For many CISOs, compliance can feel like a necessary evil and a false sense of security. While frameworks like ISO 27001, SOC 2, and PCI DSS offer structured guidelines, they don’t automatically equate to strong cybersecurity. The challenge? Many organizations focus on checking the compliance box rather than ensuring their controls are effective. The problem isn’t compliance itself, it’s the mindset. Too often, security teams scramble to pass an audit, only to return to business … More →
The post The compliance illusion: Why your company might be at risk despite passing audits appeared first on Help Net Security.
Starting in Q3 2024, Cofense Intelligence detected an ongoing campaign targeting employees working in social media and marketing positions. In this campaign, marked employees were encouraged to apply to a social media manager position in a Fortune 500 company. Meta, Coca-Cola, PayPal, and other brand name companies were spoofed to send fake job applications to prospects.
The post Job Application Spear Phishing appeared first on Security Boulevard.