SecurityWeek reports that more than 25% of employees have been tricked by phishing emails in 2021, more than half of whom noted that a senior executive at their organization was spoofed by the emails, which was 41% higher than in 2020.
Meanwhile, 21% of those who committed cybersecurity lapses have been fired, which may be behind the increase in the rate of employees who did not report their cybersecurity mistakes to the IT team, according to a Tessian report.
Social engineering attacks have seen increased success not only due to threat actors' more advanced approaches but also because of remote working pressures among employees. While successful phishing and scamming attacks aimed at hybrid workplaces have not significantly increased, threat actors have launched more sophisticated attacks targeted at those working from home, the report revealed.
"This requires earning the trust of employees. Bullying employees into compliance won’t work. Security leaders need to create a culture that builds trust and confidence among employees and improves security behaviors, by providing people with the support and information they need to make safe decisions," said Tessian Chief Information Security Officer Josh Yavor.
Included in the exposed dataset labeled "PDL" were individuals' full names, email addresses, phone numbers, location data, professional summaries, and skills, as well as education and employment histories.
Attackers could leverage the issue — which impacts Nexus 3000, 7000, and 9000 series switches with vulnerable NX-OS versions with DHCPv6 activated and are in standalone NX-OS mode — to facilitate continuous crashes of the dhcp_snoop process and a denial-of-service condition.
Higher rewards of up to $250,000 will be given by Google for the discovery of memory corruption flaws in the Chrome browser shown to achieve remote code execution using a non-sandboxed process as part of a more robust vulnerability reward program.