Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Why Most Security Awareness Training Fails (And What To Do About It)
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
Joe Stanganelli,
User Rank: Ninja
8/27/2017 | 9:40:11 AM
Re: First and last line of defense ..... and yet
Fear is another motivator. It doesn't have to be a refund invoice. It could be a bill or a warning or some such thing. It could also be an updated HR policy. Something that would hold just enough interest rather than something that stands out as extraordinary.

After all, for many checking their email, anything that's not obvious spam is going to stand out as extraordinary.
REISEN1955
REISEN1955,
User Rank: Ninja
8/25/2017 | 2:58:47 PM
First and last line of defense ..... and yet
People still open up a jpg file or a pdf invoice partly because they are curious to see what it does.  If this simple rule of email was really observed, infections would go way down.  Human nature however, is a very powerful thing indeed.  Greed too.  That refund invoice for $375 from the Liberty Wine company.  That is far less obvious that the emails about $7,203,230 from a late relative now held in the Bank of Nigeria.  

We're human after all.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Building the SOC of the Future
While an attacker just needs to find one vulnerability to get in to the network, the defender has to look everywhere. Defenders have to identify, disrupt, and stop attacks in the short period of time between when an attacker gets in and causes damage. One way is a security operations center to get that "all the time" coverage. What's Inside: --AI and cybersecurity response --Automation --Proctive threat hunting --Next-gen SIEM
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-39873
PUBLISHED: 2022-10-07
Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication.
CVE-2022-39874
PUBLISHED: 2022-10-07
Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.
CVE-2022-39875
PUBLISHED: 2022-10-07
Improper component protection vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.
CVE-2022-39876
PUBLISHED: 2022-10-07
Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI.
CVE-2022-39877
PUBLISHED: 2022-10-07
Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.