Security Risks of New .zip and .mov Domains
May 19 2023Researchers are worried about Google’s .zip and .mov domains, because they are confusing. Mistaking a URL for a filename could be a security vulnerability.
Read moreLLMs and Phishing
April 10 2023Here’s an experiment being run by undergraduate computer science students everywhere: Ask ChatGPT to generate phishing emails, and test whether these are better at persuading victims to respond or...
Read moreA Guide to Phishing Attacks
January 27 2023This is a good list of modern phishing techniques.
Read moreOnce more, it's time for Shakespeare's words: Once more unto the breach...
Read more“Suspicious login” scammers up their game – take care at Christmas
December 22 2022A picture is worth 1024 words - we clicked through so you don't have to.
Read moreThose numbers or names that pop up when a call comes up? They're OK as a hint of who's calling, but THEY PROVE NOTHING
Read moreThose numbers or names that pop up when a call comes up? They're OK as a hint of who's calling, but THEY PROVE NOTHING
Read moreHow social media scammers buy time to steal your 2FA codes
November 22 2022The warning is hosted on a real Facebook page; the phishing uses HTTPS via a real Google server... but the content is all fake
Read moreHow social media scammers buy time to steal your 2FA codes
November 22 2022The warning is hosted on a real Facebook page; the phishing uses HTTPS via a real Google server... but the content is all fake
Read moreDefeating Phishing-Resistant Multifactor Authentication
November 9 2022CISA is now pushing phishing-resistant multifactor authentication. Roger Grimes has an excellent post reminding everyone that “phishing-resistant” is not “phishing proof,” and that everyone needs to stop pretending otherwise. Hi...
Read more
Recent Comments