-
Jan 21, 2025 | 
helpnetsecurity.com | Josephine Wolff |Roger A. Grimes
This list of ransomware-focused cybersecurity books is tailored for professionals seeking practical insights and deeper knowledge. Covering technical strategies, real-world cases, and the evolving tactics of attackers, these books offer valuable perspectives to help strengthen defenses and refine incident response plans.
-
Dec 6, 2024 | 
blog.knowbe4.com | Roger A. Grimes
Frequently, when a cybersecurity training manager sends out a controversial simulated phishing attack message that angers a bunch of employees and ends up making headlines, we get called by the media to comment on the story.
-
Dec 3, 2024 | 
blog.knowbe4.com | Roger A. Grimes |Stu Sjouwerman
Three in Four Black Friday Spam Emails Were ScamsThree out of four Black Friday-themed spam emails are scams, according to researchers at Bitdefender. Most of these scams are targeting users in the US and Europe. "This year, 77% of all Black Friday-themed spam (by volume) analyzed by Bitdefender's Antispam Lab team was classified as scams, while only 22% was identified as marketing lures—emails designed to drive traffic to legitimate but overly aggressive promotions," the researchers write.
-
Nov 27, 2024 | 
blog.knowbe4.com | Roger A. Grimes
We are excited to see the Cybersecurity Infrastructure Security Agency (CISA) and outgoing Director Jen Easterly strongly recommend PHISHING-RESISTANT multi-factor authentication (MFA). The majority of people, including the majority of cybersecurity practitioners, do not know that most MFA…especially the most popular types used today (e.g., one-time passwords, pushed-based, SMS-based, etc.), can be as easily phished or bypassed as the passwords they were intended to replace.
-
Nov 20, 2024 | 
blog.knowbe4.com | Roger A. Grimes
About five years ago, I was having trouble with an expensive brand-name refrigerator that my wife and I had bought. It was a great refrigerator feature-wise. My wife and I initially loved it. But it kept breaking. And each break, even though it was covered by the warranty, took weeks and weeks to repair.
-
Nov 19, 2024 | 
blog.knowbe4.com | Roger A. Grimes
In my most recent book, Fighting Phishing: Everything You Can Do to Fight Social Engineering and Phishing, I highlight the use of “champions," which are co-workers in your organization who can help spread security awareness training to better lower human risk.
-
Nov 19, 2024 | 
blog.knowbe4.com | Roger A. Grimes |Stu Sjouwerman
Criminal Threat Actor Uses Stolen Invoices to Distribute MalwareResearchers at IBM X-Force are tracking a phishing campaign by the criminal threat actor "Hive0145" that's using stolen invoice notifications to trick users into installing malware. Hive0145 acts as an initial access broker, selling access to compromised organizations to other threat actors who then carry out additional cyberattacks.
-
Nov 4, 2024 | 
blog.knowbe4.com | Roger A. Grimes
Over a decade ago, I noticed that social engineering was the primary cause for all malicious hacking. It has been that way since the beginning of computers, but it took me about half of my 36-year career to realize it. At the time, I think everyone in cybersecurity knew social engineering was a big part of why hackers and their malware programs were so successful, but no one really knew how big.
-
Nov 1, 2024 | 
blog.knowbe4.com | Roger A. Grimes
Cybersecurity is all about risk management and reduction. You cannot get rid of all risk. Well, I guess you could, but you (and everyone else) would probably not want to work in a true zero-risk environment. It would be too locked down, super slow, and incredibly inflexible. Cybersecurity is all about identifying the most likely and impactful risks and reducing them. To repeat, cybersecurity is about risk management. Identify the biggest risks and mitigate those the best you can. That is your job.
-
Sep 23, 2024 | 
blog.knowbe4.com | Roger A. Grimes
Since the beginning of computers, social engineering has been the number one way that computers and networks have been compromised. Social engineering is involved in 70% to 90% of all successful data breaches. Nothing else is even close (unpatched software and firmware are involved in 33% of successful attacks, everything else is 1% or less).
