Cybersecurity Starts in the Boardroom
I have been travelling recently and have missed a couple of CISA announcements on software security updates: Samba Releases Security Updates | CISA Drupal Releases Security Updates to Address Vulnerabilities in H5P and File (Field) Paths | CISA CISA also recently released a joint advisory with other US agencies, explaining …
Continue reading “Email cyber attacks whilst you are off on your Christmas holidays – some advice”
Google is recognising the impact its services have on the success of smaller businesses, and how scammers are taking advantage to exploit those same businesses. The article covers the legal actions Google has taken; the scams that are being run in its name and advice on how to deal with …
Continue reading “Google action to protect small businesses”
I published an article yesterday on CyberAwake looking at how gift cards are misused by threat actors: How Gift Cards are exploited by Cyber Criminals – CyberAwake
Threat actors have to find ways of breaking down our cyber security training – that is where social engineering comes in. They want to find some way to get you to do what they want – this usually means exploiting your trust, but a bt of stress in there to …
Continue reading “Stress – the classic social engineering tactic”
McAfee Fake Antivirus Phishing Campaign is Back! – SANS Internet Storm Center …and… New zero-day vulnerability in Windows being exploited Phishing emails in the wild – how can this infect you? The story of a phishing email I have written a lot lately about phishing campaigns, all of which have …
