As cybercriminals increasingly targeted specific people within organizations in hopes of breaking into networks, onboarding new information technology (IT) solutions to solve or mitigate cyber risks will not be enough to defend against sophisticated probing for weak links in the human capital chain. […]

While figures vary across industry and government as to the size of the “phishing-prone” population in any organization, both sides agree that sustained internal employee training efforts are necessary to cut the success rate of spear-phishing exploits down to more manageable levels. […]

A significant percentage of surveyed working adults do not grasp or implement basic cybersecurity concepts and practices, according to Proofpoint’s recently released 2018 User Risk Report. […]

Cyber tech provider Proofpoint said a recent security awareness audit of employees that undertake security training concludes that people are only hitting on the right answers 78 percent of the time. […]

As Tax Day approaches, Proofpoint called attention to an increase in tax-related malware and phishing campaigns in a blog post on Wednesday. […]

Today marks the Department of Homeland Security’s (DHS) deadline for Binding Operational Directive (BOD) 18-01, which requires Federal agencies to adopt the Domain Message Authentication Reporting and Conformance protocol (DMARC) for email authentication. […]

According to Agari, an email security provider, one in 10 emails ending in .gov are fraudulent. And government systems are the second-most popular target of phishing attacks among all vertical markets, behind only healthcare. […]