Theft via Instagram – just promise something “to good to be true”

Social Engineering and Email Cyber Security Training

Nothing complicated about this – a simple scam, abusing people’s trust to net $3m. Send a message, pretend to be someone you are not, provide a malicious link and promise the victim something “free”. Crooks steal NFTs ‘worth $3m’ in Bored Ape Yacht Club heist • The Register It could …

CISA adds several Windows vulnerabilities to the ” Known Exploited Vulnerabilities Catalogue”

software patches are essential cybersecurity

The US Government, Cybersecurity and Infrastructure Security Agency (CISA) has added several new Microsoft Windows, vulnerabilities to it’s database. These all need patches – so again it is a good time to check that your “auto-updating” is working or time to get an Octagon IT monitoring package and let experts monitor the …

Bug bounties are a vendor’s shortcut to software vulnerabilities – UPDATED 26 April 2022

This post was first published on 19 April 2022 Following up on the article below, here is a real world example of bug bounties working to improve cybersecurity. The US Government’s Department of Homeland Security (DHS) worked with a group of cyber security analysts, who uncovered 122 vulnerabilities in the …

Zero-day security vulnerabilities exploited in 2021 – UPDATED 25 4 2022

Magnifying glass looking for a zero-day attack

This post was first made on 22 April 2022 I regularly write about the issues around the zero-day vulnerability and our Social Engineering and Email Cyber Security Training course aims to equip individuals and organisations to meet the challenge that the zero-day poses. Google’s Project Zero has reported on it’s …