AI Used in Phishing attacks: BEC Business Email Compromise

What  do you read when you read the following: “BEC groups launch executive impersonation attacks in at least 13 languages” Specifically this is interesting: “These attacks demonstrate that BEC is a global issue and not just an English-only phenomenon,” said Crane Hassold, director of threat intelligence at Abnormal Security. “Our findings also show how cybercriminals … Read more

Another Problem In Cybersecurity: Too much work–> Burnout

Why is burnout important?  If we are dependent on IT personnel to perform actions on a timely basis even when off-hours work must be done. And then expect them to come to work on time, we are inadvertently stressing personnel . I know every job may have stressors, but the cybersecurity field creates some unique … Read more

During War are we getting Attacked More?

I am talking about the Russian war against Ukraine which started on Feb 2022. Do you have 80 computes, more than a dozen? Then it should be obvious that they all need to be standardized and if standardized and wrong they will all get hacked. So paying attention to details in your environment pays dividends. … Read more

Hacked? Got insurance? No Payout!!

SCMagazine story on January 3rd. makes you think about the efficacy of cyber insurance. The problem is the government fines and some of the details in the contract language: “The attorneys general of Utah and Oregon reached a $200,000 settlement with Avalon Health, which also requires the provider to develop and implement practices that aim … Read more

2022 What Did we Learn in Cybersecurity?

49 posts on this blogsite oversitesentry in 2022 There were many different posts  I chose 4 to highlight in early ’22: What does Segmentation DonaldTrump Malware post Jan 25,22 Hackers are Ruthless: Attack Red Cross/ Red Crescent  500k stolen China Attacking News sites now & CISA agency declares patch APC UPS(Power Supplies) 3 Critical vulnerabilities. … Read more