Covers cybersecurity training programs, techniques, and best practices designed to equip employees and individuals with the skills to recognize and respond to cyber threats. Topics include security awareness curricula, simulation exercises, and measuring training effectiveness.
posts
In 2024, the average cost of a data breach hit $4.88 million according to IBM's Cost of a Data Breach Report. That number keeps climbing. And after two decades in this field, I can tell you that most of those breaches didn't involve some sophisticated
In early 2024, Ivanti disclosed critical vulnerabilities in its Connect Secure VPN that were already being actively exploited by threat actors — including nation-state groups. CISA issued an emergency directive ordering federal agencies to disconnect affected devices within 48 hours. If that doesn't make you rethink your VPN best
700,000 Openings and Counting — Why Jobs in Computer Security Are Exploding The U.S. had roughly 700,000 unfilled cybersecurity positions in 2024, according to CyberSeek, a project supported by NIST and CompTIA. That number hasn't shrunk. If anything, the demand for jobs in computer security has
The Federal Agency Most Hackers Wish You'd Never Heard Of In January 2024, CISA — the Cybersecurity and Infrastructure Security Agency — issued an emergency directive after threat actors exploited vulnerabilities in Ivanti VPN products to infiltrate multiple federal agencies. The directive gave agencies 48 hours to disconnect affected devices.
Last year, a mid-size accounting firm in Ohio lost $1.2 million after a single employee clicked one link in a spoofed Microsoft 365 email. The link looked like a routine password-reset page. It wasn't. Within 90 minutes, a threat actor had harvested credentials, bypassed weak authentication, and
What a Phish Setlist Actually Means for Your Security Team When the band Phish takes the stage, they never play the same setlist twice. Every show is crafted for the audience. Your phishing simulation program should work the same way. A phish setlist — a curated, rotating collection of phishing attack
In 2023, the FBI dismantled a cybercriminal operation that used the Snake malware — a sophisticated keylogger that had quietly exfiltrated credentials from government networks across 50 countries for nearly two decades. Every password. Every internal message. Every classified document typed into a keyboard. That's the reality of a
In February 2024, Change Healthcare suffered a ransomware attack that exposed the protected health information of approximately 100 million Americans. The fallout wasn't just technical — it was regulatory. Congressional hearings, state attorney general investigations, and an avalanche of class-action lawsuits followed, largely because stakeholders questioned whether data breach
3.5 Million Openings and Nobody to Fill Them Cybersecurity Ventures projected 3.5 million unfilled cybersecurity positions globally by 2025, and we're still feeling that gap heading into 2026. Meanwhile, the FBI's IC3 received a record $12.5 billion in reported cybercrime losses in 2023
The Email That Cost One Company $121 Million In 2019, a Lithuanian national named Evaldas Rimasauskas pleaded guilty to stealing over $121 million from Google and Facebook using nothing more than fake invoices and spoofed email addresses. No zero-day exploits. No sophisticated malware. Just phishing emails that looked like they
