Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
8 insights from Proofpoint Protect: Security bets on intent as AI agents join the workforce
At this week’s Proofpoint Protect event, the security debate moved beyond whether enterprises will deploy AI agents to how they will govern them. Attackers now use AI to write flawless phishing lures and chain exploits at machine speed. Meanwhile, the agents
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
Security flaws in Salesforce Agentforce allowed poisoned leads to hijack its AI agents, silently steal CRM data without requiring a click, and send phishing messages under the agents’ identities. Zenity Labs uncovered the three vulnerabilities, collectively called SalesBleed, and reported them to Sa
Data & AI Architecture Focus: 6 Best Brand Protection Tools for Phishing and Impersonation
Brand protection means different things to different teams. A legal team may need to remove counterfeit marketplace listings. A security team may need to find a fake login page, a fraudulent social profile, or a rogue application impersonating the company. Th
In Her Final Weeks, SEC's Peirce Calls for Ending the KYC 'Panopticon'
In one of her final speeches as commissioner, Peirce argued that regulators' "data haystacks" endanger the people they aim to protect—as recent KYC leaks expose crypto holders to phishing and physical attacks.
Brooklyn man sent to prison for 12 years for stealing $16M in a Coinbase phishing scheme
A Brooklyn resident is headed to prison for 12 years after pleading guilty to scamming nearly 100 Coinbase users out of roughly $16 million dollars, a New York district attorney said Wednesday. Rona
Brooklyn man gets up to 12 years over $16 million Coinbase social engineering scheme
A court sentenced 23-year-old Ronald Spektor to four to 12 years in prison for a $15.9 million Coinbase phishing scheme. This story appeared on theblock.co, 2026-09-24 08:21:32.
One URL, Three Different Tricks, (Thu, Sep 24th)
Yesterday, we received a phishing email with an interesting link. At first sight, it looks like garbage, but every piece of it has been carefully crafted to confuse basic security controls. Here is the defanged link:
How device code phishing gives scammers access to your account
You receive an invitation to a password-protected meeting, a secure chatroom, or a shared document. To get access, it says, you need to enter a short code on a sign-in page for one of your accounts.
kalir-python added to PyPI
Official Python SDK for the Kalir Public API: your organization's digital-risk intelligence (incidents, credential and infostealer exposure, phishing impersonation, dark-web and Telegram mentions) pl
Microsoft takes down AI-boosted phishing tool that hit 12,000 accounts
Microsoft, UK police, and partners disrupted EvilTokens PhaaS, arresting two suspects and seizing 200+ domains/sitesEvilTokens used AI to scale device‑code phishing, compromising 12,
What actually reduces click rates on phishing simulations?
We run security awareness training as part of our cyber security services for small businesses, and the results plateau. Click rates drop after the first few rounds, then level off around the same gr