Author Archives: Lindsey Havens

APWG & Kaspersky Research Confirms Phishing Trends & Intelligence Report Findings

Posted on by

“For any study or research project, the ultimate assessment of validity is independent duplication of results.”

This quote was the first line of an email I received a few days ago from Crane Hassold, our senior security threat researcher at PhishLabs.

And since we’ve recently published our annual Phishing Trends & Intelligence (PTI) report, I was interested to learn more.

Continue reading APWG & Kaspersky Research Confirms Phishing Trends & Intelligence Report Findings→

Anatomy of a Phishing Attack: How Phish Kits Evolved in 2016

Posted on by

At this point, most organizations are already aware of phishing. No matter what industry you’re in, phishing is one of the top cyber threats you’ll face in 2017.

But for most people, the threat actors responsible for phishing attacks are something of a mystery. They picture a faceless, hooded specter, hidden somewhere in the dark recesses of the Internet.

Continue reading Anatomy of a Phishing Attack: How Phish Kits Evolved in 2016→

How To Be HIPAA Compliant (And Why It’s Not Enough)

Posted on by

The healthcare industry, like most others, is obsessed with compliance.

And that makes sense. After all, fines for HIPAA non-compliance are at an all time high, so who wouldn’t make it a top priority?

But as we already know, compliance doesn’t equal security. Thousands of HIPAA compliant healthcare organizations are breached every year, and unless the framework is dramatically tightened in the near future the same will be true in 2017.

Continue reading How To Be HIPAA Compliant (And Why It’s Not Enough)→

Building Powerful Security Awareness Training for the Healthcare Industry

Posted on by

Over the past couple of weeks, we’ve written a lot about the current state of security in the healthcare industry, and why things need to change.

We’ve also covered the main causes of healthcare data breaches, and noted that powerful security awareness training is the most natural starting point for security conscious healthcare organization.

But so far, we haven’t really covered what should be included in a healthcare specific security awareness training program. After all, while some aspects of security are relevant to every industry, healthcare organizations are faced with a few highly specific problems that need to be addressed.

Before we consider what should be included, though, it’s worth looking at things from another perspective.

Continue reading Building Powerful Security Awareness Training for the Healthcare Industry→

Building Powerful Security Awareness Training for the Healthcare Industry

Posted on by

Over the past couple of weeks, we’ve written a lot about the current state of security in the healthcare industry, and why things need to change.

We’ve also covered the main causes of healthcare data breaches, and noted that powerful security awareness training is the most natural starting point for security conscious healthcare organization.

But so far, we haven’t really covered what should be included in a healthcare specific security awareness training program. After all, while some aspects of security are relevant to every industry, healthcare organizations are faced with a few highly specific problems that need to be addressed.

Before we consider what should be included, though, it’s worth looking at things from another perspective.

Continue reading Building Powerful Security Awareness Training for the Healthcare Industry→