October 7th, 2025
Craig Taylor
Newly discovered Android banking Remote Access Trojan (RAT), dubbed Klopatra, has compromised more than 3,000 devices in Spain and Italy. Security researchers from Cleafy revealed that Klopatra uses hidden Virtual Network Computing (VNC) to give attackers full remote control over infected smartphones. How Klopatra Works Klopatra spreads through malicious dropper apps disguised as IPTV streaming […]
Read More
September 30th, 2025
Craig Taylor
In June 2025, KNP Logistics Group, a transport company in the UK with 500 trucks and nearly two centuries of history, collapsed after falling victim to a ransomware attack. The root cause? A single employee password weak enough for criminals to guess. A Perfect Example of Cyber Risk Neglect The Akira ransomware gang did not […]
Read More
September 23rd, 2025
Craig Taylor
Vulnerability scanning and it’s human led partner penetration testing (aka “pentesting”) are excellent and trusted methods for uncovering important security threats in applications, infrastructure, and Internet facing devices. Unfortunately, many organizations receive their vulnerability and pentesting results once a year through static PDFs, email attachments, and/or spreadsheets. These point-in-time assessments and delivery methods lead to […]
Read More
September 16th, 2025
Craig Taylor
Artificial Intelligence (AI) tools are entering our businesses like a new intern with great ideas but no experience. AI and the Intern can alleviate a good deal of monotonous and repetitive work, but only if we keep a watchful eye on their output. From boosting productivity to uncovering new insights, AI can offer huge benefits, […]
Read More
September 9th, 2025
Craig Taylor
CyberHoot believes security awareness should feel positive, empowering, and rewarding. Traditional phishing reporting methods often do the opposite. A “Report Phish” button to often sends emails into an IT black hole, leaving employees wondering if they did the right thing, and rarely hearing back immediately. It’s far better to provide an outlet for employees to […]
Read More
September 3rd, 2025
Craig Taylor
In today’s cybersecurity landscape, breaches are rarely caused by a lack of technology. Instead, they stem from a lack of security culture. Firewalls, MFA, and endpoint detection are powerful tools, but without employees learning and embracing secure behaviors, the human element remains the weakest link. What Do We Mean by Security Culture? Security culture goes […]
Read More