Cybersecurity Research

Featured Article

Human Cyber-Risk Report – Critical Infrastructure

Discover How a Security Behavior Change Program Helps Mitigate Human Cyber-Risk in the Critical Infrastructure Sector. This Report Reveals Insights from an Analysis of 15M Phishing Simulations & Email Attacks by 1.6M People, Focusing on Energy & Utilities Companies.

Read the article

Topics:

Adding Customization Features To Phishing Pages With Cloudflare Workers

Learn How Malicious Actors Use Cloudflare Workers To Build an On-The-Fly Custom Feature for Phishing Web Pages. Find Out How Our Offensive Security Engineer Figured It Out.

Threat Feed Week 37

Week 37 Threat Feed | SharePoint, DocuSign, Hoxhunt Impersonations, PDF, and More QR Codes

Threat Feed Week 36

Week 36 Threat Feed | Disney+, Xerox, Sharepoint Impersonations and a Fake Voicemail Notification

Threat Feed Week 35

Week 35 Threat Feed | Microsoft Planner, SharePoint, Qobuz Impersonations, and Fake Voicemail Notification

Threat Feed Week 34

Week 34 Threat Feed | DHL QR Code, DocuSign Impersonations, and Fake Internal Storage Notification

Threat Feed Week 33

Week 33 Threat Feed | DocuSign and Microsoft Impersonations

Threat Feed Week 37

Week 37 Threat Feed | SharePoint, DocuSign, Hoxhunt Impersonations, PDF, and More QR Codes

Threat Feed Week 36

Week 36 Threat Feed | Disney+, Xerox, Sharepoint Impersonations and a Fake Voicemail Notification

Threat Feed Week 35

Week 35 Threat Feed | Microsoft Planner, SharePoint, Qobuz Impersonations, and Fake Voicemail Notification

Threat Feed Week 34

Week 34 Threat Feed | DHL QR Code, DocuSign Impersonations, and Fake Internal Storage Notification

Threat Feed Week 33

Week 33 Threat Feed | DocuSign and Microsoft Impersonations

Threat Feed Week 32

Week 32 Threat Feed | Bank of America, FedEx, and Fake Account Closures

Adding Customization Features To Phishing Pages With Cloudflare Workers

Learn How Malicious Actors Use Cloudflare Workers To Build an On-The-Fly Custom Feature for Phishing Web Pages. Find Out How Our Offensive Security Engineer Figured It Out.

Insights into human cyber-risk in critical infrastructure

Key takeaways of the Human Risk Report

Human Cyber-Risk Report – Critical Infrastructure

Foxit PDF File Execution Vulnerability Reported and Fixed

Learn how our Offensive Security Engineer discovered a vulnerability in Foxit PDF clients and created an exploit to demonstrate it. Read on for the details and source code used.

Foxit PDF Vulnerability Reported and Fixed

Learn how our Offensive Security Engineer discovered a vulnerability in Foxit PDF clients and created an exploit to demonstrate it. Read on for the details and source code used.

Who's better at phishing, humans or ChatGPT?

Our study compared win rates on simulated phishing attacks between human social engineers and ChatGPT

Many cybersecurity trends and takeaways for 2022 revolve around Ukraine

From the cyber war spilling out of Ukraine to the evolution of AI and the rise of Zero Trust architecture and Security Behavior Change Programs, 2022 contained multiple inflection points

Gone Phishin' Volume 7: Early to mid October, 2022

Some of the news highlights for the last two weeks in the wild, wild world of cybersecurity.

Gone Phishin' Volume 6: Mid-to-late September, 2022

It's another action-packed edition of our Gone Phishin' column, where we keep you updated on the biggest, bestest stories in cybersecurity of the last two weeks.

GTA 6 leaks and Uber hacked through social engineering

Over the course of three days, two massive American companies were rocked by two equally massive leaks using one simple phishing technique.

Gone Phishin' Volume 5: early-to-mid September 2022

Your bi-weekly update on the biggest news in phishing, hacking, and cybersecurity.

Gone Phishin': Volume 4 - Late August, 2022

Your bi-weekly round up of the latest news you can use about phishing, hacks, and other attacks.