Your Employees are Already Using GenAI. How Will You Communicate the Security Risks?
Did you know that 75% of people are already using Generative AI (GenAI) at work? GenAI tools are defined as any artificial intelligence that can generate content such as text, images, videos, code, and other data using generative models, often in response to prompts. Examples include Open AI’s ChatGPT, GitHub’s Copilot, Claude, Dall-E, Gemini, and […]
On Your Marks, Get Set, Phish: Protecting Against Increased Phishing Scams during the Olympic Games
Olympic fever is well underway, with the Olympic Games taking place in Paris during July and August this year. During the Tokyo Olympics 2020, the spectacle drew more than 3 billion viewers, and 2024 is set to attract even more interest. However, the Tokyo Olympics also saw cybersecurity teams facing 450 million cyber attacks, 2.5x […]
The Hidden Economy of Vishing Attacks
The phishing landscape has evolved significantly in recent years, encompassing various types of attacks. Many companies have developed taxonomies to categorize different phishing attacks, similar to the taxonomy presented by BlueVoyant. This taxonomy outlines several types of phishing attacks, such as: Email Phishing: The classic phishing attack involves sending emails to different entities within an […]
Defending Against Persistent Phishing: A Real-World Case Study
One of the scariest acronyms in a CISO’s knowledge base is APT – Advanced Persistent Threat. This term refers to someone determined to harm you and can do so in sophisticated ways. A colleague once taught me that the real threat isn’t just the advanced tools of the adversary, but their persistence. This means the […]
Let the Games Begin! A Security Awareness Training (and a personal story) Inspired by the Olympic Spirit
It’s Olympic Games time again, and we could all do with a great distraction from the past 18 months! Unfortunately, a distracted audience is exactly what many cyber-attackers are hoping for, too. The evidence is huge that the Olympics is a prime time for attackers to launch phishing scams that leverage the hype and the […]
Navigating Yesterday’s Battles: Insights from Cybersecurity Reports
We often find ourselves entrenched in yesterday’s battles, grappling with legacy systems, applying products launched last year, responding to attack methods from last year’s, aligning with regulations published 3 years ago, and so on. While we aim to anticipate and prepare for tomorrow’s challenges, the reality is that much of our focus remains on addressing […]
Phishing as a Service: A Headache for Security Professionals
In the landscape of cybersecurity threats, one adversary business module and implementation theme stand out as particularly concerning for security professionals: As a Service (as-a-Service). This clandestine industry, driven primarily by financial motives, has become increasingly sophisticated, posing significant challenges to organizations worldwide. One example of this phenomenon is ransomware as a service. Traditionally, phishing […]
The Complete Cybersecurity Training Guide for Banks
How to deploy and manage an effective, easy, and frictionless awareness training program for bank employees Your bank employees are on most cyber hackers’ radar. In fact, at least one of your employees is probably receiving a new phishing email while you’re reading these lines. While most industries worldwide are affected by the imminent peril […]
3 Expert Tips to Launch Your Cyber Security Awareness Training Program In New Heights
Every individual and organization in this digital age is exposed to cyber threats. Cyberattacks often catch you off guard. This is true, especially for new employees or those who have yet to be trained to counter these attacks. For instance, a seemingly harmless email from the organization’s IT Department could be a phishing scam. To […]
Content Isn’t King – A Lesson from My Daily Toothbrushing for Cyber Security Awareness Training
Embark on a journey with me through my morning routine, where using an electric toothbrush uncovered profound insights into the world of cyber security awareness training. As daylight gently fills the room, I encounter my dependable toothbrush – a seemingly ordinary device with an extraordinary twist. This toothbrush, a modern marvel, boasts performance metrics that […]
Penetration Testing and Phishing Simulations – The Dynamic Duo
In the relentless battle against cyber threats, organizations often seek the aid of superheroes to safeguard their precious data and systems. Meet the dynamic duo that forms the backbone of an unbeatable cybersecurity posture – Penetration Testing and Phishing Simulations. Like Batman and Robin, they each bring unique strengths to the table, combining forces to […]
5 Security Guidelines for Summer Chilling
We’re all guilty of only engaging with employees when we need something. It could be that we want them to complete a training module or perhaps check a particular box for a compliance requirement. Well, summer is here, and it’s a great opportunity to provide employees with helpful security tips beyond cybersecurity housekeeping! We’re providing […]
What’s in Store for 2022? Five Security Awareness Training Predictions for the New Year
It’s that most wonderful time of the year again! With record growth projected for today’s security services, join us as we look towards the year ahead, and highlight 5 growing security awareness trends to watch out for in 2022. 1. A new category of Managed Services will emerge: the Managed Security Awareness Provider Managed services […]
Why are COVID-related Phishing Scams so Effective?
Another variant, another phishing scam. It seems like every time a new COVID-19 strain hits the headlines, a new wave of cyberattacks follows in its wake. With the Delta variant, it was scams that asked email users to verify their vaccination status, and with Omicron, the media is already reporting phishing scams centered around an […]
5 Reasons Phishing Simulations Tests Fail
We’ve been running successful phishing simulations for years now, developing proven steps toward employee engagement and behavioral change. Over the course of time, we’ve seen customers come to us, bruised by phishing campaigns gone awry. In our experience, most of these catastrophes come down to a handful of errors we’ve seen repeated time and time […]
6 Tips to Overcoming Global Challenges in Employee Security Awareness Training
Most of our customers are multinational companies employing people worldwide. These customers often encounter resource limitations related to reaching out to their distributed employees and engaging them with security awareness. Such limitations take the form of fewer face-to-face meetings (especially during the past couple of years), less customized content, and a lack of familiarity with […]
Law Firm Cyber Security: Your Reputation is at Risk – Are You Protecting Your First Line of Defense?
Cyber attacks against law firms are on the rise, with an almost 12% increase in law firm security breaches between 2019 and 2020. Unfortunately, threats against law firms and legal organizations continue to rise, ever since the unprecedented data leak of the Panama Papers. More recently, you may have read about a massive database breach […]
Automating Cybersecurity Awareness Training for Employees – Beyond the Buzzword
By Omer Taran, CybeReady Co-Founder & CTO Though the word “automation” was not coined until 1947 by Ford Motor Company to describe the use of automatic devices in the company’s production lines, today it is one of the most widely used terms in the tech industry. To most of us it signifies productivity, efficiency and […]
The Difference Between Learning and Training Could Make or Break Your Cybersecurity Program- Here’s Why
By Mike Polatsek, CybeReady Co-Founder and CSO When a phishing email lands in employees’ inbox, will they take time to review their Awareness Training notes before clicking it? Probably not, which is why traditional awareness training programs offer an ineffective cybersecurity practice. When it comes to teaching employees how to remain vigilant against cybersecurity risks, […]
5 Growing Trends to Watch in Banking Cybersecurity
As Cybercrime Against the Financial Sector Jumps by 238%, What Can Banks Do to Address the Risk? The rise of cybercrime in 2020 was widely reported, but did you realize how much of the threat was targeted at the financial sector? 80% of financial institutions have reported a rise in cyberattacks over the past 12 […]
