Tag Archives: social engineering

Podcast: Unboxing a phishing email from the World Health Organization with Shawn Tuma

I was a guest recently on the “Can I Be Phished? Podcast” where we walked through analyzing an example phishing email to look for tell-tale signs of a a classic “Nigerian Prince” type of a phishing attempt. We also discussed current attack trends that we are seeing in our work as cyber incident response first …

Continue reading “Podcast: Unboxing a phishing email from the World Health Organization with Shawn Tuma”

Protect Your Company Against W-2 Business Email Compromise Attacks During Tax Season

The most likely “cyber attack” that your company will face will come in the form of an email. One of the most common forms of email attack is the business email compromise (BEC) and the most popular time of the year for the W-2 version of BEC is right now — tax season. Read the …

Continue reading “Protect Your Company Against W-2 Business Email Compromise Attacks During Tax Season”

Key Lesson All Business Leaders Can Learn From the Anthem Data Breach Case

The 2015 Anthem data breach affected 79 million people and was the largest health-care data breach in U.S. history. The affected consumers sued Anthem in a case that settled for a record $115 million. Now the U.S. Dept. of Health and Human Services’ Office of Civil Rights has reached a settlement with Anthem for a record …

Continue reading “Key Lesson All Business Leaders Can Learn From the Anthem Data Breach Case”

“Hacked” Facebook Account — or Cloned?

Dear friends who keep talking about “hacked Facebook accounts”: When there is an account that is pretending to be your account on Facebook (or other social media platforms) that is sending friend requests to others, in most cases, this does not mean that your account has been “hacked” (i.e., inappropriately accessed by someone other than …

Continue reading ““Hacked” Facebook Account — or Cloned?”

Did hackers record you watching porn? New scam using key elements of phishing and shame hacking

https://youtu.be/BdaXgPawspo Cybercriminals are using yet another new twist on the old email phishing attack: they email people claiming to have infected porn sites with malware that allowed them to take over the recipient’s webcam and record them sitting at their computer watching porn and if they don’t pay up, the video is going public. I discuss …

Continue reading “Did hackers record you watching porn? New scam using key elements of phishing and shame hacking”

Tips for Staying #CyberSecure While Shopping Online for #BlackFriday and #CyberMonday Deals

Cybercriminals need shopping money for the Holidays and one of their favorite times to get yours is when you are shopping on #BlackFriday and #CyberMonday. https://youtu.be/ZPIEiQVQZ2I?t=31s Use these tips to help stay #cybersecure while shopping online for #BlackFriday and #CyberMonday and at any other time: Credit or debit? Use credit cards, not debit cards, for your …

Continue reading “Tips for Staying #CyberSecure While Shopping Online for #BlackFriday and #CyberMonday Deals”

Facebook Requesting Your Nudies to Combat Revenge Porn – My Comments on TV

Recently, news broke that in an effort to combat online revenge porn, Facebook is requesting that you send them your nudie pics! Here are some comments I shared with the Morning Dose television program: https://youtu.be/NdsHydFm9zI

Quiz: How much do you know about cybersecurity?

Here is an interesting little quiz that is actually quite informative. It is by the Pew Research Center so it seems legit. Thanks for originally sharing it, Kevin Keane: How much do you know about cybersecurity? UPDATED: Read what the results show about overall cybersecurity understanding  

Are Smaller Healthcare Practices Required to Report a #Ransomware or Potential Data Breach?

Does the HIPAA Breach Notification Rule apply to all Covered Entities and Business Associates, Even Smaller Ones? To many of you reading this post this question seems ridiculous. You know the answer. However, I get asked this question so frequently that I decided to answer it with a blog post to save time next time …

Continue reading “Are Smaller Healthcare Practices Required to Report a #Ransomware or Potential Data Breach?”