Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

5/12/2020
07:30 AM
Jai Vijayan
Jai Vijayan
Slideshows
Connect Directly
Twitter
LinkedIn
RSS
E-Mail
50%
50%

6 Free Cybersecurity Training and Awareness Courses

Most are designed to help organizations address teleworking risks related to COVID-19 scams.
Previous
1 of 7
Next

The surge in teleworking in response to the COVID-19 pandemic has heightened cyber-risks for organizations across industries — especially those with little prior experience dealing with a remote workforce.

Indeed, threat actors attempting to take advantage of the situation have sharply increased attacks on enterprises using COVID-19-related phishing lures, Web domains, and other tactics. In April, for example, Google reported detecting some 18 million malware and phishing messages and more than 240 million spam messages per day on Gmail that were related to COVID-19. Its security researchers also identified more than one dozen government-backed threat actors using COVID-19-related lures to try and distribute malware or steal data.

In response, numerous security vendors and others have recently announced free products and services to help organizations address the new threats. These offerings include endpoint threat detection and response tools, secure remote access tools, security assessment and monitoring tools, and mobile access tools. Some are targeted at small and midsize organizations, while others focus more on the needs of large enterprises.

Among the myriad offerings have been a handful targeted at educating organizations and workers about the security risks associated with remote work, in particular, and security hygiene, in general. The programs are particularly useful because many organizations have been forced to support a work-from-home workforce with little prior preparation or notice. A recent Kaspersky survey of 6,000 individuals worldwide, in fact, found that 73% of employees working from home after the COVID-19 pandemic started have had no security guidance or training from their employers. The survey also found 27% of the respondents had received COVID-19-related phishing emails.

"While employees are trying to get used to the new reality of working from home, IT and cybersecurity teams are under pressure to enable them to continue working safely," said Andrey Dankevich, Kaspersky's senior product marketing manager.

The following are six examples of free security awareness and training programs designed to help organizations and workers hone up on the security basics.

 

 

Jai Vijayan is a seasoned technology reporter with over 20 years of experience in IT trade journalism. He was most recently a Senior Editor at Computerworld, where he covered information security and data privacy issues for the publication. Over the course of his 20-year ... View Full Bio
 

Recommended Reading:

Previous
1 of 7
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Cloud Security Threats for 2021
Or Azarzar, CTO & Co-Founder of Lightspin,  12/3/2020
Why Vulnerable Code Is Shipped Knowingly
Chris Eng, Chief Research Officer, Veracode,  11/30/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Assessing Cybersecurity Risk in Todays Enterprises
Assessing Cybersecurity Risk in Todays Enterprises
COVID-19 has created a new IT paradigm in the enterprise and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-27772
PUBLISHED: 2020-12-04
A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned int`. This would most likely lead to an impact to application availability, but could po...
CVE-2020-27773
PUBLISHED: 2020-12-04
A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to appli...
CVE-2020-28950
PUBLISHED: 2020-12-04
The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during installation process.
CVE-2020-27774
PUBLISHED: 2020-12-04
A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of a too large shift for 64-bit type `ssize_t`. This would most likely lead to an impact to application availability, but co...
CVE-2020-27775
PUBLISHED: 2020-12-04
A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but c...