Most companies use direct deposit to pay their employees. In the United States, for example, more than 80% of workers have their paychecks deposited directly into their personal bank accounts. This practice is providing many opportunities for cybercriminals to perpetuate their latest scam — trying to get businesses to deposit employee paychecks into their accounts.

​The ease with which employees can now share information coupled with current cultural trends is causing accidental data leaks in many businesses.

Your company's cybersecurity is only as good as your business partners' and vendors' is — and that's not good enough, given a recent Forrester Research survey that attributed 17% of confirmed data breaches in 2017 to third-party incidents.

Most airports provide free Wi-Fi for visitors. This is convenient for business travelers who work on their laptops while waiting for their flights. Taking advantage of this convenience can be risky.

On May 23rd, the Office of Compliance Inspections and Examinations (OCIE) released a risk alert clarifying 2019 exam priorities regarding the protection of "network storage devices".

A phishing attack is a form of social engineering where cybercriminals attempt to steal user data including login credentials and credit card numbers. This occurs when an attacker, masquerading as a trusted source, such as a vendor or colleague, dupes a victim into responding to a malicious email or text message.

Cybercrime threatens to do more than $5 trillion in economic damage worldwide in the next five years, according to the ninth annual "Cost of Cybercrime" report. But that's a projection, not a prediction.

You've probably heard a lot of talk lately about how valuable artificial intelligence and machine learning will be in the cybersecurity industry. We just want to caution you not to think that AI is a silver bullet.

Once again, SplashData has evaluated millions of leaked passwords and generated a list of the 100 most common passwords. And once again, "123456" and "password" top the list.

SOC is short for "security operations center." If you have a team responsible for monitoring and analyzing your information security, that's where it works—ideally 24/7/365—to detect, analyze, and respond to cybersecurity incidents.