such as crafting spear phishing emails, creating cracking tools, carding, and more nefarious activities. This craftiness would play a vital role in business email compromise (BEC) phishing campaigns on organizations.

Phishing 97

Phishing Social Engineering Cybercrime Scams 97

CyberSecurity Insiders

APRIL 16, 2021

According to researchers at INKY, in the last few months, there’s been a sharp rise in these work-related phishing lures. The kind that could throw off even your most security-aware employees. Carefully crafted emails like these containing a malicious link can fool even the most security-aware of employees.

Phishing 113

Phishing Security Awareness Social Engineering Scams 113

Security Affairs

FEBRUARY 28, 2024

VIPRE Security Group’s latest report, “Email Security in 2024: An Expert Insight into Email Threats,” delves into the cutting-edge tactics and technologies embraced by cybercriminals this year. Amidst this dynamic landscape, email stands as a primary battleground for cyber defense. Who’s Being Spoofed?:

Phishing 140

Phishing Identity Theft Scams Malware 140

Cisco Security

AUGUST 17, 2021

Now mix in architectural changes that support cloud productivity suites like Microsoft 365 and Google’s G-Suite to accelerate your business to cloud-based email security services. When it comes to safeguarding email against today’s advanced threats like phishing and malware information is power. User Awareness Training: Training.

Phishing 144

Phishing Technology Malware Authentication 144

Jane Frankland

MAY 3, 2025

While details remain sparse, reports suggest social engineering tactics like phishing, SIM swapping, and multi-factor authentication (MFA) fatigue attacks may have been used to infiltrate systems. Once inside, they’ll likely have used other methods to successfully bypass enterprise security tools.

Cyber Attacks 100

Cyber Attacks Retail Cyber threats Backups 100

SC Magazine

APRIL 12, 2021

Despite their largely inherent familiarity with technology, employees aged 18-24 collectively performed the worst on the quiz, with only 16% passing. And yet, 93% of respondents working in information services reported receiving cybersecurity training, compared to 67% of healthcare respondents.

Cybersecurity 137

Cybersecurity InfoSec Phishing Security Awareness 137

SecureList

JUNE 25, 2024

Despite adopting digital technology for remote work, production, and sales, SMBs often lack robust cybersecurity measures. For example, the UK’s National Cyber Security Centre reports that around 50% of SMBs in the UK are likely to experience a cybersecurity breach annually.

Cybersecurity 129

Cybersecurity Phishing Media Software 129

Security Affairs

JANUARY 26, 2021

Threat Report Portugal Q4 2020: Data related to Phishing and malware attacks based on the Portuguese Abuse Open Feed 0xSI_f33d. The submissions were classified as either phishing or malware. Phishing and Malware Q4 2020. These kinds of malware come from Brazil and the attacks are disseminated via phishing campaigns.

Threat Reports 139

Threat Reports Phishing Malware Banking 139