Blog

Legal webinar recap: 3 hard truths we learned about lawyers

A recap of CybSafe's legal sector webinar: the three uncomfortable truths about lawyers' cybersecurity habits that every security professional needs to hear.

How to make money with law firms and ransomware

Law firms are lucrative ransomware targets — and attackers know it. Here’s how cybercriminals exploit the legal sector, and what firms need to do differently.

Triple-pronged Threat: The Cyber Security Challenge

Over one in five financial services employees have been targeted by cyber criminals already since 2020. Cyber criminals aren’t hanging around, and financial organisations know this. The need to support, assist and engage with people is more important now than ever.

A Security Awareness Practitioner’s guide to InfoSec 2022

Plan on attending Infosecurity Europe 2022? Don’t waste hours looking for relevant events and vendors. Here’s a guide for every Security Awareness Practitioner.

Fighting cybercrime: how globally-recognised training can turn the tide

The innovative, groundbreaking training from CybSafe has been recognised in the global CyberTech100 list.

5 takeaways from our ‘Measuring security behaviours in financial services’ webinar

So, you missed the webinar. And now you want a cheat sheet. Sigh. Seriously though, we know you’re busy. That’s why we recorded the webinar. And that’s why we're giving you on-demand access. We’re kinda like Netflix. But so much cooler! And, in case you need them, here are some of the highlights.

Long read: How to measure behaviour

This long read unpacks all the ins and outs of measuring human behavior. From self-reporting to 360 feedback, we’ve got it covered

Managing cyber risk in a hybrid workplace

A full return to the office is unlikely for many organisations. At least not in the same way as pre-pandemic. The shift to hybrid working has given people the flexibility of working from home with the social advantages of in-person.

Businesses can ensure they’re not affected by the next WannaCry

Following WannaCry, how can businesses ensure they’re unaffected by the cyber attacks of the future? By calling on a readily available, underutilised resource.

Why feedback is the missing puzzle piece in your cyber security strategy

Cyber security can feel like a one-way street of communication. Delivering effective security awareness content starts with finding out what works.

The top cybersecurity attitudes and behaviors you need to know about

Houston, we have a problem. For too long, we’ve neglected the most integral element of cyber security… people. There’s been a lack of understanding about how personal habits affect cyber security. Whether you have a tendency to procrastinate, take risks or always follow the rules, your individual habits and views matter!

Why language matters in cybersecurity

Language is at the heart of communication. Every time we speak or write, we choose language appropriate to our audience to get our desired message across. Why should it be any different in cyber security?

Why disciplining human error doesn’t work when it comes to cyber security

Nobody likes being punished. So why are we so quick to punish those who fall victim to cyber-attacks? A recent study by CybSafe found 4 in 10 organisations choose to discipline staff who make cyber security errors. There’s no doubt we need to respond when such incidents occur. But is disciplining employees really the best way to go?

How can we prepare for the challenges of hybrid working?

The proliferation of hybrid working is creating a new set of cyber security challenges. Learn how to prepare for the future with our article.

What the government must do to tackle cyber crime

Technology will be vital. As will collaboration between the public and private sectors. But to truly beat cyber crime, we're going to need to check every single box...

If you want to change security behavior, stop thinking like a security professional, start thinking like an entrepreneur.

In 1998, Evan Goldberg revolutionised an industry. This is what we can learn from his story.

Post-pandemic, CISOs are overlooking cyber security

CISOs need to focus on cyber security. Cyber-attacks, and breaches of data are an imminent threat to organizations around the world.

We thought we needed to secure remote workers. We were wrong.

Our company was an early adopter of the remote work trend. As we discovered many security challenges, a new borderless security approach came to aid.

Zero-trust is up post-COVID-19, but you’d be wrong for thinking it will keep networks safe

“Now a good chunk of your critical assets are behind the firewall, but all your employees are not.” That’s what NetMotion CEO Christopher Kenessey said recently. He was summarising the problem we’re all facing: All of a sudden, the working world has changed.

Intro to Cyber Security

Are you worried about cyber security? Do you want to know about the recent security breaches? Read this article for a quick introduction to the basics of cyber security.

Security awareness is dead. Long live borderless behavior analytics.

If we’re honest with ourselves, we’ve all known it for a long time. Posters. Compulsory e-learning. Seminars and desk-drops. They’re security awareness staples. And they’re now all, without question, ineffective. They’re designed to teach people about security. Just on our terms.

Does isolation restrict remote worker security? - Part 1

Research shows how “social learning” impacts security skills – and it says a lot about securing remote workers. Remote working is here to stay. And there are benefits. But when it comes to security, remote working poses a problem.

Security awareness is dead. Long live borderless security awareness.

If we’re honest with ourselves, we’ve all known it for a long time. Posters. Compulsory e-learning. Seminars and desk-drops. They’re security awareness staples. And they’re now all, without question, ineffective. They’re designed to teach people about security. Just on our terms. People have overdue deadlines. Expectant bosses. Kids to feed. So we run our campaigns. And people smile and nod. Meanwhile, cyber criminals laugh and joke. For a long time, we’ve needed an overhaul.  It’s arrived.

How to secure Zoom, Houseparty and other video conferencing apps

We can all take steps to increase the security of video conferencing apps. This guide explains how.

Why some people may take more security risks when working remotely

Our environments influence our behaviours, which means some people may take more security risks when working remotely.

Six security essentials for those working from home

The COVID-19 outbreak is promoting remote working. Here’s how to minimise cyber risk when working from home.

Cyber criminals are using COVID-19 cover stories in new phishing attacks

Criminals are using COVID-19 stories to convince people to do things they’d never normally do.

Why we need new and better human cyber risk metrics

To make a difference as a security professional today, you need board support. You need resources. You need directors to trust and back you. You need organisational leaders to promote security.

10 ways to get your people interested in cybersecurity

Get your people interested in cyber security and you become more resilient. Here’s how to go about it, starting with the potential end of the world.

Why do some organizations use two lms security awareness training solutions at once?

Why do some organisations often use two or more security awareness training solutions at once? That’s a question that grabbed our attention when it popped up on social recently. The comment highlighted the following security oddity…

Will data, metrics and a scientific approach eventually eliminate all human cyber risk?

Written by Oz Alashe MBE, CEO and founder of CybSafe, Digital Leaders SME of the Year 2019. In 1971, astronaut David Scott stood before cameras mounted on the Moon armed with a feather in his left hand and a hammer in his right. “I guess one of the reasons we got here today,” Scott explains via a microphone hidden beneath his space suit, “was because of a gentleman named Galileo.”

Using AI and machine learning to improve cyber defences and reduce human cyber risk

To understand how AI and machine learning can reduce cyber risk, it’s worth considering how a typical taxi journey will look in a few years time.Today, when you jump into a taxi, you’re greeted by a driver who might inquire into your preference of radio station and ask you one or two cursory questions while edging you towards your eventual destination.

In the absence of a secure culture, reducing cyber risk could be impossible

To understand why it might be impossible to reduce human cyber risk without a secure culture, it’s worth considering a series of experiments from the world of behavioural science.The experiments weren’t designed to uncover security insights. Rather, they were designed to demonstrate quirks in human behaviour. Specifically, they were designed to reveal why people sometimes “cheat”.

You are almost certainly miscalculating your cyber risk

Although it might not seem like it, people’s actions following 9/11 demonstrate just how likely it is you’re miscalculating your cyber risk.Following the terrorist attacks of 9/11, people began to change their travel plans.

Some people love to take a risk. So shouldn’t we be tailoring security awareness training?

As you may already be aware, most people prefer to avoid taking risks. In fact, most people prefer to avoid taking risks so much that they fail to do so even when taking the risk makes complete and total sense.

Some simulated attacks help reduce cyber risk. Others are redundant. What’s the difference?

Here’s an interesting conundrum for cyber security professionals.Some simulated attacks reduce human cyber risk. Others, however, have no effect on risk – and may even have a negative impact.

The two most common phishing scams that affect UK businesses

Phishing scams evolve constantly. Don’t they? On the one hand, yes. Sophisticated cyber criminals are very much aware that, once a phishing scam becomes well known, its potency falls. So, over time, phishing scams adapt and evolve. On the other hand, the the nuts and bolts of phishing scams are surprisingly static. On the whole, phishing attacks are quick, cheap and disastrously effective. Knowing this, criminals rarely tweak the inner workings of their phishing scams all that much.

Security Awareness Training: The Old Definition and the New

At the time of writing, Google tells us security awareness training is “a formal process for educating employees about computer security.”You can bet it’s a prevalent definition: the search engine sifts through every indexed web page ever written on the topic to return the single, succinct and simple sentence.

The ‘ABC’ guide to improving information security

It’s an unfortunate fact, evident to both those who work in security and those who don’t, that security awareness training in its current form isn’t working.

The top 18 questions we get asked about CybSafe

CybSafe’s many technological innovations often intrigue audiences during demonstrations – and elicit questions that aren’t necessarily run-of-the-mill.

Award-winning cyber security awareness platform CybSafe secures £3.5m Series A investment

Wow. We’re super pumped about life right now. This is because following an investment of £3.5m in Series A funding, our award-winning cyber security awareness platform is poised to explore new territory and continue breaking boundaries.

Calculating your true phishing vulnerability

Have you ever wondered whether your reduced phishing susceptibility rate is really telling the full story? Or wondered why it may be low one week but spike the next?

Is “domain dependence” limiting our cyber security awareness?

Let’s talk domains. Not web domains, but domains in life. Areas, specialisms, disciplines – call them what you want. Domain dependence is indeed pervasive. And it could be why so many people struggle to take cyber security as seriously as they should.

Traditional cyber awareness programmes are failing to keep people safe online

Whether through simulated attacks or otherwise, psychological research suggests awareness campaigns that connect with people on an emotional level will do far more good than those that don’t.

How our desire for consistency could prevent more cyber attacks

The human preference for consistency could boost security – but in practice it often does the exact opposite

What actually is “the human aspect of cyber security”?

The definition of the human aspect of cyber security is changing. Here’s what it means in a traditional sense, as well as what it will mean in the future.

Free virtual summit on the people, culture and social aspects of cyber security

The world’s first 100% free, 100% virtual summit focused on the people, culture and social aspects of cyber security will take place during London Tech Week 2018

Introducing the Research Library: the world’s first archive of research into the human aspect of cyber security

The Research Library is a vault summarising and linking to, at present, 148 (although that number is growing) research papers, models, frameworks and resources on the human aspect of cyber security.

Protecting the people running on autopilot

Although we rarely consider it, ultimately, every email we receive comes with a certain amount of risk. The same goes for every phone call we answer. And every new programme we download.

10 of the most important cyber security articles of 2017

With new laws, new threats and data breach cover-ups, 2017 was another big year for cyber security. Here are the stories everyone was talking about.

3 mistakes people make with cyber security training

A 2017 survey revealed 52% of organisations’ cyber security budgets are increasing, with 23% of the increases dedicated to training.

How the ‘cocktail party effect’ leaves us vulnerable to cyber attack

How the ‘cocktail party effect’ leaves us vulnerable to attack – and what the cyber security industry might be able to do about it

How to keep your company secure this Black Friday

Black Friday and Cyber Monday are notoriously conducive to cyber scams. In this article, CybSafe founder Oz Alashe offers five tips on staying safe during the annual sales

Gains, losses and unconscious calculations

Our attitudes to loss make us vulnerable online. Here’s how we can nullify the risks – starting with a question. Which of these two generous offers would you rather take up? The first is £1000 in cash with no strings attached. The second is the chance to win £2000 – but only if a coin toss lands on heads.

Large enterprises beginning to question SME cyber security, Inaugural CybSafe Supplier Cyber Security Study finds

1 in 3 SMEs say they needed cyber security precautions to win new contracts in the last year alone. As part of our Inaugural CybSafe Supplier Cyber Security Study, we looked into the cyber defences enterprise customers are now demanding of SME suppliers.

10 ways to make cyber security part of your working culture

How can cyber security professionals use psychology to help people prioritise cyber security in the workplace?

8 reasons why I’m more positive than most when it comes to cyber security

Following a series high-profile cyber attacks, most cyber security professionals predict the future will be bleak. Our CEO, Oz Alashe, meanwhile, has other ideas

Could better cyber defences actually increase your risk of cyber attack?

The vast majority of today's cyber criminals choose to exploit human vulnerability. By properly addressing the human side of cyber security, your people can become your greatest defence.

People are not the problem. They are part of the solution.

By tapping into human psychology, we can take a fundamental leap towards increasing people’s awareness of pretty much anything – cyber security included.

Why cybercrime success continues to soar

Cybercrime and cybercrime success are both on the up. To stand any chance of meaningfully reducing cybercrime, we need to call on an underused resource.

A new weapon for businesses seeking to combat cyber crime

Armed with intelligence on how they might be attacked, businesses can take steps to mitigate risks, safeguard reputations and minimise financial losses.

The Optimism Bias In Cyber Security

When it comes to the human aspect of cyber security, the optimism bias can cause problems. Here’s what we can do about it.

GDPR Compliance Checklists Leave Us Vulnerable To Data Breaches

GDPR isn’t a money making tool. The new fines should not be a business’s primary concern. What businesses should be focusing on is increasing resilience to minimise breaches.

Confusing cyber security terminology helps cyber criminals attack

Cyber security terminology is cryptic and confusing. But does cyber security jargon in fact help criminals attack?

Post-pandemic, CISOs are overlooking an important cyber defence

Following COVID, no CybSafe employee will be bound to a physical office. Instead, CybSafe will be joining the growing list of organisations “working from anywhere”. Not temporarily. Permanently. And not “working from home”. Working from anywhere. Questions about office hours and moving overseas quickly begin. They showcase people’s excitement. But they also highlight an interesting point – For months now, most security professionals have been desperate to “secure remote workers”.