Connect with us

Technology

VIPRE Security Group’s Annual Email Threat Landscape Shows Advanced Methods Needed for Security

Published

3 years ago

on

Analysis of 7 billion emails shows clean links are duping users, malicious EML attachments increased 10-fold in Q4, and social engineering attacks are at all-time highs.

NEW YORK, Feb. 14, 2024 /PRNewswire/ — VIPRE Security Group, a global leader and award-winning cybersecurity, privacy and data protection company, today released its report titled “Email Security in 2024: An Expert Look at Email-Based Threats.” The 2024 predictions for email security in this report are based on an analysis of more than 7 billion emails processed by VIPRE worldwide during 2023. This equates to almost one email for everyone on the planet. Of those, roughly 1 billion (or 15%) were malicious.

This research warns that in 2024, QR code hacks or quishing will increase, use of AI to create content for spam emails including deepfakes will rise; highly personalized social media mining will grow further; and a wide array of file types and formats – especially EML – will be used to propagate phishing and malware attacks. There will also be a marked uptick in state-sponsored attacks.

Key highlights 
As network security tools have improved in recent years, the corporate inbox has become an ever more attractive target to attackers. Often protected by nothing more than human nature and an antivirus, cybercriminals continue to use email to launch their most basic and persistent attacks. Now and again, they get a bit creative, which has come to bear in the past twelve months.

Clean links are duping users. When it comes to the method of attack, threat actors this past year favored links over other delivery methods (like attachments and QR codes) nearly seven to one (71%). The year before, VIPRE saw a 50/50 split, but their popularity is improving as attackers are getting smarter about what kinds of links they leverage. Based on this current trend, the use of such links are expected to increase this year, although not in the ways we might assume.

EML attachments defy detection. While EML attachments were a present threat throughout 2023, they increased tenfold in Q4. The benefit of sending malicious payloads via EML file is that they can get easily overlooked by many basic email security solutions when attached to the actual phishing email (which comes out clean). The malicious directions, hidden in plaintext within the body of the EML, may then encourage users to navigate to a link, call a phone number, or otherwise engage in a scam. Partly because of the novelty of EML use, curious users are prone to open, follow, and fall prey.

Browsers under attack. Q4’s top malware family, AgentTesla, infiltrates a target machine and harvests sensitive data off any number of qualifying browsers. This shows that attackers are launching malware merely for reconnaissance now, as valuable artifacts like username, computer name, operating system, CPU name, RAM, and IP address may fetch more on the Dark Web than they could garner in a one-off attack.

Malware skyrockets – still not top spot. Email-delivered malware remains a favorite, increasing by 276% between January and December of last year. However, despite the boost, it accounted for only 5% of malspam overall, trailing commercial spam (“Deal Ends Now!”), general scams, and phishing. Perhaps threat actors have found that it’s easier to trick end users than security solutions, which do manage to snag malware despite falling behind in emerging tactics like social engineering attacks. Consequently, numbers are low. The real weak link remains humans, as the prevalence of social engineering attacks will attest; of all spam emails, 35% were scams, and 22% were phishing attempts.

Targeted verticals. Financial services (22%) was the most targeted sector by phishing and malspam emails, followed by information technology (14%), healthcare (14%), education (10%), and government (8%). Information technology experienced a 59% increase in attacks between Q1 and Q4, whilst attacks on government inboxes went up by a staggering 16,000%.

“When you take a look at the kinds of [email] threats we’re seeing today, a lot of them are preventable. It just takes the right tools, but most companies don’t know they exist because email doesn’t always get the same kind of security attention as the rest of the network. Unfortunately, threat actors know this,” said Usman Choudhary, general manager, VIPRE Security Group.

To read the full report, click here: Email Security in 2024: An Expert Look at Email-Based Threats.

VIPRE leverages its unique understanding of email security to equip organizations with the information they need to protect themselves. This annual report is based on proprietary intelligence that is gleaned from months of effort and round-the-clock vigilance.

About VIPRE Security Group

VIPRE Security Group, part of Ziff Davis, Inc., is a leading provider of internet security solutions purpose-built to protect businesses, solution providers, and home users from costly and malicious cyber threats. With over 25 years of industry expertise, VIPRE is one of the world’s largest threat intelligence clouds, delivering exceptional protection against today’s most aggressive online threats. Our award-winning software portfolio includes next-generation antivirus endpoint cloud solutions, advanced email security products, along with threat intelligence for real-time malware analysis, and security awareness training for compliance and risk management. VIPRE solutions deliver easy-to-use, comprehensive layered defense through cloud-based and server security, with mobile interfaces that enable instant threat response. VIPRE is a proud Advanced Technology Partner of Amazon Web Services operating globally across North America and Europe. 

The group operates under various brands, including VIPRE®, StrongVPN®, IPVanish®, Inspired eLearning®, Livedrive®, and SugarSync®. www.VIPRE.com

Press Contact:
Scott E. Rupp
941-448-7566
https://millerrupp.com/

View original content to download multimedia:https://www.prnewswire.com/news-releases/vipre-security-groups-annual-email-threat-landscape-shows-advanced-methods-needed-for-security-302061964.html

SOURCE VIPRE Security Group

Related Topics:
Continue Reading

Technology

Minister Hodgson promotes Canadian energy and mining in London

Published

3 minutes ago

on

October 21, 2026

By

LONDON, Oct. 21, 2026 /CNW/ — Canada has what the world wants. Our resources, expertise and institutions can support global energy security and affordability today while laying the foundation for a more prosperous, secure lower-carbon future. We have renewed ambition to engage with the world, diversify our trade and back our partnerships with investment that builds a stronger Canada and supports our allies.

Today, the Honourable Tim Hodgson, Minister of Energy and Natural Resources, concluded a successful visit to London, United Kingdom, for the London Metal Exchange (LME) Week.

While in London, Minister Hodgson met with his ministerial counterparts in the U.K., including Secretary of State for Energy Security and Net Zero, Miatta Fahnbulleh; Minister of State (Minister for Defence Readiness and Industry), Luke Pollard; and Parliamentary Under-Secretary of State (Minister for Reindustrialisation), Blair McDougall. He discussed closer collaboration, increased trade and enhanced bilateral investment between Canada and the U.K. on energy and natural resources.

The Minister also met with industry representatives, including from Anglo American, Masdar and Teck Resources, to discuss commercial opportunities with a focus on diversifying and securing mineral supply chains. Building on Canada’s 2025 G7 Presidency and the establishment of the Critical Minerals Resilience and Production Alliance, which has already catalyzed 69 new deals that have unlocked $19.2 billion in capital investment, discussions highlighted opportunities for further investment in and sourcing from Canadian mining projects.

Minister Hodgson also took part in a fireside conversation on the margins of LME with Jonathan Price, President and CEO of Teck Resources, on critical minerals supply chains and the global need to diversify sources of supply, and he spoke at the Financial Times Energy Transition Summit about Canada’s ambitious energy and mining policy agenda.

Canada is working with trusted partners in the U.K. and beyond to strengthen global energy and critical minerals security, diversify our trade and attract investment into Canadian projects so we can build a stronger, more resilient Canadian economy.

Quote

“Canada is blessed with abundant energy and minerals, world-class expertise and financial institutions, and stability and dependability that the world is looking for now more than ever. I look forward to building on this trip to the United Kingdom to deepen our international co-operation and catalyze investments that will diversify our trade and create economic opportunities for Canadians.”

The Honourable Tim Hodgson
Minister of Energy and Natural Resources

Quick Facts

The U.K. is Canada’s largest European trade and investment partner and third-largest individual trading partner, with bilateral goods and services trade totaling $85 billion in 2025.In July 2026, Canada ratified the Protocol on the Accession of the United Kingdom to the Comprehensive and Progressive Agreement for Trans-Pacific Partnership (CPTPP). It entered into force on September 1, 2026, furthering opportunities for Canadian businesses through integrated supply chains and the single set of rules applied across CPTPP markets.The Canada–U.K. trading relationship is underpinned by our comprehensive bilateral Trade Continuity Agreement (TCA). The agreement does not expire and provides extensive market access for Canadian businesses, exporters and investors, including tariff-free access for 99 percent of tariff lines.In 2025, Canadian energy trade with the U.K. reached $1.8 billion, representing a 24.8 percent increase compared with 2024.In 2025, Canadian exports in mineral, metals and related products reached $40.8 billion, an increase of nearly 77 percent compared with 2024.Through the Canada–U.K. Critical Minerals Dialogue, both countries will continue working together to identify projects for investment and collaboration, strengthen secure and sustainable supply chains, and support growth in the mining and manufacturing sectors.

Associated Links

Canada–United Kingdom relationsOur critical minerals strategic partnerships: International partnerships

Follow Natural Resources Canada on LinkedIn

SOURCE Natural Resources Canada

Continue Reading

Technology

NineTenths Joins ISASecure to Advance Adoption of ISA/IEC 62443 Cybersecurity Standards

Published

3 minutes ago

on

October 21, 2026

By

DURHAM, N.C., Oct. 21, 2026 /PRNewswire/ — The International Society of Automation (ISA) — the leading professional society for automation — announced that NineTenths Company has officially joined ISASecure®, the globally recognized certification program that validates conformance to the ISA/IEC 62443 series of standards for industrial automation and control systems (IACS) cybersecurity.

NineTenths is a Saudi Arabia-based technology company specializing in advanced industrial solutions, including unmanned aerial systems (drones), robotics, infrastructure inspection, surveying, and operational technology (OT) cybersecurity. Serving industries including oil and gas, petrochemicals, energy, water and wastewater, manufacturing, and other critical infrastructure sectors, the company combines emerging technologies with engineering expertise to improve operational efficiency, security, and resilience. NineTenths uses ISA/IEC 62443 as a framework supporting its OT cybersecurity services, with capabilities aligned to cybersecurity management systems, risk-based assessments, zones and conduits, industrial system security requirements, and secure product development practices.

This new partnership with ISASecure will provide NineTenths with the opportunity to further strengthen its commitment to advancing operational technology (OT) cybersecurity across Saudi Arabia and the broader Gulf region. Building on its existing alignment with the internationally recognized ISA/IEC 62443 standards, ISASecure membership offers NineTenths opportunities to engage with global cybersecurity experts, industrial automation suppliers, and certification bodies while expanding its capabilities and enhancing operational resilience and cybersecurity readiness for clients.

“Serving government, public safety, construction, infrastructure, and energy sectors, our commitment to quality and safety is backed by internationally recognized certifications and manufacturer accreditations,” said Naif AlZahrani, NineTenths vice president of operation. “Our continued focus on OT cybersecurity from mission to maintenance ensures protection for the full OT security lifecycle. We look forward to being part of ISASecure as we continue to support organizations across Saudi Arabia and the Gulf Cooperation Council (GCC) in adopting cutting-edge technologies aligned with Saudi Vision 2030.”

“It is an honor to welcome NineTenths into the ISASecure program,” said Mark DeAngelo, ISASecure program manager. “We look forward to collaborating with NineTenths as we advance our mission of partnership, certification, and standards-based product development to help achieve a more secure world.”

About ISASecure®

Founded in 2007 by the International Society of Automation (ISA), ISASecure® is a globally recognized certification program that provides assurance for the cybersecurity of industrial automation control systems (IACS). Through rigorous conformance to the ISA/IEC 62443 series of standards, ISASecure certifications validate that products and supplier practices meet internationally recognized benchmarks for OT security. ISASecure is a wholly owned subsidiary of ISA. 

ISASecure’s global ecosystem includes leaders such as Chevron, ExxonMobil, GSK, Saudi Aramco, Honeywell, Johnson Controls, Schneider Electric, Trane Technologies, and Yokogawa, among others.

For more information, visit isasecure.org.

About NineTenths

Founded in 2019, NineTenths is a Saudi Arabia-based technology company that helps organizations improve operational efficiency, reduce costs, and make accurate data-driven decisions across industrial sectors. NineTenths is powered by a team of skilled Saudi engineers, programmers, and research and development specialists. Their expertise enables the company to design, customize, and deploy advanced unmanned aerial vehicle (UAV) solutions aligned with real-world operational requirements. NineTenths supports organizations in adopting cutting-edge technologies aligned with Saudi Vision 2030.

About ISA

The International Society of Automation (ISA) is a nonprofit professional association founded in 1945 to create a better world through automation. ISA’s mission is to empower the global automation community through standards and knowledge sharing. ISA develops widely used global standards and conformity assessment programs, certifies professionals, provides education and training, publishes books and technical articles, hosts conferences and exhibits, and provides networking and career development programs for its members and customers around the world. Learn more at www.isa.org.

View original content to download multimedia:https://www.prnewswire.com/news-releases/ninetenths-joins-isasecure-to-advance-adoption-of-isaiec-62443-cybersecurity-standards-302915663.html

SOURCE The International Society of Automation

Continue Reading

Technology

Crest Data More Than Doubles Its Grafana Plugin Portfolio as the Marketplace Reaches General Availability at ObservabilityCON 2026

Published

3 minutes ago

on

October 21, 2026

By

SAN FRANCISCO, Oct. 21, 2026 /PRNewswire/ — Crest Data, an AI-first product engineering provider specializing in Observability and Cybersecurity for enterprises and technology innovators, today announced 15 new commercial plugins for Grafana, more than doubling its portfolio in the Grafana Marketplace to 25. The release coincides with Grafana Labs moving the Marketplace to general availability at ObservabilityCON 2026. The new plugins span cloud security, virtualization and data protection platforms, so IT, platform and security teams can monitor those systems in Grafana alongside the telemetry they already have, instead of switching between separate vendor consoles.

The Grafana Marketplace gives enterprises a trusted, commercial channel to discover, license and install production-grade plugins directly from the Grafana catalog.

As a founding Marketplace partner, Crest Data arrives at general availability with a broad portfolio of 25 native, agentless data source plugins that query their source systems through their APIs, with no exporters, no extra collection layer and no data ingestion costs. Built in partnership with Grafana Labs, every plugin ships with pre-built dashboards, so teams can unify security, network, virtualization, SaaS and storage monitoring in a single view.

“Crest Data has been developing integrations used by Fortune 100 customers for years, giving us a deep understanding of what enterprises need to meet their operational, security and compliance requirements,” said Malhar Shah, co-founder and CEO at Crest Data. “Our plugins bring this experience to the community by unifying IT, platform and security monitoring in Grafana with coverage across the security, network, virtualization, SaaS and storage domains.”

“Crest Data brings extensive experience across observability, security and compliance integrations, and we’re delighted to have them as part of the Grafana Marketplace,” said Ash Mazhari, VP of Corporate Development, Grafana Labs. “Crest Data is a leading contributor to the ecosystem, and we’re already seeing strong traction for their plugins from organizations around the world. We look forward to seeing how Crest Data continues to expand what enterprises can achieve with Grafana.”

Crest Data’s full Grafana plugin portfolio includes:

Security: FortiGate, Proofpoint Email Security, Zscaler ZIA, Zscaler ZPA, Cisco ASA, Cisco ISE, Tanium, Wiz, Qualys, Prisma Cloud, TenableNetwork: Cisco Meraki, Akamai, Zscaler ZDX, Infoblox Universal DDIVirtualization: VMware vSphere, Citrix Cloud, Citrix DaaSSaaS: Tableau, Zoom, SharePoint, ConvivaStorage and Data Protection: NetApp ONTAP, Dell PowerScale, Rubrik

To learn more about Crest Data’s Grafana services, including Marketplace plugins, migrations, implementations, customizations and managed services, visit https://www.crestdata.ai/solutions/grafana/

About ObservabilityCON 2026

ObservabilityCON is Grafana Labs’ flagship observability event, bringing together practitioners, experts and leaders to explore the latest innovations in observability and the fast-moving AI era. ObservabilityCON 2026 takes place at Pier 27 in San Francisco from Oct. 19–21, featuring three days of technical sessions, hands-on workshops, live demos, user success stories and opportunities to connect with the Grafana observability community.

About Crest Data

Crest Data is an AI-first product engineering provider specializing in Observability and Cybersecurity for enterprises and technology innovators. We design, build and operate intelligent platforms across security, observability, AI, cloud and data. Through deep engineering expertise and AI-led integrations and migrations, Crest Data helps organizations improve visibility, modernize technology platforms and build resilient, future-ready operations. Learn more at https://www.crestdata.ai/ 

 

View original content to download multimedia:https://www.prnewswire.com/news-releases/crest-data-more-than-doubles-its-grafana-plugin-portfolio-as-the-marketplace-reaches-general-availability-at-observabilitycon-2026-302915598.html

SOURCE Crest Data

Continue Reading

Trending