Entries by wpengine

Everyone’s Cyber-Worried; No One’s Cyber-Prepared

New data from the 2018 Chubb Cyber Risk Survey shows people and companies have a false sense of cybersecurity and aren’t really doing much about it. It’s a safe assumption to think that most everyone is very much aware of cyber threats, phishing attacks, ransomware, social engineering, and other cyberattacks. In fact, Chubb’s new risk report makes […]

Creating a User Sensor Network to Stop Cyber-Attacks

If your users aren’t trying to protect corporate data and assets, you’re at risk. What you need is for the user to become an integral part of their security measures. In every attack that involves phishing, spear phishing, vishing, smishing, drive by downloads, etc., a user is necessary to carry out part of the threat […]

Fake Hotel Website Scams Target Travelers and Hotels

Cybercriminals will take advantage of any situation that separates people from their money. And what better way than to purport to be a reputable hotel and take reservations? The recent example in Turkey covered below demonstrates how far cybercriminals are willing to go to setup their scam. In this newest scam, fake hotel websites are […]

Data Breaches Projected to Reach 146 Billion Records

Where do you see your organization in five years? According to Juniper Research, without a solid security strategy, you may be one of the many experiencing a data breach. According to Juniper Research’s latest report Cybercrime & the Internet of Threats 2018, the projections of the damages we’ll be seeing in the near future are pretty substantial: […]

SMBs Remain A Focus of Cyber Attacks in 2018

With a majority of SMBs experiencing an increase in attack frequency and sophistication in 2018, cybersecurity efforts need to be a primary emphasis for IT teams in the SMB. SMB cybersecurity is constantly being characterized as being underprepared, citing a lack of funding, expertise, and executive support. New data from endpoint protection vendor Barkly points […]

Cybercrime Pulls In A Million Dollars A Minute

More than a million dollars is lost every minute to cybercrime. That staggering stat comes to us by way of RiskIQ who published new research showing that despite businesses spending roughly 171K every minute on cybersecurity,1M is lost to cybercrime. Their research found that every 60 seconds: 1.5 organizations fell victim to ransomware attacks, with an average […]

SharePoint Phishing Attack On Office 365 Users

The attack dubbed “PhishPoint” by Cloud Security vendor Avanan demonstrates the craftiness and extent cybercriminals will go to in order to harvest Office 365 credentials. I’ve shared about how context can be a major influencer in the success of any attack. This latest attack uses several familiar aspects of Office 365 to lull potential victims into an […]

Do You Have A Millennial Security Awareness Training Gap?

Unlike previous generations, millennials have used (and trusted) technology all their lives. So, does it cause a gap in your organization’s Security Awareness Program? According to a new survey from IBM Security, millennials are behind on their sense of security when compared to their “older” counterparts in a number of ways: Millennials value convenience over security – […]

Employee Negligence – Your Organization’s (bigger than you think) Nightmare

A new study shows a vast majority of C-level executives see employee negligence as one of their most pressing security risks. When most security professionals think about “insider risk”, thoughts turn to the malicious insider. And rightly so, as we’re so focused as an industry on the malicious external attacker, that the assumption is that […]

Your Package is on its Way, But Not the One You Expected

Here’s a current scam those involved in shipping and receiving should be aware of. Suppose you’re expecting a package from a major package delivery company. You receive a seemingly legitimate email from the shipping company offering a means to track the progress of your delivery by simply clicking on the supplied link “Arrival Notification.” The […]