We all make mistakes. In fact, making mistakes is a core part of the human experience, as it’s how we grow and learn. When it comes to cybersecurity, however, human error is often overlooked. Minimizing threats from within is more important than ever for every organization. Based on a study by IBM, 95% of data […]
Read the Blog Post
Detecting zero-day attacks is what Graphus® specializes in but what happens when the attack starts from a ‘trusted’ domain/URL? These can be nearly impossible to detect for most security solutions which means it is most likely making it into the inbox of your employees. But you may be thinking to yourself, “We provide phishing training […]
Read the Blog Post
The Anthem data breach is one of the most famous data breaches of all time. It took place in 2015 and nearly 79 million people’s personal information was compromised and it spanned across multiple Anthem brands – Anthem Blue Cross, Amerigroup, Empire Blue Cross and Blue Shield, and others. It all started with a single […]
Read the Blog Post
HTTPS is an authentication protocol designed for accessing a website with an encrypted connection to make it more secure and trusted. It was created to protect page authenticity and keep user communications, identity, and web browsing information private. HTTPS levages Secure Sockets Layer (SSL) which is a standard security technology for establishing an encrypted link […]
Read the Blog Post
As I’m sure you’ve already heard, Marriott recently announced that they have been the victim of a massive data breach where up to 500 million guests information has been compromised. They stated that there has been unauthorized access to their database since 2014. The bad actors have had access to this information for nearly four […]
Read the Blog Post
Using Google G Suite or Microsoft Office 365 out of the box security to protect your organization from sophisticated cyber attacks? Good luck. Just like secure email gateways (SEGs), Microsoft and Google have their place when it comes to email security but struggle to detect sophisticated, targeted, and zero-day attacks. On top of this, when […]
Read the Blog Post
We see a variety of advanced phishing attacks on a daily basis. More recently, we’ve seen an uptick in the number of phishing attacks designed to look like a voicemail notification email. The hacker’s goal is to get the recipient to click on the button and login to their account to hear the message. Except […]
Read the Blog Post
Recently we detected a voicemail phishing attack where the hacker made adjustments to their attack methods to try slip by detection technologies. These adjustments were smart enough to get past existing security tools such as Microsoft’s ATP, but not Graphus®! The recipients received an email saying they had a voicemail and to login to their […]
Read the Blog Post
Have you implemented DMARC but still experiencing successful cyber attacks? We’ve previously written about why DMARC is not enough when it comes to protecting your organization. This post is going to provide an example of where DMARC failed but Graphus® detected a malicious attack. As discussed in our previous post, DMARC is an email-validation system designed to […]
Read the Blog Post
In a recently published report from Gartner, titled Fighting Phishing – 2020 Foresight, the authors, Peter Firstbrook and Neil Wynne, detail the challenges organizations face and also the required solutions needed to fight phishing and social engineering attacks. The authors discuss how the more recent influx of phishing attacks have caught many anti-spam and secure […]
Read the Blog Post
