Mimecast Acquires User Education Startup Elevate Security 

January 4, 2024 at 01:06PM Mimecast has acquired Elevate Security, a startup specializing in user-education technology. The acquisition aims to enhance Mimecast’s Awareness Training product line with Elevate Security’s risk scoring algorithm and incident triage technology. Financial details were not disclosed. Mimecast plans to support Elevate Security’s existing customer base. Elevate Security, founded six years … Read more

Blockchain dev’s wallet emptied in “job interview” using npm package

December 28, 2023 at 06:26AM Blockchain developer Murat Çeliktepe was targeted by a LinkedIn recruiter for a web development job. As part of the interview, he was asked to debug npm packages from a GitHub repository, leading to his MetaMask wallet being drained of over $500. This scam has also targeted other developers, highlighting the … Read more

Crypto scammers abuse Twitter ‘feature’ to impersonate high-profile accounts

December 21, 2023 at 04:15AM Cryptocurrency scammers are exploiting a Twitter “feature” to create deceptive URLs that appear to belong to legitimate accounts, redirecting users to unrelated posts promoting crypto scams, fake giveaways, and fraudulent channels. This technique targets high-profile accounts and could potentially lead to theft of crypto assets and NFTs. Users are advised … Read more

Are We Ready to Give Up on Security Awareness Training?

December 19, 2023 at 07:15AM Organizations are prioritizing security awareness training despite its low effectiveness. Employees express the need for practical experiences and time allocation for training. Moonlock’s Cybersecuritoons offers short-form cybersecurity content to fit into busy schedules. Feedback transforms and shapes the delivery of training, promoting a security culture and active participation. This evolving … Read more

The Role of the CISO in Digital Transformation

November 28, 2023 at 06:09AM Modern-day demands require organizations to be flexible and digitally savvy, with a focus on remote work and cloud computing. The role of the chief information security officer (CISO) is crucial in ensuring secure digital transformation. The CISO must balance innovation with security, collaborate with other leaders, and engage early in … Read more

The Role of the CISO in Digital Transformation

November 21, 2023 at 03:59PM The role of the chief information security officer (CISO) is becoming increasingly important as organizations modernize their workflows and migrate to the cloud. The CISO must balance innovation and security, collaborate with other leaders, and ensure security is considered at all stages of the process. A strong CISO collaborates with … Read more

Leaky DICOM Medical Standard Exposes Millions of Patient Records

November 10, 2023 at 01:12PM Researchers have discovered that around 60 million personal and medical records may have been exposed due to the use of a legacy protocol in medical equipment. The researchers found that many users of the protocol do not implement security controls, leading to data leakage. The protocol does have security measures, … Read more

From Snooze to Enthuse: Security Awareness Training That Sticks

October 20, 2023 at 05:32PM Employees experience a physical “escape room” to enhance security awareness. They role-play as criminal social engineers and identify vulnerabilities in a mock office space. The aim is for employees to understand the importance of physical security and remember practices like keeping whiteboards clean, locking laptops, and hiding or shredding documents. … Read more

Europol Strike Wounds Ragnar Locker Ransomware Group

October 19, 2023 at 03:29PM Law enforcement has taken down Ragnar Locker’s Tor negotiation and data leak sites, stating that they were seized in a coordinated international action. Europol, along with officials from the US and Japan, is involved in taking action against the ransomware group. Experts warn that this may only be a temporary … Read more