Government March 31, 2015

US State Department Hack Has Major Security Implications

2 min read - The U.S. State Department is the latest government agency to be targeted by cybercriminals, with a phishing email leading to a breach of the network.

Fraud Protection September 30, 2014

How to Bypass Two-Factor Authentication (2FA) and What the Future Holds

3 min read - Even as authentication techniques become more advanced, there are different ways cybercriminals can bypass two-factor authentication (2FA).

Fraud Protection April 1, 2014

The Next Evolution of Spam: Spam Is Not Dead

2 min read - After a new fraud-as-a-service capability was introduced in an online cyber crime community, it became clear that fraudsters are still interested in spam.

X-Force January 2, 2014

A (Beta)Bot in a Phish

6 min read - Recently a colleague sent me a .docx which triggered on our scanning engine. Being the optimist me, I personally view such incidents positively; it either proves the accuracy of our engine if it is a true positive, or offers an…

CISO September 27, 2013

6 Psychological Elements Behind Sophisticated Cyber Attacks

5 min read - Social media and phishing exploits are going to get more sophisticated. Cyber attackers are exploiting influence tactics to create trust and risk. A look behind six psychological elements behind sophisticated cyber attacks.

Data Protection July 3, 2013

FBI Warns of Increase in Spear-Phishing Attacks

2 min read - Last week, the FBI issued a warning about an increase in spear-phishing attacks targeting multiple industry sectors.

Banking & Finance February 7, 2013

Back to Basics: Malware Authors Downgrade Tactics to Stay Under the Radar

7 min read - Malware authors have created variants to monitor Web sessions between a customer and their bank in order to change data in real time and steal information.

Endpoint March 13, 2012

SIM-ple: Mobile Handsets Are Weak Link in Latest Online Banking Fraud Scheme

3 min read - Two online banking fraud schemes, which defeat banks' one-time password (OTP) authorization systems, show how personal data is vulnerable through mobile.