Cybersecurity Research

Featured Article

Human Cyber-Risk Report – Critical Infrastructure

Discover How a Security Behavior Change Program Helps Mitigate Human Cyber-Risk in the Critical Infrastructure Sector. This Report Reveals Insights from an Analysis of 15M Phishing Simulations & Email Attacks by 1.6M People, Focusing on Energy & Utilities Companies.

Read the article

Topics:

Adding Customization Features To Phishing Pages With Cloudflare Workers

Learn How Malicious Actors Use Cloudflare Workers To Build an On-The-Fly Custom Feature for Phishing Web Pages. Find Out How Our Offensive Security Engineer Figured It Out.

Threat Feed Week 37

Week 37 Threat Feed | SharePoint, DocuSign, Hoxhunt Impersonations, PDF, and More QR Codes

Threat Feed Week 36

Week 36 Threat Feed | Disney+, Xerox, Sharepoint Impersonations and a Fake Voicemail Notification

Threat Feed Week 35

Week 35 Threat Feed | Microsoft Planner, SharePoint, Qobuz Impersonations, and Fake Voicemail Notification

Threat Feed Week 34

Week 34 Threat Feed | DHL QR Code, DocuSign Impersonations, and Fake Internal Storage Notification

Threat Feed Week 33

Week 33 Threat Feed | DocuSign and Microsoft Impersonations

Threat Feed Week 37

Week 37 Threat Feed | SharePoint, DocuSign, Hoxhunt Impersonations, PDF, and More QR Codes

Threat Feed Week 36

Week 36 Threat Feed | Disney+, Xerox, Sharepoint Impersonations and a Fake Voicemail Notification

Threat Feed Week 35

Week 35 Threat Feed | Microsoft Planner, SharePoint, Qobuz Impersonations, and Fake Voicemail Notification

Threat Feed Week 34

Week 34 Threat Feed | DHL QR Code, DocuSign Impersonations, and Fake Internal Storage Notification

Threat Feed Week 33

Week 33 Threat Feed | DocuSign and Microsoft Impersonations

Threat Feed Week 32

Week 32 Threat Feed | Bank of America, FedEx, and Fake Account Closures

Introducing the Hoxhunt Behavioral Cybersecurity Report

The Hoxhunt Behavioral Cybersecurity Report reveals insights into how 1.6 million people in over 100 countries responded to 24.7 million phishing simulations, and the findings show that good training works.

Credential harvesting with fake popups

A new sophisticated credential harvesting tactic uses fake Microsoft Windows OS and fake Outlook login popups to trick users into giving hackers their username and password.

A Bug in G Suite Lets Attackers Spread Malware on Your Computer

Attackers could utilize a bug in G Suite to spread malware on the victims systems. Watch the video and read the explanation to know what to watch out for.

Many cybersecurity trends and takeaways for 2022 revolve around Ukraine

From the cyber war spilling out of Ukraine to the evolution of AI and the rise of Zero Trust architecture and Security Behavior Change Programs, 2022 contained multiple inflection points

Gone Phishin' Volume 7: Early to mid October, 2022

Some of the news highlights for the last two weeks in the wild, wild world of cybersecurity.

Gone Phishin' Volume 6: Mid-to-late September, 2022

It's another action-packed edition of our Gone Phishin' column, where we keep you updated on the biggest, bestest stories in cybersecurity of the last two weeks.

GTA 6 leaks and Uber hacked through social engineering

Over the course of three days, two massive American companies were rocked by two equally massive leaks using one simple phishing technique.

Gone Phishin' Volume 5: early-to-mid September 2022

Your bi-weekly update on the biggest news in phishing, hacking, and cybersecurity.

Gone Phishin': Volume 4 - Late August, 2022

Your bi-weekly round up of the latest news you can use about phishing, hacks, and other attacks.