Ticking boxes and taking names? When it comes to security awareness training, are companies choosing compliance over security? By now, with the numerous high-profile data breaches and all-things-cyber dominating the...
Read moreIdentifying phishing attacks is a complex and nuanced endeavor. Attackers use a variety of techniques to disguise their intent or coerce compliance, but every well-crafted phishing attempt includes two key...
Read moreIt’s here! The 2019 Verizon Data Breach Investigations Report, released yesterday analyzed 41,686 cybersecurity incidents, with data provided by 73 sources from 86 countries. The report confirms much of what...
Read moreToday’s cybercriminals are relying more heavily on executive and brand impersonations to reach their nefarious goals. Impersonation attacks aim to trick targeted users into believing that they’re receiving an email...
Read moreOn April 11, GreatHorn’s threat response team identified a widespread credential theft attack. Phishing attacks commonly exploit trusted brands by using look-alike domains, display name spoofing, and other social engineering techniques...
Read moreIn recent months, we’ve seen a rise in volumetric phishing attacks that lack the consistency typical of volumetric phishing attacks. Unlike attacks that use minor customizations (e.g. filling in the...
Read moreGreatHorn’s threat research team identified what appears to be a new approach to tricking unsuspecting end users into interacting with malicious URLs leading to various credential theft sites. Identified in...
Read moreCIOdive.com recently published a guest article by Gartner that draws on analyst insights from Gartner’s “Top 10 Security Projects for 2019.” Half of the projects listed are new (enterprise adoption...
Read moreIt’s no secret that the RSA Conference (RSAC) is not what it used to be. Every year the number of attendees grows, the “cool” new vendors come and (unfortunately) go,...
Read more