Cyril Schmid’s Post

“Generative AI is expected to increase attack success rate, including creating payloads such as malware, phishing websites and invoices for wire fraud attacks as cybercriminals look to streamline their processes and deliver more efficient campaigns at even swifter pace. The [Egress] report reveals that in the first three months of 2024, there was a 52.2% increase in the number of attacks that got through SEG detection. 68.4% of these attacks passed authentication checks, including DMARC, which is a primary detection capability used by SEGs.” https://lnkd.in/eSAY4En3 With the Kiteworks Private Content Network, organizations protect their sensitive content from AI leaks. Kiteworks provides content-defined zero-trust controls, featuring least-privilege access defined at the content layer and next-gen DRM capabilities that block downloads from AI ingestion. Visit our website to learn more. #cybersecurity #ai #aigovernance #databreach #dataprotection #datasecurity

“Generative AI is expected to increase attack success rate, including creating payloads such as malware, phishing websites and invoices for wire fraud attacks as cybercriminals look to streamline their processes and deliver more efficient campaigns at even swifter pace. The [Egress] report reveals that in the first three months of 2024, there was a 52.2% increase in the number of attacks that got through SEG detection. 68.4% of these attacks passed authentication checks, including DMARC, which is a primary detection capability used by SEGs.” https://lnkd.in/dUzU3qik With the Kiteworks Private Content Network, organizations protect their sensitive content from AI leaks. Kiteworks provides content-defined zero-trust controls, featuring least-privilege access defined at the content layer and next-gen DRM capabilities that block downloads from AI ingestion. Visit our website to learn more. #cybersecurity #ai #aigovernance #databreach #dataprotection #datasecurity

“Generative AI is expected to increase attack success rate, including creating payloads such as malware, phishing websites and invoices for wire fraud attacks as cybercriminals look to streamline their processes and deliver more efficient campaigns at even swifter pace. The [Egress] report reveals that in the first three months of 2024, there was a 52.2% increase in the number of attacks that got through SEG detection. 68.4% of these attacks passed authentication checks, including DMARC, which is a primary detection capability used by SEGs.” https://lnkd.in/d7jyfQY9 With the Kiteworks Private Content Network, organizations protect their sensitive content from AI leaks. Kiteworks provides content-defined zero-trust controls, featuring least-privilege access defined at the content layer and next-gen DRM capabilities that block downloads from AI ingestion. Visit our website to learn more. #cybersecurity #ai #aigovernance #databreach #dataprotection #datasecurity

With free access to AI language models, hackers have been able to craft more literate and convincing phishing emails and have gone as far as to develop their own AI model, "FraudGPT." Today's #FMG blog written by Alexia Roney dives into these AI-refined phishing attacks and explains guidance by HC3 to the Healthcare industry on how to combat such attacks. #FMGlaw #FraudGPT #phishingattacks #phishing #AI #Healthcarelaw #Cybersecurity

⚠️ Attention: AI-Assisted Phishing Attacks Are Escalating! ⚠️ The advancement of AI technology has given rise to a new wave of phishing scams, particularly targeting finance and insurance industries. These AI-enhanced attacks are more sophisticated, mimicking legitimate interactions to deceive users. At Macro Technology Group we are dedicated to outpacing these threats. Understand the latest techniques used by these digital adversaries and fortify your defenses. 📞 Reach out to Macro Technology Group for top-tier anti-phishing tools and expert training. 🔍 Read more about how you can protect your organization: https://hubs.la/Q02vcJvJ0 #CyberSecurity #AI #Phishing #MacroTechnologyGroup #TechTrends #KnowBe4

"In the last six months, malicious emails, as tracked by SlashNext, increased by 341% and over the last 12 months, by an incredible 856%. Generative AI is also noted as being the new favorite tool among cybercriminals for business email compromise attacks, with BEC attacks growing 27% over the last six months. Over the same period, credential phishing grew 217%, making it the No. 1 access point for breaches." The numbers keep rising and your employees are woefully unprepared, despite your investments in training, simulations and reporting solutions. It's time for change. It's time for PhishCloud Inc. PhishCloud arms employees with the tools they need to clearly spot and avoid #phishingattacks, across all digital platforms – not just email – letting them Click With Confidence. PhishCloud gives your security team the real-time visibility and control they need to see and block #phishing attacks your employees see. And with real-time metrics, you no longer need to rely on simulations and reporting to understand your phishing risk. And PhishCloud delivers reality-based training that imparts real knowledge, not just awareness. Sound too good to be true?  Give us 15 minutes to show you the power of PhishCloud Inc. #technology #innovation #informationsecurity #phishingattackprevention https://lnkd.in/eAJvSgA4

#ConversationOverflow, the latest method attackers are employing to get past AI/ML enabled #Phishing prevention solutions. Although the name sounds very elaborate, in a nutshell a "Conversation Overflow" email contains two parts. Part 1 - Enticing phishing story luring the user to click on a link, supply credentials etc (typical phishing content). Part 2 - Four pages down in the same email (hidden from the readers eyes) are business related (non phishing) text which the reader misses but the AI/ML engines do read, thereby classifying it as business legit email. In this case defense in depth remains your friend, even if your phishing prevention solutions fails, having a solution in place manage end-user browsing activity will prevent the user from accessing any malicious web pages. Another day another #TTP #phishing #cybersecurity #conversationoverflow #emailsecurity #defenseindepth https://lnkd.in/d_Dqwe8e

"Email attacks skyrocketed by 222% in the second half of 2023, compared to the last half of 2022, and generative artificial intelligence (AI) is partially to blame. 91.1% of businesses reported first-hand encounters. With adversaries abusing generative AI to craft phishing emails, messages are more convincing and virtually indistinguishable from legitimate messages." "Leveraging AI tools such as ChatGPT, cybercriminals will launch personalized, tailored and targeted phishing campaigns to steal sensitive information from victims. We predict elevated levels of phishing, deepfake exploitation and automated attacks, as well as QR code-based phishing attacks that will bypass MFA." Traditional methods of phishing protection are NOT working and can't keep up. It's time for change! It's time for PhishCloud Inc. PhishCloud arms employees with the tools they need to clearly spot and avoid #phishingattacks, across all digital platforms – not just email – letting them Click With Confidence.   PhishCloud gives your security team the real-time visibility and control they need to see and block #phishing attacks your employees see. And with real-time metrics, you no longer need to rely on simulations and reporting to understand your phishing risk.   And PhishCloud delivers reality-based training that imparts real knowledge, not just awareness. Sound too good to be true? Let us show you the power of PhishCloud Inc. Book a 15-minute demo at www.phishcloud.com.   #technology #innovation #informationsecurity #phishingattackprevention https://lnkd.in/ep8kadF7

There's a cyber threat you might not have heard of - Account Takeover (ATO) attacks. It's when cyber criminals gain unauthorized access to your online accounts. This can expose sensitive data, enable financial theft, and allow further attacks. And it’s happening more than you might think – ATO attempts skyrocketed by 427% last year. Cyber criminals use sophisticated techniques to steal your login details, often using generative AI. This AI can create incredibly realistic phishing emails that appear to be from someone you trust, tricking even the savviest people into giving up their details. It's what’s making the attacks so dangerous. Imagine a cyber criminal gains access to the email of a senior person in your business. They can send fraudulent messages to employees, partners, or clients. And it’s not just a hypothetical scenario – 75% of businesses reported at least one ATO attack last year, and more than a third faced more than five incidents. So, how do you protect your business? Here’s my advice. Encourage employees to use complex passwords generated randomly and stored in a password manager. Use Multi Factor Authentication where you get a login code on another device. It’s not foolproof but it adds an extra layer of security. Invest in advanced security tools that can detect unusual activities and potential threats. Give your team regular training on recognizing and avoiding cyber threats. Remember, being proactive is always your best defense. If my team can be proactive for you, get in touch. #CyberSecurity #AccountTakeover #CyberThreats https://hubs.la/Q02J_s2t0

"Email attacks skyrocketed by 222% in the second half of 2023, compared to the last half of 2022, and generative artificial intelligence (AI) is partially to blame. 91.1% of businesses reported first-hand encounters. With adversaries abusing generative AI to craft phishing emails, messages are more convincing and virtually indistinguishable from legitimate messages." "Leveraging AI tools such as ChatGPT, cybercriminals will launch personalized, tailored and targeted phishing campaigns to steal sensitive information from victims. We predict elevated levels of phishing, deepfake exploitation and automated attacks, as well as QR code-based phishing attacks that will bypass MFA." Traditional methods of phishing protection are NOT working and can't keep up. It's time for change! It's time for PhishCloud Inc. PhishCloud arms employees with the tools they need to clearly spot and avoid #phishingattacks, across all digital platforms – not just email – letting them Click With Confidence.   PhishCloud gives your security team the real-time visibility and control they need to see and block #phishing attacks your employees see. And with real-time metrics, you no longer need to rely on simulations and reporting to understand your phishing risk.   And PhishCloud delivers reality-based training that imparts real knowledge, not just awareness. Sound too good to be true? Let us show you the power of PhishCloud Inc. Book a 15-minute demo at www.phishcloud.com.   #technology #innovation #informationsecurity #phishingattackprevention https://lnkd.in/eukcUqwD