 Your new post is loading...
|
Scooped by
Susan Cook
|
This quick post shows the Longlining Infograph provided by proofpoint. This is a more targeted phishing attack utilising multiple types of attack, including zero day exploits.
|
Scooped by
Susan Cook
|
At a recent security conference on social engineering in Las Vegas, a social engineer successfully managed to glean information from a manager at a major.
|
Scooped by
Susan Cook
|
Attack on money-saving coupon site prompts speculation from IT security community.
|
Scooped by
Susan Cook
|
Greentech Media Phishing Jumps to 29% of Cyberattacks Greentech Media A new report from Verizon, 2013 Data Breach Investigations Report, found that social tactics increased, with phishing and pretexting being the most widely used tactics.
|
Scooped by
Susan Cook
|
Debunking myths, analyzing trends and sharing best practices in IT security and compliance.
|
Scooped by
Susan Cook
|
Why is it so easy for hackers to get malicious viruses on our computers and steal our information?
|
Scooped by
Susan Cook
|
The seven human sins of social engineering which hackers and thieves exploit to steal data from unsuspecting victims.
|
Scooped by
Susan Cook
|
Social engineering, employee gaffes require full attention, says expertTechTargetCompanies often rely too heavily on security technologies and ignore the impact a "human firewall," can have on security explains noted software security expert Hugh...
|
Scooped by
Susan Cook
|
Social engineering scams involve a mix of technical skills and psychological manipulation. Chris Cardinal discovered someone running such a scam on Amazon using his account: the scammer contacted Amazon pretending ...
|
Scooped by
Susan Cook
|
Jordan Harbinger, a social engineer by trade and by nature, takes the floor at DerbyCon to talk about the use of social engineering to elicit confidential data.
|
Scooped by
Susan Cook
|
Many online media have recently been focusing on the topic of Internet fraud. Business leaders, computer security experts, and lawyers, however, do not fully understand the kinds of frauds that can be conducted through or with the aid of the Internet, or the ramifications of such frauds for the future of e-commerce. This paper has three principal goals. First, it will identify the principal types of Internet frauds that law enforcement and regulatory authorities are observing. Second, it will explain the major psychological influence techniques that criminals use in conducting such frauds (including the similarities between those techniques and "social engineering" techniques of hackers). Third, it will propose some responses to the problem involving both government and the private sector.
|
Scooped by
Susan Cook
|
Social engineering is evolving so rapidly that technology solutions, security policies, and operational procedures alone cannot protect critical resources. Even with these safeguards, hackers commonly manipulate employees into compromising corporate security. Victims might unknowingly reveal the sensitive information needed to bypass network security, or even unlock workplace doors for strangers without identification. While attacks on human judgment are immune to even the best network defense systems, companies can mitigate the risk of social engineering with an active security culture that evolves as the threat landscape changes.
|
Scooped by
Susan Cook
|
The technique of using deception and manipulation to gain sufficient knowledge to dupe an unwary individual, employee or company into revealing personal information has the potential to be ...
|
|
Scooped by
Susan Cook
|
Hacking Humans, Corporate Espionage and the Spies Amoung Us Huffington Post Ira Winkler: I see a lot of attention being paid to spear phishing and APT, which people equate specifically to China.
|
Scooped by
Susan Cook
|
The Verizon 2013 Data Breach Investigations Report is the information security industry's own annual "State of the Union address" for data breaches. N.
|
Scooped by
Susan Cook
|
Social engineering techniques are often crucial to executing penetration tests. But which methods cross the ethical line - or even venture into the dangerous territory of illegal?
|
Scooped by
Susan Cook
|
Attackers are taking aim at the weakest point in your network: human beings. Do you know how to protect your data?
|
Scooped by
Susan Cook
|
Researchers reveal how easy it is to fall victim to social engineering CIO Magazine Receiving an email to connect to someone on LinkedIn turned out to be a social engineering experiment that Trend Micro's global field enablement vice president,...
|
Scooped by
Susan Cook
|
In this entry, we tackled social engineering lures used by an attack that leveraged the infamous Mandiant report.
|
Scooped by
Susan Cook
|
Creative new social engineering attacks designed for Facebook, Twitter, and even Pinterest spread Trojans and took over accounts.
|
Scooped by
Susan Cook
|
World map of phishing attacksNetcraftNetcraft's new phishing attack map provides a real-time visualisation of the phishiest countries in the world.
|
Scooped by
Susan Cook
|
There's a lesson to be learned from the speed with which the callers were able to obtain confidential information.
|
Scooped by
Susan Cook
|
As western economies shift from industrial to post-industrial, information security is quickly gaining in importance to businesses especially those of Western Europe, Asia and the United States. The focus on securing corporate and individual information has taken on special importance for businesses that participate in e-commerce such as financial institutions (Netbank, Ingdirect, Visa Intl., American Express etc), e-Retailers (eBay, Amazon etc) and internet stock brokerages (Sharebuilder, Ameritrade etc), however, businesses of every type must become keenly aware of the importance of information security.
|
Scooped by
Susan Cook
|
Historically, Social Engineering has been non-technical, but most insidious, playing upon our workers' sincere desire to get the job done and help others to do the same. The use of "phishing" via e-mail and phony websites and redirections, etc., adds a technical component to this psychological attack.
|
Scooped by
Susan Cook
|
The more pieces of information an adversary can collect, the more opportunities they have to meet their objectives. An adversary may be a hacker on the other side of the world simply targeting you to obtain a good credit card or bank account number, or an adversary could be a militant, collecting data to identify members of the armed forces to either inflict harm on the member(s) or collect small pieces of data leaked by many members to consolidate a picture of our capabilities and plans.
|