How to Prevent Business Email Compromise & What to do if You Get Hacked
Business email compromise seems to happen as often as the common cold— and yet it can lead to large financial losses, [...]
3 Things We Can All Learn from Microsoft’s Cloud Data Breach
Even Microsoft misconfigures Azure. What does that mean for the rest of us? After Microsoft announced a cloud data breach that [...]
Learn how to prevent a data breach & successfully recover in my new book, “Data Breaches: Crisis and Opportunity.”
It’s a book! After four years, I’m THRILLED to announce that my new book, Data Breaches: Crisis and Opportunity is out on [...]
New Tool Makes Office 365 Attack Testing More Efficient
During a recent red ream engagement, I obtained quite a few email addresses for the target organization to use in brute-force [...]
Proactive Threat Hunting: What You Don’t Know is Probably Costing You
Most experts agree that it’s not a matter of if you will be breached, it’s a matter of when. In fact, [...]
User Training: The Last Line of Defense Against Phishing Attempts
Welcome to our third and final blog in our three part phishing series. In part one and part two, we wrote [...]
How to Prevent Phishing Attacks: Technological Defenses
Part Two of Our Three Part Blog Series on Phishing In our previous phishing and spear phishing blog post we discussed [...]
Phishing Attacks and Spear Phishing: What They are, Why They are Effective, and How to Prevent Them
Phishing attacks have been a way for malicious actors to compromise organizations at alarming rates over the years. In fact, a [...]
RSA 2019’s Hot Cybersecurity Topics
Like many people, we spent last week in San Francisco at the RSA 2019 conference geeking out over cybersecurity. As usual, [...]
Achieve NOTHING™ Cybersecurity Podcast: GDPR and the British Airways Data Breach
Sherri Davidoff and Madison Iler discuss the British Airways data breach, and how the GDPR rules will impact the outcome. Between [...]