We've All Been Wrong: Phishing Training Doesn't Work

Categorieën: Diensten | Vakmensen Zakelijke goederen Financieel Kantoor Marketing Retail Detailhandel Industrie Machines Leeftijd: 14 t/m 18 jaar 19 t/m 30 jaar 31 t/m 64 jaar

Laden...

19 uren geleden

Html
Tekst

Teaching employees to detect malicious emails isn't really having an impact. What other options do organizations have?

July 3, 2025

Signup

Weekly Edition

The latest news and insights for cybersecurity professionals

- The Latest News and Features -

TOP STORY

We've All Been Wrong: Phishing Training Doesn't Work‎‎‎‎ Teaching employees to detect malicious emails isn't really having an impact. What other options do organizations have?‎‎‎‎ Keep Reading →

Like SEO, LLMs May Soon Fall Prey to Phishing Scams‎‎‎‎ Just as attackers have used SEO techniques to poison search engine results, they could rinse and repeat with artificial intelligence and the responses LLMs generate from user prompts.‎‎‎‎

Chrome Zero-Day, 'FoxyWallet' Firefox Attacks Threaten Browsers‎‎‎ Separate threats to popular browsers highlight the growing security risk for enterprises presented by the original gateway to the Web, which remains an integral tool for corporate users.‎‎‎

Scattered Spider Hacking Spree Continues With Airline Sector Attacks‎‎‎ Microsoft has called the hacker collective one of the most dangerous current cyber threats.‎‎‎

Hired Hacker Assists Drug Cartel in Finding, Killing FBI Sources‎‎‎ According to a government report, El Chapo's Sinaloa drug cartel used a hacker to spy on people connected to the FBI's 2018 investigation against the kingpin, which led to deadly consequences.‎‎‎

AI-Themed SEO Poisoning Attacks Spread Info, Crypto Stealers‎‎‎ Malicious websites designed to rank high in Google search results for ChatGPT and Luma AI deliver the Lumma and Vidar infostealers and other malware.‎‎‎

Russian APT 'Gamaredon' Hits Ukraine With Fierce Phishing‎‎‎ A Russian APT known as "Gamaredon" is using spear-phishing attacks and network-drive weaponization to target government entities in Ukraine.‎‎‎

Scope, Scale of Spurious North Korean IT Workers Emerges‎‎‎ Microsoft warns thousands of North Korean workers have infiltrated tech, manufacturing, and transportation sectors to steal money and data.‎‎‎

Silver Fox Suspected in Taiwanese Campaign Using DeepSeek Lure‎‎‎ The attack uses sideloading to deliver a variant of the popular Gh0stRAT malware and lures victims by posing — among other things — as a purported installer for DeepSeek's LLM.‎‎‎

Initial Access Broker Self-Patches Zero Days as Turf Control‎‎ A likely China-nexus threat actor has been exploiting unpatched Ivanti vulnerabilities to gain initial access to victim networks and then patching the systems to block others from breaking into the same network.‎‎

- Commentary -

Opinions from thought leaders around the cybersecurity industry

1 Year Later: Lessons Learned From the CrowdStrike Outage‎ The ever-growing volume of vulnerabilities and threats requires organizations to remain resilient and anti-fragile — that is, to be able to proactively respond to issues and continuously improve.‎

Why Cybersecurity Should Come Before AI in Schools‎ The sooner we integrate cybersecurity basics into school curriculum, the stronger and more resilient our children — and their futures — will be.‎

More Commentary →

- Upcoming Events -

Thursday, July 17,2025 at 1pm EST

Best Practices for Cloud Detection and Response: Real-World Lessons from Multi-Cloud Attacks

Tuesday, August 12, 2025 at 1pm EST

Shields Up: Defending Against Advanced Persistent Threats

| Live Virtual Event | Thursday, June 26th, 2025 | 11:00am - 3:00pm ET |

Strategic Security for the Modern Enterprise

More Events →

- More Resources -

WHITE PAPER

AI for SecOps: Dispelling the Hype and Uncovering Value