[{"innerBlocks":[],"name":"core\/freeform","postId":127412,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"

10 strategies to reduce the threat of phishing attacks<\/h2>
Phishing attacks remain the top cyberattack challenge for healthcare organizations, according to Cofense, a vendor that offers professional services to stop these attacks. Email delivers 92 percent of malware, and by the end of 2017, the average user received 16 malicious emails a month, the company says. A new report offers ideas to help healthcare organizations better ward off phishing attempts.<\/p>

Stay aware<\/h2>
Concentrate on conditioning users to report questionable emails, not just simply recognize and resist them. Reporting volumes shown in Cofense data prove that trained users make good intelligence agents.<\/p>

Run tests<\/h2>
Engage in phishing simulations based on active threats. Focus on actual threats the organization faces. If HIT executives are not sure that the right threats are being identified, ask for help from the organization\u2019s security operations center.<\/p>

Quality matters<\/h2>
In building a phishing awareness program, favor quality over quantity. Be selective in the threats users are asked to know and report. If users are resilient to the most pressing threats, the organization can\u2019t ask for more.<\/p>

Credential threats<\/h2>
With credential phishing still the most active way to get into an organization\u2019s network, educate users to be careful with their logins and require two-factor authentication for users with access to high-value data.<\/p>

Know what is real<\/h2>
Ensure that users know what a real email looks like and communicate corporate email formats so users can spot a fake format, which lowers vulnerability to compromised email accounts.<\/p>

Follow the money<\/h2>
Financial transactions are popular subjects and themes for phishing emails because they work. Include plenty of attention on financial transactions in the awareness program and be sure to target finance and other departments that disburse funds.<\/p>

Measuring<\/h2>
As the organization measures improvements in recognition and reporting, aim for an initial ratio of one reported email to one susceptible user.<\/p>

Stay current<\/h2>
Ensure the anti-phishing program keeps up with the newest subjects and themes. Hackers never rest.<\/p>

Automate<\/h2>
Make use of automation to remove reported spam and streamline email analysis.<\/p>

Don\u2019t let down defenses<\/h2>
The constant evolution in phishing techniques shows that focusing on the \u201cknown bad\u201d is just not good enough. Security appliances and software geared to fight known threats create a gap that hackers happily exploit.<\/p>

More information<\/h2>
The full report from Cofense is available here<\/a>.<\/p>

","saveContent":"

10 strategies to reduce the threat of phishing attacks<\/h2>
Phishing attacks remain the top cyberattack challenge for healthcare organizations, according to Cofense, a vendor that offers professional services to stop these attacks. Email delivers 92 percent of malware, and by the end of 2017, the average user received 16 malicious emails a month, the company says. A new report offers ideas to help healthcare organizations better ward off phishing attempts.<\/p>

Stay aware<\/h2>
Concentrate on conditioning users to report questionable emails, not just simply recognize and resist them. Reporting volumes shown in Cofense data prove that trained users make good intelligence agents.<\/p>

Run tests<\/h2>
Engage in phishing simulations based on active threats. Focus on actual threats the organization faces. If HIT executives are not sure that the right threats are being identified, ask for help from the organization\u2019s security operations center.<\/p>

Quality matters<\/h2>
In building a phishing awareness program, favor quality over quantity. Be selective in the threats users are asked to know and report. If users are resilient to the most pressing threats, the organization can\u2019t ask for more.<\/p>

Credential threats<\/h2>
With credential phishing still the most active way to get into an organization\u2019s network, educate users to be careful with their logins and require two-factor authentication for users with access to high-value data.<\/p>

Know what is real<\/h2>
Ensure that users know what a real email looks like and communicate corporate email formats so users can spot a fake format, which lowers vulnerability to compromised email accounts.<\/p>

Follow the money<\/h2>
Financial transactions are popular subjects and themes for phishing emails because they work. Include plenty of attention on financial transactions in the awareness program and be sure to target finance and other departments that disburse funds.<\/p>

Measuring<\/h2>
As the organization measures improvements in recognition and reporting, aim for an initial ratio of one reported email to one susceptible user.<\/p>

Stay current<\/h2>
Ensure the anti-phishing program keeps up with the newest subjects and themes. Hackers never rest.<\/p>

Automate<\/h2>
Make use of automation to remove reported spam and streamline email analysis.<\/p>

Don\u2019t let down defenses<\/h2>
The constant evolution in phishing techniques shows that focusing on the \u201cknown bad\u201d is just not good enough. Security appliances and software geared to fight known threats create a gap that hackers happily exploit.<\/p>

More information<\/h2>
The full report from Cofense is available here<\/a>.<\/p>

","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Stay aware<\/h2>Concentrate on conditioning users to report questionable emails, not just simply recognize and resist them. Reporting volumes shown in Cofense data prove that trained users make good intelligence agents.<\/p>

Run tests<\/h2>Engage in phishing simulations based on active threats. Focus on actual threats the organization faces. If HIT executives are not sure that the right threats are being identified, ask for help from the organization\u2019s security operations center.<\/p>

Quality matters<\/h2>In building a phishing awareness program, favor quality over quantity. Be selective in the threats users are asked to know and report. If users are resilient to the most pressing threats, the organization can\u2019t ask for more.<\/p>

Credential threats<\/h2>With credential phishing still the most active way to get into an organization\u2019s network, educate users to be careful with their logins and require two-factor authentication for users with access to high-value data.<\/p>

Know what is real<\/h2>Ensure that users know what a real email looks like and communicate corporate email formats so users can spot a fake format, which lowers vulnerability to compromised email accounts.<\/p>

Follow the money<\/h2>Financial transactions are popular subjects and themes for phishing emails because they work. Include plenty of attention on financial transactions in the awareness program and be sure to target finance and other departments that disburse funds.<\/p>

Measuring<\/h2>As the organization measures improvements in recognition and reporting, aim for an initial ratio of one reported email to one susceptible user.<\/p>

Stay current<\/h2>Ensure the anti-phishing program keeps up with the newest subjects and themes. Hackers never rest.<\/p>

Automate<\/h2>Make use of automation to remove reported spam and streamline email analysis.<\/p>

Don\u2019t let down defenses<\/h2>The constant evolution in phishing techniques shows that focusing on the \u201cknown bad\u201d is just not good enough. Security appliances and software geared to fight known threats create a gap that hackers happily exploit.<\/p>

More information<\/h2>The full report from Cofense is available here<\/a>.<\/p>","saveContent":"

Stay aware<\/h2>Concentrate on conditioning users to report questionable emails, not just simply recognize and resist them. Reporting volumes shown in Cofense data prove that trained users make good intelligence agents.<\/p>

Run tests<\/h2>Engage in phishing simulations based on active threats. Focus on actual threats the organization faces. If HIT executives are not sure that the right threats are being identified, ask for help from the organization\u2019s security operations center.<\/p>

Quality matters<\/h2>In building a phishing awareness program, favor quality over quantity. Be selective in the threats users are asked to know and report. If users are resilient to the most pressing threats, the organization can\u2019t ask for more.<\/p>

Credential threats<\/h2>With credential phishing still the most active way to get into an organization\u2019s network, educate users to be careful with their logins and require two-factor authentication for users with access to high-value data.<\/p>

Know what is real<\/h2>Ensure that users know what a real email looks like and communicate corporate email formats so users can spot a fake format, which lowers vulnerability to compromised email accounts.<\/p>

Follow the money<\/h2>Financial transactions are popular subjects and themes for phishing emails because they work. Include plenty of attention on financial transactions in the awareness program and be sure to target finance and other departments that disburse funds.<\/p>

Measuring<\/h2>As the organization measures improvements in recognition and reporting, aim for an initial ratio of one reported email to one susceptible user.<\/p>

Stay current<\/h2>Ensure the anti-phishing program keeps up with the newest subjects and themes. Hackers never rest.<\/p>

Automate<\/h2>Make use of automation to remove reported spam and streamline email analysis.<\/p>

Don\u2019t let down defenses<\/h2>The constant evolution in phishing techniques shows that focusing on the \u201cknown bad\u201d is just not good enough. Security appliances and software geared to fight known threats create a gap that hackers happily exploit.<\/p>

More information<\/h2>

Stay aware<\/h2>
Concentrate on conditioning users to report questionable emails, not just simply recognize and resist them. Reporting volumes shown in Cofense data prove that trained users make good intelligence agents.<\/p>

Run tests<\/h2>
Engage in phishing simulations based on active threats. Focus on actual threats the organization faces. If HIT executives are not sure that the right threats are being identified, ask for help from the organization\u2019s security operations center.<\/p>

Quality matters<\/h2>
In building a phishing awareness program, favor quality over quantity. Be selective in the threats users are asked to know and report. If users are resilient to the most pressing threats, the organization can\u2019t ask for more.<\/p>

Credential threats<\/h2>
With credential phishing still the most active way to get into an organization\u2019s network, educate users to be careful with their logins and require two-factor authentication for users with access to high-value data.<\/p>

Know what is real<\/h2>
Ensure that users know what a real email looks like and communicate corporate email formats so users can spot a fake format, which lowers vulnerability to compromised email accounts.<\/p>

Follow the money<\/h2>
Financial transactions are popular subjects and themes for phishing emails because they work. Include plenty of attention on financial transactions in the awareness program and be sure to target finance and other departments that disburse funds.<\/p>

Measuring<\/h2>
As the organization measures improvements in recognition and reporting, aim for an initial ratio of one reported email to one susceptible user.<\/p>

Stay current<\/h2>
Ensure the anti-phishing program keeps up with the newest subjects and themes. Hackers never rest.<\/p>

Automate<\/h2>
Make use of automation to remove reported spam and streamline email analysis.<\/p>

Don\u2019t let down defenses<\/h2>
The constant evolution in phishing techniques shows that focusing on the \u201cknown bad\u201d is just not good enough. Security appliances and software geared to fight known threats create a gap that hackers happily exploit.<\/p>

More information<\/h2>
The full report from Cofense is available here<\/a>.<\/p>

","saveContent":"

Stay aware<\/h2>
Concentrate on conditioning users to report questionable emails, not just simply recognize and resist them. Reporting volumes shown in Cofense data prove that trained users make good intelligence agents.<\/p>

Run tests<\/h2>
Engage in phishing simulations based on active threats. Focus on actual threats the organization faces. If HIT executives are not sure that the right threats are being identified, ask for help from the organization\u2019s security operations center.<\/p>

Quality matters<\/h2>
In building a phishing awareness program, favor quality over quantity. Be selective in the threats users are asked to know and report. If users are resilient to the most pressing threats, the organization can\u2019t ask for more.<\/p>

Credential threats<\/h2>
With credential phishing still the most active way to get into an organization\u2019s network, educate users to be careful with their logins and require two-factor authentication for users with access to high-value data.<\/p>

Know what is real<\/h2>
Ensure that users know what a real email looks like and communicate corporate email formats so users can spot a fake format, which lowers vulnerability to compromised email accounts.<\/p>

Follow the money<\/h2>
Financial transactions are popular subjects and themes for phishing emails because they work. Include plenty of attention on financial transactions in the awareness program and be sure to target finance and other departments that disburse funds.<\/p>

Measuring<\/h2>
As the organization measures improvements in recognition and reporting, aim for an initial ratio of one reported email to one susceptible user.<\/p>

Stay current<\/h2>
Ensure the anti-phishing program keeps up with the newest subjects and themes. Hackers never rest.<\/p>

Automate<\/h2>
Make use of automation to remove reported spam and streamline email analysis.<\/p>

Don\u2019t let down defenses<\/h2>
The constant evolution in phishing techniques shows that focusing on the \u201cknown bad\u201d is just not good enough. Security appliances and software geared to fight known threats create a gap that hackers happily exploit.<\/p>

More information<\/h2>
The full report from Cofense is available here<\/a>.<\/p>

","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

10 strategies to reduce the threat of phishing attacks

More for you