Social Engineering 101
This 2-minute video outlines how social engineers manipulate people in social settings to gain information on how to hack systems and steal valuable information. The video outlines various methods social …
CyberHoot: Phishing Attacks
Spotting and Avoiding Phishing Attacks This foundational CyberHoot video teaches critical skills to identify phishing attacks. Viewers learn the most common phishing patterns and simple, effective questions to quickly spot …
CyberHoot: The Many Benefits of a Password Manager
This video is part of CyberHoot’s Cyber Literacy program of six (6) videos. It outlines the critical need for anyone and everyone to adopt a password manager. However, this video …
Fake Email Phishing: More Harmful than Helpful
Fake Email Phishing is broken in many ways. Google researchers liken it to early fire drills that caused more harm than good. Empirical research shows users clicking more not less after fake email phish testing. End users universally complain as do IT departments when chaos breaks out after sanctioned fake email testing. Enter HootPhish, a solution that eliminates the negatives, and empowers end users to spot and avoid this scourge of modern internet email.
CISCO Zero Days in ASA and Firepower Threat Defense Solutions – Patch Now
ArcaneDoor delivers malware via zero-day exploits to CISCO ASA and Firepower network security devices. Patches are available and need to be applied once system integrity is verified.
CyberHoot’s Autopilot Platform: Release Notes
CyberHoot’s autopilot release notes delivers our industry leading awareness training videos and phishing simulations/tests, as well as dark web reports, and compliance reports in a 100% automated solution.
CyberHoot’s Power Platform: Release Notes
CyberHoot’s Power platform includes the most comprehensive set of cybersecurity program development features available on the market today. From our Govenance Policy module and templates to 1000s of videos on Product training and cybersecurity, to our innovative and patent-pending educational, and hype-realistic phishing simulations, the power platform has everything you need to succeed in teaching employees Cyber Literacy. Best of all, it also includes 100% automation for videos, phishing, and user management. Spend less time on cybersecurity and more time on your business with our power platform.
HootPhish: Release Notes
CyberHoot’s All Phishing Simulator is HootPhish. A positive, educational, hyper-realistic phishing test and simulator that provides better metrics, automation, and outcomes than any attack-based phishing test on the market, guaranteed, or you may cancel at any time.
HowTo: Add a New Client to CyberHoot’s Power Platform
Adding customers is easy with the 5 step wizard. This article goes into the basic details of adding your customers into CyberHoot.
Microsoft Executive Email Breach: Lessons for SMBs and MSPs
The recent sophisticated breach of Microsoft Executive emails is a stark reminder that all of us can be targeted with phishing and social engineering attacks and need to prepare by training, testing, and governing employees on Cyber Literacy.
Peer-to-Peer (P2P) Payment Scams (Part 2)
Hackers (and jilted lovers) are transferring money to themselves using your phone’s cash app (Paypal, Zelle, Cash App) to transfer funds out of your bank account.
AI in Cybersecurity: Enhancing Threat Detection and Response
In the dynamic realm of cybersecurity, Artificial Intelligence (AI) stands as a game-changer, especially for Managed Service Providers (MSPs) and Small to Medium-sized Businesses (SMBs). This blog delves into how AI is reshaping threat detection and response, offering a new edge to cybersecurity strategies.
Peer-to-Peer (P2P) Payment Scams to Watch Out For
P2P payment scams are escalating, exposing people to advanced social engineering tactics resulting in significant financial losses.
Top 10 Cybersecurity Trends and Strategies in 2024
2024 is off to a great start, however, Small to Medium sized Businesses need to proactively address their cybersecurity program development as soon as possible. 2023 was a banner year for hacker attacks and this has only encouraged more and more hackers to enter the fray. The time is ripe for everyone to batten down the hatches and training and test their employees to build their cyber literacy skills.
Navigating AI Assistant Cybersecurity Risks
AI Digital Assistants in platforms like Microsoft Teams and Zoom raise data privacy concerns, risking exposure of regulated, intellectual, or personal information. Despite claims of de-identifying sensitive data, significant risks like exposing proprietary information remain underappreciated.
Passkeys: The Path to a Passwordless Future
Passkeys provide better authentication for end users than traditional passwords which they seek to replace. They are based upon public and private cryptography, are resilient to phishing and hacker password database theft (since the private keys aren’t stored on the server or website), and represent an easier mechanism to identify users into online systems.
DNA Double-Helix Hacker Heist: A Wake-Up Call for Cybersecurity Vigilance
A recent breach at 23andme resulted in the theft of immutable and irreplaceable data – our DNA! Companies with such critical data must take every precaution to limit the data they have become caretakers of, from theft my malicious actors. In this case, 23andme has lost our DNA! This needs to be a serious criminal offence that is punished with significant consequences.
HowTo: Add Managers to Employees in Microsoft Azure / Entra AD
Microsoft Azure / Entra allows you to define Managers for each employee entry in Azure AD. This helps CyberHoot and Clients maintain high compliance as CyberHoot will automatically notify Managers when employees are non-compliant both through weekly reports and by CC’ing Managers on a Due Date email sent to employees who have not completed their assignments.
Hackers Turn SEC Snitches: The Evolution of Ransomware Tactics
Hackers have evolved into snitches leveraging recent SEC legislation which requires companies to disclose within 4 days that they have been hacked and hit with ransomware. When Meridian did not disclose to the SEC they had been hacked, the Hacker group “BlackCat” filed a complaint with the SEC informing them they had evidence that Meridian had been hacked.
Malvertising Is Once Again on the Rise Leading to Malware Infections
Hackers are hi-jacking websites and hiding malware in Google Ads to target unsuspecting users with malware. Users simply visit the formerly safe and always legitimate looking websites and are presented with fake downloads, malware, and other nasty surprises.
The SEC has Strengthened Cybersecurity Reporting Requirements – What you Need to Know
For the past 2 years the SEC has embarked on strengthening cybersecurity disclosure requirements at publicly traded companies. This article summarizes the changes that have come into effect and what all companies, whether publicly traded or not, should be considering in the face of a cybersecurity incident or preparing to avoid them.
The Nuts and Bolts of a WISP
A Written Information Security Plan is not meant to a bureaucratic policy collecting dust on the book shelf, but rather a living breathing document to guide companies on the safe collection, storage, manipulation, and destruction of non-public personal information on their employees, clients, or business services.
CISCO Critical Advisory Alert – Patch Now
CISCO has announced and released patches for a critical bug in their product that could allow Internet hackers to create accounts remotely on CISCO devices via the HTTP management application. Patches have been released and workarounds documented for unpatched systems no longer supported. Take action to patch now.
Top Cybersecurity Questions of the Year: What Everyone Wants to Know
Cybersecurity Awareness Month is upon us. In our efforts to address all of the questions a business owner reviewing our blog might have, we’ve collected the most frequently asked questions and have tried to answer them with the most effective mitigating control available for a particular risk. There are undoubtedly many more mitigating controls one can put in place, but this is a great starting point.
Ghosts in the Machine: Spook-tacular Cybersecurity Basics for October
In the spooky season of October, Cybersecurity Awareness Month reminds us of the real threats lurking in the digital realm. CyberHoot sheds light on three cybersecurity fundamentals: Password Protection, Phishing Awareness, and Safe Browsing Practices. Fortify your digital domain with strong password practices, stay vigilant to phishing schemes, and navigate the web safely. Embrace the cybersecurity training and phishing testing offered by CyberHoot to morph into a digital wizard against the sinister specter of cyber threats. Venture to cyberhoot.com and make cybersecurity awareness a fun-filled endeavor!
Cybersecurity Awareness: Bridging the Gap Between Knowledge and Action
October marks the observance of Cybersecurity Awareness Month, a pivotal time for businesses and individuals to bolster their understanding and actions towards cybersecurity. This means it is time for you to put action to words and get your staff trained up on the cyber threats they face. Cyber Literacy is a critical skill for the 21st century. Are you doing your part to educate your employees on the threats they face and how to avoid them?
Threat Intelligence Alert – Zero-Day in Common WebP Graphics Files – Patch all Browsers Immediately
Google’s efficient and compression based graphics file format WebP has been found to contain a critical zero-day vulnerability that can lead to a complete compromise of a computer that renders a malicious WebP graphics file on any website hosting such malware content. This could be anywhere. Most browser have been patched against this vulnerability, but may not have restarted yet to take effect. Please check and force reboots or browser restarts as soon as possible.
Cyber Literacy ROI: Investing in Employee Training Makes Strong Financial Sense
Investing in Employee Cyber Literacy to build better human firewall skills makes strong financial sense. A string of recent breaches has put this in stark perspective for all companies. This article presents a case for the financial Return On Investment of employee awareness training and phish testing as delivered automatically by CyberHoot.
Save Your Staff with Cyber Literacy Skills. Use CyberHoot for Free During Cybersecurity Awareness Month
CyberHoot is offering any MSP free enrollment of any and all clients into CyberHoot for free until the end of October (31st), 2023. Enroll your prospects or existing customers in our platform and launch expedited Cybersecurity awareness training in the Month of Oct. using our fully automated system. We will credit you any users or clients enrolled for the entire month of Oct. Must be a new client to CyberHoot. If after the month ends you want to remove them, you absolutely may without penalty.
The Fabulous Five: How CyberHoot Makes Managed Service Providers Shine Brighter
CyberHoot has been shown to improve customer retention for MSPs. It lowers the cost of supporting clients through fewer security incidents, better product training, and educational phish testing. We know it works because MSPs tell us emails to support asking “Is this a Phish?” or “Is this an Attack?” go away. Start a 30 day free trial and month-to-month forever afterwards.
Top 5 Emerging Cybersecurity Threats Businesses Must Be Aware Of
Cybersecurity threats continue to evolve and expand in both sophistication and impact. Businesses must choose how to address these top 5 emerging threats proactively, when they control the playing field and have high ground instead of reactively, after an incident when they have been knocked down and are struggling to get up.
Augmentt partners with CyberHoot to build Cybersecurity Literacy within MSPs and their clients.
Augmentt partners with CyberHoot to build Cybersecurity Literacy within MSPs and their clients.
EvilProxy Malware Steals Session Tokens bypassing MFA on Victim’s Email Account
Hackers have been using EvilProxy to capture authenticated session tokens from unsuspecting phishing email victims.
White House Recognizes the Importance of Cybersecurity Education with Proposed Funding
The White House recognizes the importance of cybersecurity literacy by proposed to fund K-12 education of school teachers and administrators and possibly also students.
Risk Assessment: A Game Changer for Your Business
For most businesses, balancing time and money is a constant struggle. A risk assessment is designed to simplify your conversations by identifying both the most critical risks and rank ordering them, enabling you to determine what to work on first and then work your way down the list of critical threats to your business.
The Top 10 Benefits of Integrating Cybersecurity Awareness Training and Testing into Your MSP Offering
Cybersecurity training and phish testing delivers enormous value to your MSP, its clients and all employees. Most value is obvious such as fewer security incidents while other value may be over looked such as providing employees better work-life balance with fewer nights and weekends spent recovering from security incidents.
Is Microsoft Teams a Direct Trojan Horse Malware Delivery Service to Employees?
Exploiting a flaw in how the app handles communication with external tenants gives threat actors an easy way to send malicious files from a trusted source to an organization’s employees. Microsoft believes this is a feature and no patch will be provided. This delivery method bi-passes traditional payload delivery security controls.
Business Ninja Interview of CyberHoot Co-Founder
Business Ninja’s interviewed CyberHoot’s co-Founder Craig Taylor. This interview outlines CyberHoot’s unique and positive outcome approach to cybersecurity program development at your company. Our Co-Founder details what’s working and what’s broken in the emergency Cybersecurity industry. Business owners need to watch to learn what they should be doing to protect their businesses from compromise. Doing so provides much needed peace of mind.
Protecting Your Business and Family from DeepFake Attacks: A Comprehensive Guide
The FBI has reported a dramatic growth in Deep Fake attacks on individuals and businesses from hackers seeking to extort money from or embarrass individuals and businesses by creating elicit pornographic material in the likeness of the victim from their online persona and public images and videos.
Hook, Line, and Secure: Reeling in the Benefits of Awareness Training and Phish Testing Services
This article outlines five unusual benefits and five well known benefits to Awareness Training and Phish Testing service. It presents them to Manage Service Providers (MSPs) hoping to convince them to add such services to their standard offerings for all clients.
Old Attacks Made New Again by Hackers Exploiting our Browsers and Our Fears
Virus warning attacks have plagued computer users for years. Recently, hackers have figured out how to exploit these attacks in your Google Chrome (and possibly other) browsers, seizing control of your browser and scaring you into calling fake customer support hotlines to extort you for money.
A Cybersecurity Comedy: Protecting Businesses One Laugh at a Time!
Cybersecurity too often seems like a stress inducing serial murder show. While it is serious business, adding a dose of humor will make it more memorable.
10 Ways to Help Grow your MSP
Growing your MSP is not as hard as you might think. It require a laser focus on differentiation, adding cybersecurity services, and fanatical attention to customer service to name a few of the top 10 items lists in this article.
Passkeys are the first steps on the Long Road to a Passwordless Future
The FIDO alliance is a high-powered tech alliance seeking to eliminate passwords from our online lives by replacing them with a much more secure public and private key authentication solution. Backed by Google, Microsoft, and Apple, it is a strong foray into the elimination of passwords from our everyday lives.
10 Ways Your Security Awareness Training is Failing You
Cybersecurity platforms are designed to build robust, layered defenses for your organization. However, too often they fall short of their lofty and critical goals. This articles delves into 10 common failure points and provides unique perspectives on how to avoid them.
3 Ways MSPs Add Value to Client Relationships and How to Capitalize on Them
To stand out and foster lasting relationships, MSPs must go beyond basic technical support by adopting innovative strategies to provide additional value to their customers. Once successful, MSPs must call out the emotional value that comes from these solutions.
Voice Cloning is Becoming a Ransom Threat
Voice impersonation, also known as voice cloning, are becoming an increasingly prevalent threat in the digital landscape. Sophisticated artificial intelligence (AI) technologies can now imitate voices with remarkable accuracy, leading to threats against our privacy and security.
3 Ways Attack-Based Phish Testing is Failing Us
Attack-based phish testing creates fear, anxiety, and doubt in end users. It does not create awareness, harms IT, and misinforms management. Despite representing a billion dollar industry, traditional attack-based phish testing is fundamentally flawed. It causes untold problems for IT departments, individual users, and Managed Service Providers. Studies have shown it can even lead to more clicks by end users! This article outlines the fundamental flaws in attack-based phishing. It goes on to outline improvements from educational, positive outcome phish testing assignments that teach users how to finally spot every phishing attack and delete or avoid it.
Top Five (5) Risks from SMS-Based Multifactor Authentication
Multi-factor authentication can be one of the best protect measures companies can implement on their critical accounts. However, not all methods of MFA are equal and some, like SMS, carry inherent risks and should not be used.
CyberHoot Press Release: Gradient Billing Integration
CyberHoot Press Release Gradient Billing Integration FOR IMMEDIATE RELEASE Portsmouth, NH – March 28th, 2023 – CyberHoot today announces Gradient billing integration through their Synthesize platform. Synthesize helps MSPs automate …