Phishing for Answers

Cybersecurity for every audience.

Not your typical cyber blog.

Welcome to Phishing for Answers, a site that provides information about cyber news, technology policy, and information security management.

This blog is intended to inform every type of reader, from experienced professionals to those with a general interest in cybersecurity. Because online data protection is first and foremost a human problem, Phishing for Answers strives to publish content that can be consumed by everyone.

Relapse of LAPSUS$: A Cyber Threat Intelligence Case Study

Remember LAPSUS$, the group of teenage hackers that breached Microsoft, Okta, T-Mobile and the Brazilian Ministry of Health? Although most of LAPSUS$ leaders were arrested earlier this year, the cybersecurity community can still learn from these cybercriminals. Through the use of intelligence methodologies and cyber threat intelligence (CTI) frameworks, we explore the capabilities of this hacking unit.

Read More

5 Things You Should Know about Social Engineering

Not all cyberattacks involve hacking, sometimes it just involves human deception. Social engineering seeks to exploit user psychology to gain access to valuable information. Read 5 important characteristics of social engineering attacks - what they look like, how they trick users, and ways to avoid becoming a victim.

Read More

#howitworks: Virtual Private Networks (VPNs)

This week’s #howitworks post discusses virtual private networks (VPNs). Learn more about how VPNs encrypt and secure internet connections, some VPN best practices, and how VPNs can help travelers Netflix and chill from any location. This post is the final part of this year’s #howitworks series, which aims to help readers to gain a basic understanding of important technologies and related security implications. This series is a part of Cybersecurity Awareness Month 2021, which is dedicated to raising awareness about cybersecurity issues and data protection.

Read More

#howitworks: Internet of Things (IoT)

This week’s #howitsworks post is all about the Internet of Things (IoT). Read more to learn how Amazon Alexa and Apple Siri process voice signals, the different types of IoT technologies, and related security concerns. The #howitworks series aims to help readers to gain a basic understanding of important technologies and related security implications. This series is a part of Cybersecurity Awareness Month 2021, which is dedicated to raising awareness about cybersecurity issues and data protection.

Read More
#howitworks, Industry Newbies, Cyber Crime Kate Esprit #howitworks, Industry Newbies, Cyber Crime Kate Esprit

#howitworks: The Dark Web

This week’s #howitworks post is all about the dark web. Learn more about the legitimate and illegitimate uses of the dark web and how it ensures anonymous browsing. The #howitworks series aims to help readers to gain a basic understanding of important technologies and related security implications. This series is a part of Cybersecurity Awareness Month 2021, which is dedicated to raising awareness about cybersecurity issues and data protection.

Read More
#howitworks, Industry Newbies Kate Esprit #howitworks, Industry Newbies Kate Esprit

#howitworks: Denial-of-Service (DoS) Attacks

This week’s #howitworks post is all about denial-of-service (DoS) attacks. Learn more about these cyberattacks, why they are so common, and how to avoid becoming a victim. The #howitworks series aims to help readers to gain a basic understanding of important technologies and related security implications. This series is a part of Cybersecurity Awareness Month 2021, which is dedicated to raising awareness about cybersecurity issues and data protection.

Read More
#howitworks, Industry Newbies Kate Esprit #howitworks, Industry Newbies Kate Esprit

#howitworks: The Cloud

This week’s #howitworks post is all about the cloud - what it is, how it works, and how to protect data stored on the cloud. The #howitworks series aims to help readers to gain a basic understanding of important technologies and related security implications. This series is a part of Cybersecurity Awareness Month 2021, which is dedicated to raising awareness about cybersecurity issues and data protection.

Read More