Blog

what_is_baiting
Blog

What is Baiting in Cyber Security?

Mon, 03/04/2024
Image Cyber criminals are constantly evolving their methods, but their biggest leverage for growth will always be exploiting the human factor. Software and physical measures against cyber attacks have become so advanced that tricking workers is the only remaining attack vector criminals can reliably use. According to Verizon’s 2023...
Security Awareness Training
Phishing Simulation
GPT-Summary-2023-EN
Blog

The 2023 Gone Phishing Tournament Results: Everything You Need to Know

Tue, 02/20/2024
The results of Fortra’s Gone Phishing Tournament are here, and they highlight the potential power and danger of phishing across the world. This global test uncovered that 1 in 10 individuals are susceptible to these attacks, which would have led to 90,000 compromised passwords if the campaign had been an actual cyber attack. This year’s tournament featured an updated email...
Compliance
Security Awareness Training
cyber security swipe right blog image
Blog

Swipe Right on Cyber Security: Let’s Talk About Zodiac Signs

Mon, 02/12/2024
With Valentine’s Day upon us, our thoughts turn to love, compatibility, and cyber security. As Cupid strings his bow this Valentine’s Day, let’s explore how the stars might be influencing your approach to online security. Are you a Leo who roars against cyber threats, or a Pisces swimming through the sea of digital privacy? Remember, while the universe might hold many...
Compliance
Data Privacy
Security Awareness Training
quishing EN
Blog

What is Quishing?

Fri, 02/09/2024
QR codes have come a long way since being invented in 1994 by a subsidiary of Toyota. Initially introduced to address some limitations of barcodes during the car manufacturing process, QR codes have since become staples in people’s day-to-day lives. The introduction of high-powered cameras to most modern smartphones is what allowed these codes to gain new uses. QR codes,...
Cyber Threats
Phishing
Mobile Security
Security Awareness Training
Phishing Simulation
Most-Dangerous-Healthcare-Cyber-Attacks-EN
Blog

The 7 Most Dangerous Healthcare Cyber Attacks

Fri, 02/02/2024
While industries like banking and software can be devastated by cyber attacks, no other field is impacted by hackers like healthcare. As an example, it’s hard to forget attacks like the ransomware that brought all 400 locations of Universal Health Services to a standstill for months in the United States. Healthcare facilities often can’t operate if they don’t have access to...
Compliance
Security Awareness Training
Law 25: Everything You Need To Know to Ensure Compliance
Blog

Law 25: Everything You Need To Know to Ensure Compliance

Fri, 01/26/2024
Online privacy and data protection have become pressing issues in recent years that many governments have decided to legislate. The Legault CAQ government has been behind many digital-related innovations, so it’s not surprising to see legislation like this. This law is a legislative update since existing laws inadequately address digital data. It should be noted that Law 25...
Compliance
Blog

The Evolution and Limitations of Multi-Factor Authentication

Mon, 01/22/2024
As careers, banking, and healthcare move online, the need for more secure authentication has become increasingly urgent. While passwords have been adopted as the most common form of authentication, they pose many problems in terms of cyber security. In recent years, especially since the rise of remote work in 2019, the adoption of multi-factor authentication (MFA) has steadily...
Compliance
Data Privacy
Security Awareness Training
How to Avoid Phishing Simulations False Positives?
Blog

How to Avoid Phishing Simulations False Positives?

Fri, 11/03/2023
This year is seeing more phishing attacks in more places, having more detrimental impacts. One security messaging provider noted a 61% increase in phishing attacks between April and October 2022 compared to the same period the previous year. Another report observed that when phishing attacks were successful in 2022, financial losses from those incidents increased by 76%. In...
Cyber Threats
Phishing
Security Awareness Training
Phishing Simulation
Updated FCC Legislation Could Mean New Data Privacy Requirements for Telecoms
Blog

Updated FCC Legislation Could Mean New Data Privacy Requirements for Telecoms

Mon, 08/14/2023
Telecommunications companies (telecoms) have been prime targets for cyber attackers. They operate critical infrastructure passage, and vast amounts of customer data pass through their networks. The United States Federal Communications Commission (FCC) is aiming to strengthen data security with new regulations around data breach reporting by communications carriers. The agency...
Compliance
Android vs iOS: Which Operating System is Safer?
Blog

Android vs iOS: Which Operating System is Safer?

Mon, 07/10/2023
Cellphones have seen one of the most dramatic technological growths of any hardware in recent history. From simple portable phones a few decades ago, they’ve become fully-fledged computers with their own OS and applications used daily by most people worldwide. Smartphones have become such a fixture of life, and hackers and scammers have been working to exploit these devices...
Mobile Security
The California Privacy Rights Act (CPRA) and How it Affects Your Business
Blog

The California Privacy Rights Act (CPRA) and How it Affects Your Business

Thu, 03/23/2023
New regulations are already keeping IT professionals on their toes in 2023. One monumental change for California residents and businesses is the California Privacy Rights Act (CPRA). The legislation came into force on January 1, 2023. Legislators drafted the new rules to empower consumers and close gaps in the California Consumer Privacy Act (CCPA). The CPRA gives customers...
Compliance
Data Privacy
How to Protect Your Sensitive Information from Word Document Malware
Blog

How to Protect Your Sensitive Information from Word Document Malware

Tue, 12/27/2022
If you’re a company that uses email scanning technology as the first line of cyber defense, you should know about a recent slate of malicious Word document-based attacks. These attacks are designed to deliver malware and ransomware to targeted systems. Security researchers at Cisco Talos recently identified an attack where Word document files attached to emails were used to...
Cyber Threats
Malware
Office 365
How to Build a Successful Phishing Simulation Campaign
Blog

How to Build a Successful Phishing Simulation Campaign

Thu, 02/24/2022
Phishing threats are everywhere, and if your employees don’t know how to spot them, you’re putting your information at risk. Knowing how to build a successful phishing simulation is vital for identifying how well employees can spot the latest threats and ensuring they know how to spot them independently. Unfortunately, many organizations fail to offer adequate security...
Security Awareness Training
Phishing Simulation
What You Need to Know About The Office-365 Phishing Campaign Targeting C-Suite Executives
Blog

What You Need to Know About The Office-365 Phishing Campaign Targeting C-Suite Executives

Fri, 02/12/2021
During the last week of January 2021, cyber security provider TrendMicro shared a blog post highlighting an Office-365 phishing campaign that criminals have targeted executives within manufacturing, tech, real estate, government, and finance since May 2020. As part of the scam, fraudsters sent the victims fake emails with links to a phishing site, where they harvested their...
Cyber Threats
CEO Fraud
Phishing
Office 365
The 2020 Security Awareness Virtual Summit for Partners: Here’s What You Need to Know
Blog

The 2020 Security Awareness Virtual Summit for Partners: Here’s What You Need to Know

Mon, 10/26/2020
Robust, engaging security awareness training is an essential part of strong cyber security practices, especially given the accelerated digital transformation and shift by many organizations to remote workforces. It can also be a crucial value-added product for resellers, distributors, MSSPs, OEMs partners and technology partners, who are looking to expand their portfolio,...
Office 365
Security Awareness Training
How to Protect Your Data from the Microsoft Office 365 Phishing Scam
Blog

How to Protect Your Data from the Microsoft Office 365 Phishing Scam

Fri, 07/31/2020
Since December 2019, there has been a coordinated campaign of phishing attempts targeting Office 365 users. Cyber criminals have sent spoofed email, gathering the login credentials and payment details of Microsoft accounts in over 62 countries. According to one report, despite a 42% reduction in phishing attempts in 2019, scams like this Microsoft Office 365 campaign remain a...
Cyber Threats
Phishing
Office 365
This is Why You Need Mobile Responsive Security Awareness Training
Blog

This is Why You Need Mobile Responsive Security Awareness Training

Tue, 06/30/2020
(7 min read) Hint: It has everything to do with effective mobile learning. The past decade’s explosion of smartphone and tablet usage has magnified the importance of well-designed mobile responsive content as a vital part of any training program. Recent studies echo clear mobile learning preference statistics, including how: 70% of learners feel more motivated when training...
Mobile Security
Security Awareness Training
How to Successfully Manage Repeat Clickers
Blog

How to Successfully Manage Repeat Clickers

Fri, 06/12/2020
(7 min read) Using online security awareness training to lower your click rate Recognizing a potential phishing email is the first step in avoiding falling victim to a cyber attack. The next and most important step is knowing what to do with this email. Ideally, you want your employees to report the phishing email to you and then delete the message. However, curiosity is...
Security Awareness Training
Phishing Simulation
Terranova Security Partners with Microsoft
Press Release

Terranova Security Partners with Microsoft

Thu, 02/20/2020
Bringing the Best in Security Awareness Content to Microsoft Customers Terranova Security has announced that it has partnered with Microsoft Microsoft is leveraging our phishing, security awareness, social engineering, and cyber security content in Microsoft Office 365 Advanced Threat Capabilities (Office 365 ATP). “Microsoft’s technology and platform enriches us with...
Office 365
Security Awareness Training
Blog

Governance and Information Security

Thu, 02/13/2014
Information security governance is a subset of corporate governance and can complete or encompass the governance of information technologies. It directs or strategically aligns information security activities and ensures that the company’s business objectives are reached. It also guarantees that information security risks are adequately managed and that information resources...
Compliance