Don’t Get Tricked: How to Spot Phishing Before You Take the Bait
October means Fall, arguably the best season of the year, because it means cooler weather, scary movies, Halloween, and more than a few tricks and treats. October also happens to be Cybersecurity Awareness Month, so what better time to talk about one of the oldest tricks on the internet? Working in cybersecurity, phishing is something […]
Beyond the Browser: The Questions That Expanded the Attack Surface
Explore how emerging attack vectors like PDF forms in Outlook’s preview pane can exploit trusted environments, challenging traditional security assumptions.
The Fellowship of the Phish: PayPal’s Perilous Request Feature
Discover how attackers exploit legitimate features in PayPal’s system to execute sophisticated phishing scams and what we can learn from creative misuse.
Tartar Sauce for your Phishing Program
Ready-to-go open-source resources to refine your phishing awareness campaigns. These tools will help combat security risk while not being overly intrusive.
CyberScream – Hacking Like a Ghost(face)
In this webcast, we’re discussing breaches and horror movies. Grab your hunting knife and get ready to hack (and slash) through some noteworthy news.
Still SMiShing You – SMS Scams.
Have you ever gotten a strange text message on your phone that you don’t recognize? Well, be careful because you don’t have to use a computer to be…
Social Engineering – Why hack it, when people are just giving away their information!
More and more criminals have turned to cyber crime as a means to steal information and intrude on other people’s privacy.
Why Do Phishing As Part of Security Testing
I was recently watching a web cast on incident response and found myself thinking about the cause of the example incident.
Spear Phishing: “You guys are Shady!”
This post is part of our Professionally Evil series of posts that discuss some of the experiences we have had as Security Consultants.
Gone Phishing
Many organizations do not include phishing in their annual penetration tests, as they believe that most phishing emails will be stopped by their email…