Security awareness

Holiday Season Cybersecurity Scams and How to Avoid Them

Holiday Season Cybersecurity Scams and How to Avoid Them

Holiday Season Cybersecurity Scam Awareness The holiday season has arrived, and in this period, cybercriminals intensify their operations in order to monetiz

7 research-backed tips to improve your security awareness training

7 research-backed tips to improve your security awareness training

We love talking to clients and security practitioners about what’s working at the ground level of their security awareness programs. However, sometimes it’s helpful to take a step back and look at the security awareness space from a research data perspective. We spoke with Michael Osterman from Osterman Research to dig into 7 research-backed tips to improve your security awareness training.

How to prepare for a ransomware attack

How to prepare for a ransomware attack

The threat of ransomware Ransomware has become a common and well-known threat to organizations. Its success is largely based on the fact that it is a simple

OWASP Top 10 #10: Unprotected APIs [Updated 2019]

OWASP Top 10 #10: Unprotected APIs [Updated 2019]

Modern applications are becoming more complex, more critical and more connected. The difficulty of achieving application security has increased exponentially

Modern Physical Security Awareness Is More Than Dumpster Diving [Updated 2019]

What is Physical Security The term "physical security" refers to the security measures that are put in place in order to deny unauthorized access to a facil

Mailsploit: The Undetectable Spoofing Attack [Updated 2019]

Mailsploit: The Undetectable Spoofing Attack [Updated 2019]

Pentester Sabri Haddouche just uncovered a major new email spoofing tactic. Named Mailsploit, the technique leverages bugs in email clients and allows hacker

OWASP top 10 A7: Insufficient attack protection

“Security  is always seen as too much until the day it’s not enough.” This quote by William H. Webster, an American attorney, jurist and current Chairman

How to identify and eliminate VPN vulnerabilities

How to identify and eliminate VPN vulnerabilities

Introduction In April 2019, the United States’ CERT Coordination Center released information about vulnerabilities affecting various Virtual Private Network

What are one-time passwords and their pros and cons?

What are one-time passwords and their pros and cons?

When you go on a vacation, you’re probably extremely vigilant with the security of your home. You lock all the windows and doors, and even activate the secur

5 Security Awareness Best Practices [Updated 2019]

5 Security Awareness Best Practices [Updated 2019]

When asked who needs to take charge on the security awareness front, Varun Kohli says that employers must ensure that their workers know how to steer clear o