Resources

Blog

How to Avoid Phishing Simulations False Positives?

This year is seeing more phishing attacks in more places, having more detrimental impacts. One security messaging provider noted a 61% increase in phishing attacks between April and October 2022 compared to the same period the previous year. Another report observed that when phishing attacks were successful in 2022, financial losses from those incidents increased by 76%. In another trend, phishing...
Blog

Deepfakes: What They Are and How to Spot Them

Artificial Intelligence (AI) tools are getting more capable and creative every day. Generative AI is writing human-like prose and creating lifelike photography. 3D animation software is making those images come alive. Voice generation tools are replicating people’s voices with just a smattering of input. And it’s not coming out of Hollywood studios. Much of the excitement is due to the fact that...
Blog

Top 7 K-12 Cyber Security Threats and How to Mitigate Them

Education and technology used to operate on separate tracks, but they have become increasingly interconnected in recent years. Adding software and connected devices to the classroom has given teachers more flexibility in their teaching styles and makes their job easier. However, these new tools came with essential responsibilities that took a moment to get embraced by teachers and school...
Guide

2023 Phishing Benchmark Global Report

Working with Microsoft to create a real-world simulation experience, this report provides a true phishing behavior benchmarking opportunity for organizations worldwide.
Blog

8 Examples of Vishing and How to Beat Them

Less of a cyber security threat and closer to a scam, Vishing refers to attempts to steal information or money over the phone by convincing the victim. These calls often use personal data acquired through previous cyber attacks to gain their victim’s trust. This type of threat is definitely on the rise—especially with the help of AI . Like many other hacks and scams, Vishing is a popular attack...
Blog

What to Expect From Gone Phishing Tournament 2023

Every year, phishing statistics seem to get worse. The year 2022 witnessed over 4.7 million attacks, with a significant surge occurring in Q4, accounting for 1.35 million of those incidents. This trend indicates a steady annual growth rate of 150% since 2019. There is no doubt that phishing is the leading and most dangerous modern cyber attack. Recognizing these challenges, Fortra’s Terranova...
Blog

Your Real-World Footprint Has a Digital Counterpart: Here’s What You Need to Know About Digital Footprints

Detectives look for footprints and fingerprints because they’re instant proof of where someone’s been, what they touched, and where they’re headed. The concept holds online, too. Your digital footprint is a map of where you (and your devices) have been, what you do online, how you behave, and where you’re probably headed next in the cyber sphere. In this article, we explain what digital footprints...
Blog

Here's How Abandoned Domain Name Can Become a Cyber Threat

Do you have old pages on your website that you’ve forgotten about? Obsolete projects with old domain names? Old pages that are no longer active? If so, beware. Those subdomains you’ve forgotten about can be highly valuable to cyber attackers. Keeping your organization’s website up-to-date typically means updating content. But while you focus on the new, don’t neglect any old domains or unused...
Blog

Cyber Security Burnout: What it is and 5 Actionable Tips to Avoid it

Even though your cyber heroes only work from 9-5, cyber threats are lurking 24/7. Many dangers can materialize online, requiring constant monitoring and security operations professionals to keep up with and potentially mitigate the latest threats and vulnerabilities. And with the rapid increase in global cyber attacks, the stress for cyber security professionals is through the roof. Because of the...
Blog

Cyber Security Preparedness in a Hybrid World

Offices around the world have undergone a massive transformation in recent years. While a fully remote workforce remains offered by a minority of employers, the hybrid nature of workplaces is rapidly becoming the norm. A recent study by Cisco studied the cyber security challenges tied to a distributed workforce, and their cyber security readiness model created some troubling statistics. According...
Blog

Why Is Phishing Awareness Training Important?

The reality is simple. Phishing attacks are more prevalent than ever before. An estimated 3.4 billion fraudulent emails are sent out daily as part of phishing schemes, resulting in the FBI's Internet Crime Complaint Center (IC3) receiving over 651,800 phishing-related complaints annually. Adjusted losses for affected organizations topped $2.4 billion, costing them losses of up to $17,700 per...
Blog

How to Report a Phishing Email Scam: What You Need to Know

Over 3.4 billion phishing emails are sent out to unsuspecting recipients daily. At this rate, over 1 trillion email scams are deployed in one calendar year. The sheer enormity of these numbers makes it easier to understand how and why employees become victims of phishing email scams. Their typical email inbox is overflowing with emails from colleagues, partners, friends, family, third-party...
Blog

7 Signs of a Phishing Email

One of the most frequent attack vectors for cyber attackers is also one of the most used workplace applications. And you guessed it... that application is email. Thankfully, a lot of sophisticated technology these days can help protect organizations from cyber threats. Even so, this attack vector still puts your end users on the front lines of the cyber security threats. This means that to secure...
Blog

What is a Tailgating Attack?

While high-profile ransomware and malware attacks get lots of media attention, threats like tailgating attacks and piggybacking attempts often get overlooked. Yet these social attacks present a substantial risk to modern enterprises. During these attacks, a cyber criminal will attempt to enter a restricted area without going through an authentication process, such as a passcode-protected door or a...
Blog

5 Examples of Business Email Compromise Attacks

Most skilled cyber attackers don't need exploits to access an enterprise network. In many examples of Business Email Compromise (BEC) attacks, all it takes is a simple phishing scam to trick the user into handing over their login credentials. In these attacks, a hacker will send an employee a phishing email posing as a trusted individual to trick the victim into handing over sensitive information...
Blog

Cyber Security Threats in the Auto Industry and How to Prevent Them

Transportation plays a vital role in our daily lives, getting us to work, school, and social activities. In many regions, cars have become the primary mode of transportation, shaping the urban landscape and influencing how we interact with our environment. For many people, owning a car is not only a convenience but a necessity in navigating the modern world. Over the years, cars have dramatically...
Blog

What's the Difference Between Smishing and Vishing?

An urgent voicemail message from the tax department. A text message from Microsoft tech support warning you about a problem with your computer. A caller asking you to confirm your mailing address and credit card number so you can collect your free prize. A text message requesting your confirmation of an Amazon shipment. These are all examples of smishing and vishing cyber attacks. They have one...
Blog

What's a Zero-Day Attack?

Users often just assume that the software tools they're using are in top working condition, and that's generally true. However, every change and every piece of new code introduces new potential for gaps, problems, and bugs. Sometimes cyber security is a race against time. What happens when a cyber attacker finds a hole before a security team does? What is a Zero-Day Attack? As soon as a malicious...
Blog

How To Prevent Ransomware

To prevent ransomware, companies need to focus on giving their employees actionable security awareness training that educates, empowers, and motivates. For this to happen, employees must understand the facts around ransomware and the profound, long-term impact it can have on the company. Once a ransomware attack is successfully executed, there are very few options for the affected company apart...