-
National Security 2030: Social Media and Emerging Cyberthreats – the RSAC2024 files
Jenny Reich’s RSA Conference session highlighted the challenge to national security posed by social media and emerging cyberthreats. #RSAC2024 Continue Reading
-
Recent news – May 17
Recent news: need for cyber hygiene in critical infrastructure organizations, addressing vulnerabilities across a Windows environment, and SIM swappers targeting mobile carrier employees. Continue Reading
-
The Modern Cyberthreat Landscape Demands a Security-Driven Rethink of Backup Strategies
The cyberthreat landscape, especially ransomware, has elevated backup strategies to a critical business concern. This shift necessitates a reevaluation of backup philosophies, approaches, and scalability from a security perspective. New white paper from Osterman Research; commissioned by OpenText. Continue Reading
-
RSA Conference 2024 – getting there
Getting to the RSA Conference in San Francisco began with a conversation with a C-level executive about BEC incidents, phishing threats, and cybersecurity training. A customer fell victim to email thread hijacking, resulting in a $500k payment redirected to a threat actor. Despite improved awareness, phishing remains a concern. The executive fears state-sponsored attacks the… Continue Reading
-
Some thoughts on Cybersixgill’s State of the Underground 2024 report
Cybersixgill’s State of the Underground report highlights declining credit card fraud, reduced forum activity, critical CVEs, rising stealer malware, and increased compromised endpoints for sale. Ransomware attacks decreased, but payouts rose sharply, emphasizing the ongoing threat. Continue Reading
-
Some thoughts on AvePoint’s AI and Information Management Report 2024
AvePoint’s inaugural AI and Information Management Report emphasizes the critical link between data readiness and AI success. Organizations with robust information management disciplines are more likely to achieve early and sustained AI success. The report also underscores the importance of distinguishing between short-term and long-term AI success, and highlights the necessity of employee training in… Continue Reading
-
Some thoughts on Perception Point’s 2024 Annual Report on cybersecurity trends and insights
Perception Point’s 2024 cybersecurity report reveals alarming trends: 20% of emails are illegitimate, 70% of attacks are phishing, and AI is being used for malicious campaigns. The report also highlights threats to SaaS apps and the hospitality sector. This data underscores the urgent need for robust email and cyber security measures. Continue Reading
-
Some thoughts on NetLine’s 2024 State of B2B Content Consumption and Demand Report
NetLine’s annual report reveals insights from 6.2 million leads acquired in 2023. eBooks were popular but led to less buying decisions within 12 months. Playbooks and case studies showed strong purchase intent. Interest in AI-related content surged 5x in 2023 and is projected to nearly double in 2024. Get the report on NetLine’s site. Continue Reading
-
Some thoughts on the FBI Internet Crime 2023 report
The FBI’s 2023 internet crime report, based on IC3 data, revealed a surge in complaints, with 40% of the lifetime total received in the last four years. A $50 million BEC incident saw $46 million recovered. Ransomware incidents are underreported, with phishing being the most common crime type, but investment fraud remains the costliest. Continue Reading
-
Recent news – April 8
Recent news: weaponization of AI to create effective phishing scams, time to click for phishing links, and the impact of generative AI on security awareness training. Continue Reading