Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Email Security

knowbe4

Hacked Customer Support Portal Being Used to Send Phishing Emails

Jul 2, 2024 By Stu Sjouwerman In KnowBe4
A hacked customer support portal belonging to router manufacturer Mercku is being used to respond to customer queries with phishing emails, BleepingComputer reports. If a customer files a support ticket through the company’s Zendesk portal, they’ll receive an automated response that attempts to trick them into granting access to their Metamask cryptocurrency account.
Read Post
securitysenses

How to Navigate the Digital Landscape Safely

Jun 28, 2024 By SecuritySenses In SecuritySenses
As cyber threats become increasingly sophisticated, it is essential to be proactive about protecting your personal information and ensuring your online activities remain secure. From social networking and online banking to telecommuting and e-learning, the digital realm offers unparalleled convenience and opportunities. However, this convenience comes with its own set of risks. Understanding how to protect yourself online is crucial for maintaining privacy, security, and overall well-being. We are listing below some essential tips for safely navigating the digital landscape.
Read Post
fidelis security

Inbox on Lockdown: Stop Email Leaks Before They Happen

Jun 28, 2024 By Sarika Sharma In Fidelis Security
Ever hit send on an email and immediately felt that sinking feeling? Maybe it was an attachment containing sensitive data that was misplaced, or that clever phishing email that convinced a colleague to cough up login credentials. These are cases that clearly explain the critical need for Email Data Loss Prevention (DLP).
Read Post
knowbe4

Russian Threat Actor Launches Spear Phishing Attacks Against French Diplomats

Jun 27, 2024 By Stu Sjouwerman In KnowBe4
France’s cybersecurity agency ANSSI has issued an alert outlining a Russian spear phishing campaign targeting French diplomats, the Record reports. The agency attributes the campaign to “Nobelium,” a threat actor tied to Russia’s Foreign Intelligence Service (the SVR).
Read Post
devo

Phishing Attacks: The Deceptive Trap

Jun 27, 2024 By Devo In Devo
The threat of phishing attacks looms larger than ever. The LA County Department of Public Health recently announced that 50 employees fell victim to phishing attacks, compromising sensitive patient data. These deceptive schemes have become a staple in the cyberthreat landscape, targeting individuals and businesses of all sizes. For every employee, understanding the signs and consequences of a phishing attack is crucial to safeguarding their organization.
Read Post
knowbe4

FBI Warns of Phishing Campaign Targeting the Healthcare Industry

Jun 27, 2024 By Stu Sjouwerman In KnowBe4
The US FBI and the Department of Health and Human Services (HHS) have released a joint advisory warning of a social engineering campaign that’s targeting the healthcare industry. “Threat actors are using phishing schemes to steal login credentials for initial access and the diversion of automated clearinghouse (ACH) payments to US controlled bank accounts,” the advisory states.
Read Post
Arctic Wolf

Breaking down BEC: Why Business Email Compromise is More Popular Than Ever

Jun 26, 2024 By Mark Manglicmot In Arctic Wolf
Cybersecurity moves fast, and the latest threats to reach organizations worldwide are being built on the back of artificial intelligence (AI) models that spit out accurate code, realistic messages, and lifelike audio and video designed to fool people. But as headline-grabbing as AI-based attacks appear to be, they aren’t driving the most breaches globally. That would be BEC attacks, in which attackers leverage stolen access to a business email account to create a scam that results in financial gain.
Read Post
knowbe4

Simulated Phishing Tests Matter

Jun 26, 2024 By Roger Grimes In KnowBe4
If you had to choose between regular cybersecurity training and simulated phishing testing, the data shows you should choose simulated phishing tests. When the security awareness training (SAT) industry started over a decade ago, there was some controversy about whether simulated phishing tests should be conducted. The idea of simulated phishing testing was relatively new and some people took them as not only unusual, but potentially unethical and unneeded.
Read Post
knowbe4

Phishing Attacks in the UK Have Surged

Jun 25, 2024 By Stu Sjouwerman In KnowBe4
Over 11 million phishing attacks have been reported to the UK’s Suspicious Email Reporting Service (SERS) over the past year, according to new data from Action Fraud. The UK’s National Cyber Security Centre has also taken down more than 329,000 phishing sites since the SERS program started in 2020.
Read Post

Copyright © 2024 OpsMatters™. All rights reserved.