A quick Saturday digest of cybersecurity news articles from other sources.The file type used by Windows 10’s settings page can be used to trick Windows into running files it’s supposed to block.
87% of companies experienced an ...
Continue Reading →A quick Saturday digest of cybersecurity news articles from other sources.Looking to run a phishing attack against your team? Here’s a article from Infosec institute on the top 9 free phishing simulation products.
Your Nigerian Prince is a 67 year old from LouisianaSure looks like a prince to me. Like Prince ...
Continue Reading →
Email security company Mimecast recently released its Email Security Risk Assessment, and found that email account hijacking is the fastest growing threat vector. Also known as impersonation attacks, email account hijacking allows an attacker to impersonate the person whose account has been compromised. This is the vehicle used in wire transfer fraud, invoice fraud, and other financial frauds. Some of the statistics in the report were enlightening. ...
People often ask me if it is dangerous to simply open an email, if it is possible to get a malware inflection just by reading an email. My answer has been a qualified “not at this time.” Unfortunately, this is no longer true. It is possible to get a malware installation from the new DDE (Dynamic Data Exchange) exploits reveal by Sophos Labs on October 13 2017. This can be accomplished without an attachment or link if the email is ...
Continue Reading →
Over the last four posts, we have focused on the US-CERT alert, but cybersecurity firm Symantec has actually been working this case since 2011. Their report on Dragonfly can be found on their website. While they are cautous when providing attribution, reading between the lines indicates that Dragonfly is probably a Russian based group, possibly working on ...
NEW!SIX 60 MINUTE CLASSES
Learn something new! Attend one, some or all.
I know many of the other speakers and this looks like a terrific lineup. Block out the day and get some valuable information you ...
Continue Reading →
SIX 60 MINUTE CLASSES
Learn something new! Attend one, some or all.
I know many of the other speakers and this looks like a terrific lineup. Block out the day and get some valuable information you ...
Continue Reading →
There are four ways that a typical business user on a Microsoft Outlook/Exchange/Office 365 platform can utilize. While these may not be perfect, and all of them have issues, applying these solutions will help prevent your users for falling victim to phishing emails. These solutions are additive, and each additional solution deployed provides a further layer of protection.
Junk Mail Filter – Outlook comes with a built-in Junk Mail filter that, ...
Continue Reading →
Here is a quick little survey to help you determine how likely you are to be the victim of a cyber-attack or cyber-criminal exploit. Give yourself a point for each “Yes” answer.
I recently gave a presentation titled “Email Security – Resist That Click” on May 23 2017 at the Phipps Theatre in Hudson WI. This event was sponsored by First State Bank and Trust of Bayport MN. I was also asked to present this topic at the MnCCC Conference (Minnesota Counties Computer Consortium) in Alexandria MN on Wednesday June 7, 2017. This presentation was titled “The War for Tour Inbox.”
First State Bank and Trust had my presentation video recorded, and it ...
Continue Reading →