Posts about:
On Tuesday, October 24, 2023, the state bank regulators (CSBS), Bankers' Electronic Crimes Task Force, and United States Secret Service published an updated version of the Ransomware Self-Assessment Tool (R-SAT). In this blog, we'll discuss what the R-SAT is, what got updated, and what you need to do about it.
If you are responsible for conducting a monthly simulated phishing test, sometimes choosing a great phishing template every month can be overwhelming. It can be difficult to muster up the creativity for something relevant month after month. In this article, we offer a phishing template and theme for each month of the year to help inspire you for your next phishing test campaign.
Phishing attacks are becoming more and more common as the years go on. You see phishing emails disguised as many things, from phony Microsoft 365 login pages to fake fantasy football sign ups. Nowadays we know two things when it comes to Phishing, your organization is not immune to attacks and employee training has never been more important.
It's no secret that phishing tests are a commonly used form of security awareness training. In fact, the 2022 Tandem State of Cybersecurity Report found that 92% of surveyed financial institutions are implementing phishing tests. This makes it the most common form of training right now.
In a world increasingly affected by cyber-attacks (e.g., account takeover, compromised credentials, ransomware, etc.), multifactor authentication (MFA) is considered a strong technical control, although it is not without its challenges. In this article, we will discuss answers to the following questions:
Organizations invest in technology because it improves efficiency, communications, data storage, and business growth opportunities. With increased use of technology comes an increased attack exposure from threat actors, so it is important to evaluate and manage cyber risk related to new and existing technologies.
At Tandem, we recognize there are a few GRC (governance, risk, and compliance) solutions on the market. So, why should you pick Tandem? Based on feedback from individuals who have chosen Tandem, here are 10 reasons, in no particular order, why over 1400 organizations have chosen Tandem over other solutions.
In February 2021, the Internal Revenue Service (IRS) published an alert regarding a new tax phishing scam. According to the alert, the malicious actor is impersonating the IRS and attempting to steal personally identifiable information, such as Electronic Filing Identification Numbers (EFINs) and drivers' license numbers. According to IRS Commissioner, Chuck Rettig, attempts like these are coming from bad actors who are "very active and very creative."
According to the Tandem State of Cybersecurity 2020 Survey Report, the top three incidents experienced in 2019 by financial institutions were social engineering (phishing), third-party compromise, and accidental security incidents by employees.
In August 2020, the US-CERT Cybersecurity & Infrastructure Security Agency published an alert regarding a malicious actor using COVID-19 as an opportunity for phishing and compromising credentials. The bad actor was sending a phishing email with a link to a spoofed version of the COVID-19 loan relief webpage. As usual, malicious actors are ruthless but clever.