Why employees keep falling for phishing (and the science to help them)

Phishing is an ever-present cybersecurity issue. And people keep falling for it. Here is why and how people keep falling for phishing emails.

Phishing attacks doubled last year, according to Anti-Phishing Working Group

This article will recap findings from the 2020 fourth quarter edition of the APWG Phishing Activity Trends Report.

The Phish Scale: How NIST is quantifying employee phishing risk

The NIST Phish Scale is a useful tool for quantifying phishing risk for your employees.

6 most sophisticated phishing attacks of 2020

2020 saw a number of major phishing attacks — and an increase in the attacks. Here are some of the most sophisticated phishing attacks of the year.

JavaScript obfuscator: Overview and technical overview

JavaScript cyberattacks are on the rise, meaning you need to be extra careful when opening your emails.

Malicious Excel attachments bypass security controls using .NET library

A recent threat group called Epic Manchego is using a new technique to create Excel files to bypass antivirus (AV) and and get low detection rates. By explor

Phishing with Google Forms, Firebase and Docs: Detection and prevention

The COVID-19 pandemic spurred a massive shift toward telework as companies tried to both stay operational and safe. One of the biggest impacts of this shift

Phishing domain lawsuits and the Computer Fraud and Abuse Act

Introduction The worlds of trademark law and marketing seem to be constantly at odds with each other, occasionally collapsing into a court of law where they

Phishing: Reputational damages

Introduction When phishing and damages are thought of in the same sentence, the typical thoughts of many are the loss of data due to theft, identity theft a

Spearphishing meets vishing: New multi-step attack targets corporate VPNs

How cybercriminals adapt Cybercriminals come out of the woodwork to take advantage of major events. Anything from the Olympics to the US elections is an opp