Resources

Blog

130 Cyber Security Statistics: 2024 Trends and Data

Cybersecurity awareness is an everyday job, and it’s easy to fall into a false sense of security once you have a solid plan in place. Every year, statistics are a reminder that hackers and scammers never sleep. New trends and attack types pop up daily, making it difficult to keep track.This list is a rundown of the most important statistics of the year, providing a good overview of threats to keep...
Blog

Securing Your Organization’s Reputation from Brand Impersonation Attacks

Phishing attacks are becoming increasingly sophisticated. Over 51% of the time, email attackers pretend to be one of the top 20 global brands, with Microsoft being the most common impersonation.Picture this: one of your users receives an email that appears to be from a trusted partner or a commonly used service. The branding is accurate, the language is convincing, and the email seems legitimate....
Blog

Strategizing Cybersecurity Awareness with Different Training Types

Many organizations face regulatory requirements to train employees on cybersecurity threats, but simply meeting these standards doesn't mean you’re protecting your people and your data. Effective training goes beyond compliance, offering frequent exposure to new ideas, regular repetition, practical application, and continuous assessment. This is where targeted training types come into play...
Blog

The Rise of Quishing: How QR Code Phishing is Rising and What You Can Do About It

QR codes are usually used in public settings, notably on flyers and restaurant menus, but they also appear in online communications such as emails. These black-and-white square patterns have seen a meteoric rise recently, going from a niche industrial tool to a widespread replacement for links in physical mediums. As with any new technological medium to share information, hackers have been paying...
Blog

How to Successfully Manage Repeat Clickers

Managing repeat clickers is critical to maintaining robust organizational security, as these individuals significantly increase the risk of successful phishing attacks.According to a recent analysis of 6,000 employees receiving simulated phishing emails, about 6% of users were responsible for approximately 29% of the failures.Recognizing this could help maximize the return on investment (ROI) of...
Blog

Top 11 Cybersecurity Concerns in the Finance Sector in 2024

Cybersecurity in finance is not just about defense but proactive adaptation. Banks face continuous threats despite advanced security infrastructures. The escalation in phishing success rates, as seen in Terranova Security's 2023 Gone Phishing Tournament found a 10.4% click-through statistic, highlighting the need for evolving security strategies. While the finance sector performed better than...
Blog

5 Reasons Why You Need Gamification In Your Cyber Security Awareness Program

Cyber security training is crucial, yet traditional methods often fail to inspire engagement, leading to subpar knowledge retention and application of critical security practices. As security threats constantly evolve, you need training that not only informs but also captivates and motivates. Enter gamification. By weaving elements of game design into training programs, you can turn mundane...
Blog

Traveling Securely: Identifying and Avoiding High-Risk Behaviors

The rise of remote work has brought flexibility and freedom to employees, allowing them to work from various locations. Studies show that 32.6 million Americans will work remotely by 2025—about 22% of the workforce. However, this new way of working introduces significant security risks that can jeopardize personal and organizational data. The increasing trend of workcations and hush trips, where...
Blog

Tailoring Security Training: A Guide to Formats, Sizes, and Schedules

As cybersecurity awareness training becomes a necessary addition for all companies worldwide, many organizations are wondering how best to integrate it into their workflows. There is no one-size-fits-all schedule for cybersecurity training programs. The optimal way to deliver this kind of knowledge depends on your goals, the behaviors you are looking to modify, the size of your company, and how...
Blog

Why Strategic Goals are Important in Security Awareness Programs

A cyber security awareness program involves all parts of a company and needs support from every level of management. Clear strategic goals are essential to guide the program and keep it focused on its objectives. In a webinar hosted by Terranova Security’s CISO Theo Zafirakos, 42% of the attendees revealed that they don’t have any strategic goals...
Blog

Boosting Workplace Efficiency Through Cybersecurity Awareness Training

A single cyberattack can halt your organization’s entire operation overnight. This reality hit hard when MGM Resorts found an unauthorized party accessed sensitive customer information. Using social engineering tactics, hackers were able to bypass traditional security measures to execute this attack, emphasizing the need for robust cybersecurity...
Blog

How to Set the Right Security Awareness Metrics to Protect Your Organization

With modern cyber threats rapidly evolving, over two-thirds of IT decision-makers are reportedly increasing budgets, according to a recent survey of 200 senior cybersecurity professionals conducted by Infosecurity Europe. However, these measures can easily fall short without a united front from management and employees. Cybersecurity is a complex...
Blog

Pig Butchering Scam – What It Is and How to Protect Yourself

Cyber threats are constantly evolving, and the most recent evolution of phishing scams is proving particularly effective. Boasting a gruesome name, pig butchering is a cyber threat that reels in victims and steals thousands, sometimes millions of dollars. Pig butchering has quickly become one of the most lucrative scams thanks to a mix of post...
Blog

Are Password Managers Safe to Use?

Passwords have become a cornerstone of the Internet. These strings of letters and numbers allow us to validate access to various communities, online tools, healthcare, banking, and more. As more and more information is stored behind passwords, efforts to steal and crack them have vastly increased. These new cyber threats led to the creation of...
Blog

International Women's Day: How to Shrink the Gender Gap in Cyber Security

The participation of women in the cybersecurity field is on a notable rise. According to projections by CyberCrime Magazine, they are set to represent 30% of the global cybersecurity workforce by 2025, with this percentage increasing to 35% by 2031. There is also an increasing number of women filling leadership positions within the industry, with...
Blog

What is Baiting in Cyber Security?

Cyber criminals are constantly evolving their methods, but their biggest leverage for growth will always be exploiting the human factor. Software and physical measures against cyber attacks have become so advanced that tricking workers is the only remaining attack vector criminals can reliably use. According to Verizon’s 2023 Data Breach Report, 74...
Blog

7 Smishing Examples and How to Protect Yourself

With roughly 5 billion people—a whopping 65% of the global population—sending and receiving SMS messages, it’s no wonder that hackers have taken to SMS as a new way to lead cyber attacks. In 2022, 68.4 million Americans fell victim to a phone scam. And only 65% of Americans say they would delete a text if it came from an unknown sender. With these...
Blog

What is Swatting? What to Look for and How to Defend Yourself

For those of a certain age, you may remember the old gag where you would call up a business and ask if they had “Prince Albert in a can.” This happened way back in the days when you could purchase loose tobacco in a tin can. Prince Albert was one such product. Now, if the person on the phone answered yes, you could say, “Well, let him out!” Yes, this is what pranks looked like in the 1960s. Fast...
Blog

The 2023 Gone Phishing Tournament Results: Everything You Need to Know

The results of Fortra’s Gone Phishing Tournament are here, and they highlight the potential power and danger of phishing across the world. This global test uncovered that 1 in 10 individuals are susceptible to these attacks, which would have led to 90,000 compromised passwords if the campaign had been an actual cyber attack. This year’s tournament featured an updated email and landing page to...