Scamm Calls To Avoid!
That “car warranty” call isn’t about your car… it’s about your information. Scammers will say anything to get you talking, and paying! Best move? Hang up before they get a word out of you.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Attackers Use AI Development Tools to Craft Phony CAPTCHA Pages
Attackers are abusing AI-powered development platforms like Lovable, Netlify and Vercel to create and host captcha challenge websites as part of phishing campaigns, according to researchers at Trend Micro. “Since January, Trend Micro has observed a rise in fake captcha pages hosted on such platforms,” the researchers write.
New AI-Driven Phishing Platform Automates Attack Campaigns
Researchers at Varonis warn of a new phishing automation platform called “SpamGPT” that “combines the power of generative AI with a full suite of email campaign tools.” While previous phishing kits have automated parts of the attack chain, SpamGPT’s sophistication sets it apart from the rest “SpamGPT’s interface and features imitate a professional email marketing service, but for illegal purposes,” Varonis writes.
Scammers are fooling you!
Scammers are slick using your own info to trick you. Stay sharp: Strong passwords + two-factor authentication Spot weird links/senders Go straight to the real site.
Attackers Abuse Google's AppSheet to Send Phishing Emails
Hackread reports that attackers are abusing Google’s AppSheet platform to send phishing emails. The campaign was spotted by researchers at Raven, who warn that attackers are sending messages that impersonate AppSheet, informing users of phony trademark violations. Notably, the emails are sent from AppSheet’s legitimate infrastructure, making them more likely to bypass security controls and appear legitimate to human recipients.
Why Your Security Strategy Needs a Human Upgrade
Let’s be brutally honest. For years, our industry has been locked in a civil war. In one camp, the technologists have been building higher walls and smarter traps, arguing that the right AI-powered, next-gen firewall will solve all our problems. In the other camp, the behaviorists have been calling for more training and better awareness, convinced that if we just make people understand the risks, they’ll stop clicking on things.
AI-Assisted Phishing Attacks Are an Increasingly Serious Threat
AI-assisted phishing attacks pose a significant and increasing threat to organizations, according to Matt Weidman, partner and vice president of Commercial Property & Casualty at USIA. In an article for CBIA, Weidman explains that attackers can use AI tools to craft targeted, convincing phishing messages that are almost indistinguishable from the real thing.
Level Up Your Strategies for Cybersecurity Awareness Month
Cybersecurity Awareness Month is just around the corner, and it's time to plan your October campaign! While it's an exciting opportunity, it can also be challenging. How do you turn mandatory security awareness into a fun and engaging campaign that actually reduces human risk? Join Erich Kron, CISO Advisor at KnowBe4, as he shows you exactly how to do it. You'll discover how to leverage KnowBe4's ready-to-use kit to run a complete themed campaign throughout October.We've done the heavy lifting so you can focus on what matters most: building a stronger security culture that lasts.
Protecting AI Agents Will Be Status Quo
Protecting humans means protecting the tools humans use. Human risk management (HRM) means reducing human-based risk, or in our particular area, human-based cybersecurity risk. Study after study has shown that, in one way or another, humans are involved in the vast majority of cybersecurity incidents.
Report: AI-Powered Phishing Fuels Ransomware Losses
AI-powered social engineering attacks are significantly more successful than traditional attacks, according to a new report from cyber risk management firm Resilience. The researchers state, “Social engineering attacks fueled 88% of material losses, with AI-powered phishing achieving a 54% success rate compared to just 12% for traditional attempts.” AI allows attackers to easily craft sophisticated phishing emails, as well as voice and video deepfakes.