Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Invisible Threat: How Polymorphic Malware is Outsmarting Your Email Security

Approximately $350 million in preventable losses stem from polymorphic malware, a malicious software virus that constantly changes its code to evade detection. With 18% of new malware using adaptive techniques that challenge traditional defenses, now is the time to enhance your organization's security posture. James McQuiggan, CISO Advisor at KnowBe4, shares valuable insights and proactive strategies to defend against polymorphic malware attacks. You'll discover.

Quantum Route Redirect: Anonymous Tool Streamlining Global Phishing Attack

KnowBe4 Threat Labs has uncovered an emerging advanced phishing campaign targeting Microsoft 365 users globally to steal their credentials. The attackers are wielding a powerful new tool that’s completely changing the game for cybercriminals—turning what used to be complex, technical phishing setups into simple one-click launches that can bypass certain technical controls. Welcome to the era of “Quantum Route Redirect.".

Protecting Your Freight Operations: Essential Cybersecurity Guide for Logistics Networks

Freight forwarders face an escalating cyber threat landscape that can destroy operations within months. According to IBM research, a single data breach in the transport sector costs an average of $4.18 million. For small and medium freight forwarders, the consequences prove devastating: 60% of small companies go out of business within six months of a cyberattack.

Phishing Emails Use Invisible Hyphens to Avoid Detection

A phishing campaign is using invisible characters to evade security filters, according to Jan Kopriva at the SANS Internet Storm Center. The emails use soft hyphens to break up the subject line “Your Password is About to Expire” so the messages aren’t flagged as malicious. The email client doesn’t render the hyphens, however, so the user sees a normal sentence.

Step-by-Step: Producing a Staff Training Book for Phishing Awareness Workshops

Nowadays, with the development of technology, more teams are operating remotely. Companies have realized that it's important that these teams also get some kind of cybersecurity training. Data breaches happen often and no company wants its private data leaking and being out in the world. Seeing your team recognize and report a phishing email with confidence is what every IT security department aims for. When your training materials are finally ready and employees are actively using them, you realize that you've created something that strengthens your organization's awareness and preparedness.

Arsen Launches Smishing Simulation to Help Companies Defend Against Mobile Phishing Threats

Arsen, the cybersecurity company dedicated to helping organizations defend against social engineering, today introduced its new Smishing Simulation module: a feature designed to let companies run realistic, large-scale SMS phishing simulations across their teams. Designed to address the growing wave of mobile-based attacks, the new module gives CISOs, MSSPs, and risk officers a practical way to assess exposure and train employees to spot and respond to malicious SMS messages.

Phishing Campaign Impersonates Google Careers Recruiters

A phishing campaign is impersonating Google Careers to target job seekers, according to researchers at Sublime Security. “The scam is simple,” the researchers write. “An adversary sends an ‘are you open to talk?’ message impersonating an outreach email from Google Careers. If the target clicks the link, they’re taken to a landing page designed to look like a Google Careers meeting scheduler. From there, they’re taken to the phishing page.

Phishing Campaign Impersonates Password Managers

A phishing campaign is impersonating LastPass and Bitwarden with phony breach notifications, BleepingComputer reports. “An ongoing phishing campaign is targeting LastPass and Bitwarden users with fake emails claiming that the companies were hacked, urging them to download a supposedly more secure desktop version of the password manager,” BleepingComputer writes.

Alert: Watch Out For Phishing Attacks in the Wake of the AWS Outage

Cybernews warns that threat actors will likely take advantage of the recent AWS outage to launch phishing attacks against affected users. Attackers frequently exploit high-profile events to carry out social engineering attacks while people are confused or stressed, as these users are more likely to act without careful consideration.