Employee Security Training

Feds Warn of TrickBot Spear-Phishing Attacks Delivering Malware Payload

by Jessica Davis

A joint federal alert warns that all entities should be on the alert for a newly observed spear-phishing campaign, leveraging malicious emails to deliver the TrickBot malware payload....

FBI Finds Data of 79K Gore Medical Patients from 2017 Data Theft

by Jessica Davis

Georgia-based Gore Medical Management, doing business as Family Medical Center, recently notified 79,100 patients that the FBI discovered some of their data on a third-party computer. The FBI alerted...

Dark Web Analysis: Healthcare Risks Tied to Database Leaks, Credentials

by Jessica Davis

A new report from CybelAngel analysts provides insight into just how hackers are getting into healthcare networks, from providers leaving databases wide open to attacks, to credential...

Pharma Key Target of New Phishing Campaign Using Malformed URLs

by Jessica Davis

Threat actors are bypassing traditional URL security defenses with malformed URL protocols to attack end users, according to new data from GreatHorn Threat Intelligence Team. Pharmaceutical companies...

Cyberattack Drives Okanogan County Public Health IT System Offline

by Jessica Davis

A cyberattack on Washington’s Okanogan County government computer infrastructure has driven multiple regional offices offline, including the Public Health department, according to a news...

Key 2021 Insights: Proactive Security Needed for Ransomware, Phishing

by Jessica Davis

The ransomware surge during the last few months has already continued into 2021. And though the malware will remain a key trend into this year, healthcare industry stakeholders will need adopt a...

Report: Rise in COVID-19 Vaccine Social Engineering, BEC, Phishing

by Jessica Davis

Recent Proofpoint research shows hackers are continuing to prey on fears tied to the COVID-19 pandemic. And as the vaccine rollout continues, social engineering lures are being leveraged in malware,...

FBI: Spike in Vishing Attacks Seeking Escalated Access, Credential Theft

by Jessica Davis

Threat actors are increasingly using voice phishing, or vishing, in targeted attacks on remote workers in an effort to steal credentials, escalate privileges, and gain proliferated network access,...

CISA: Poor Cyber Hygiene Exploited to Compromise Cloud Security Services

by Jessica Davis

Threat actors are successfully exploiting organizations with poor cyber hygiene to compromise cloud security services, according to a new Department of Homeland Security Cybersecurity and...

Can Healthcare Shore Up Insider Threats, Transparency Needs in 2021?

by Jessica Davis

Ransomware is often the prime headline-stealing topic when it comes to cybersecurity and risks to the healthcare sector. But many entities often overlook the dominance of insider threats and its...

Report: COVID-19 Telehealth Risks and Best Practice Privacy, Security

by Jessica Davis

Highlighting the risks posed by lifted restrictions on communication apps amid the COVID-19 pandemic, new research published in the Journal of the American Medical Informatics Association urged...

Phishing Campaigns Targeting Office 365 Credentials, Spoofing Exchange

by Jessica Davis

Recent spear-phishing campaigns are again targeting Microsoft Office 365 users in an effort to steal user credentials, while one campaign spoofs Microsoft Exchange Online Protection (EOP),...

COVID-19-Related Phishing Lingers, as New Attacks Use Vaccine Themes

by Jessica Davis

New reports from Armorblox and KnowBe4 show threat actors are continuing to prey on fears around the global COVID-19 pandemic, leveraging lures designed to increase the likelihood of success....

FBI: Business Email Compromise Attacks Abuse Email Auto-Forwarding

by Jessica Davis

The FBI recently released a joint Private Industry Notification, warning organizations that hackers are actively abusing email auto-forwarding on web-based email clients during business email...

Hackers Targeting COVID-19 Vaccine Supply Chain Via Phishing Campaigns

by Jessica Davis

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency released an alert, urging COVID-19 vaccine supply chain organizations to review a new IBM X-Force report...

AstraZeneca Targeted by Nation-State Actors Via Phishing Attacks, Malware

by Jessica Davis

Nation-state threat actors with ties to North Korea allegedly launched a phishing campaign against AstraZeneca in an effort to gain access to the pharma giant’s systems via malware,...

Threat Actors Spoofing Legitimate FBI Site Domains, Poses Cyberattack Risk

by Jessica Davis

The FBI released an alert warning of a new cybercriminal campaign that spoofs the internet domains and email addresses related to the FBI, which poses the risk of future cyberattacks and other...

Sanford Health, DSU Launch CyberHealth Innovation Hub

by Jessica Davis

Dakota State University (DSU) and Sanford Health announced the launch of a new initiative, which will create a CyberHealth innovation hub designed to combine the strengths of each organization to...

50% of Advanced Phishing Attacks Evade Leading Secure Email Gateways

by Jessica Davis

Nearly half of all advanced phishing attempts, such as spear-phishing and social engineering attacks, bypass leading secure email gateways (SEGs), as hackers shift into more advanced schemes that...

TrickBot Spear-Phishing Campaign Deploys Malware for Remote Access

by Jessica Davis

Area 1 Security detected a widespread spear-phishing campaign tied to the notorious TrickBot threat actors, which is targeting victims with fake termination emails in an effort to deploy...