HissenIT

Phishing success: Arizona Courts Cyberattack Exposes Sensitive Data of 1.3 Million
→ Give your employees the time they need to master the fundamentals of security awareness!

#phishing #lms #scorm #awareness #infosec #nis2 #dora #iso27001

https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-10-2026.html

Phishing Toolkit Uses Social Media Ads to Steal Credentials and Payment Data

The Milk Dragon (Nailong) phishing kit uses fake discounts promoted through ...
→ Give your employees the time they need to master the fundamentals of security awareness!

#phishing #lms #scorm #awareness #infosec #nis2 #dora #iso27001

https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-10-2026.html

How do you deal with privileged roles in your organization? Is your documentation always “audit-ready”?

https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-10-2026.html

#lms #scorm #manager #infosec #nis2 #dora #iso27001

The weakest link in your security chain isn't your software.
It's the employee who hasn't been trained properly.
You can fix that.
#lms #scorm #infosec #awareness #cybersecurity #training

Major Phishing Campaigns Target Microsoft 365, Voicemail Users and ChatGPT Accounts

→ Security Awareness takeaway: Together, these campaigns demonstrate that phishing is moving beyond obvious fake emails toward highly
convincing lures that exploit AI, trusted services, familiar workflows, and legitimate authentication infrastructure.

#ceo #ciso #itsecurity #cybersecurity #lms #scorm

https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-09-2026.html

Harvard, Oxford, DuckDuckGo Hacked: One Coding Mistake Compromised 700 Websites
→ textbook secure coding failure
→ teach secure programming to your managers and developers

#ciso #ceo #awareness #developer #nis2 #dora #iso27001

https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-09-2026.html

IT Security Audits following ISO27001/27002

How do you deal with IT Security Audits regarding Employee Security Awareness within your organization? In case you are using a Learning Management System (LMS), you might be able to rely on strong reporting:

https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-09-2026.html

Phishers Turn Google's Own Infrastructure Into a Trust Proxy

→ Researchers uncovered an active, targeted phishing campaign
→ Deliberate chain of six legitimate Google services
→ ...

#phishing #lms #scorm #itsecurity #awareness #cybersecurity

https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-09-2026.html

Cross-Site Scripting (XSS) still exists in professional Applications!
- XSS2Shell WordPress XSS Vulnerability (08/2026)
- MS Exchange Server XSS Vulnerability (06/2026)
- Stored XSS Vulnerabilities in VMware Products (06/2026)
- ...

What about your in-house development? Security in custom-made software – do you rely solely on frameworks? Is Secure Programming background knowledge important to your team and project managers?

#itsecurity #securecode #secureprogramming #awareness #owasp

Microsoft/Malwarebytes/HackerNews: Fake CAPTCHA Turns Users into Their Own Attackers
- Cybercriminals are using compromised websites...
- Awareness takeaway: A CAPTCHA or "Verify you are human" prompt should never...

https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-09-2026.html

#cybersecurity #itsecurity #culture #awareness #lms #scorm

Hacker News → When "Apple Support" Calls: AI-Powered Vishing Targets Stolen Devices

- AI-powered voice agents to impersonate Apple Support
- AI is making social engineering more convincing
- Read more...

https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-08-2026.html

#ciso #itsecurity #cybersecurity #awareness #leadership

Whether you develop in-house or work with external development partners, custom software comes with security responsibilities. Build security into your development process from day one. Train developers in OWASP, secure coding and common application security risks. Equip TPMs and Project Managers to recognize security risks throughout the project lifecycle.

#CyberSecurity #ApplicationSecurity #AppSec #SecureCoding #OWASP #DevSecOps #SoftwareSecurity #SecurityTraining

Are you on a platform or are you owning your awareness program or both?
Security Awareness Training - for real and for audits. For employees, managers & developers!

#itsecurity #security #cybersecurity #awareness #iso27001

LMS-based: MORE AWARENESS. LOWER COSTS.
Security Awareness Training - Smarter. Scalable. More Cost-Effective.

#cybersecurity #awareness #cio #scorm #lms #learning

Financial Sector Targeted in Sophisticated IT Helpdesk Vishing Wave
> Attackers are directly contacting employees at financial institutions...
→ General Human Risk Management Tip: Allow for IT Security Awareness Training
https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-08-2026.html

#ciso #itsecurity #cybersecurity #awareness #leadership

Fake Download Sites Exploit Trust in Familiar Links

>!: Even when users hover over a download button, the browser can display a genuine destination
→ Our course makes users aware of such evergreen and time-tested tricks

https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-08-2026.html

#cybersecurity #awareness #training #lms #scorm

Stored XSS in 'directory-serve' Node.js Package
> A Stored Cross-Site Scripting (XSS) vulnerability was identified in the 'directory-serve'...
→ Cross-Site Scripting mitigation: Teach your TPMs and developers
https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-08-2026.html

#nis2 #dora #iso27001 #compliance #itsecurity #cybersecurity

ClickFix Social Engineering Campaign targeting macOS
> A novel cyberattack campaign targeting macOS users relies on fake CAPTCHAs...
→ basic Cybersecurity Awareness for Employees is so important
https://www.hissenit.com/en/blog/it-security-awareness-news-roundup-08-2026.html

#itsecurity #infosec #awareness #training #cybersecurity #scorm