Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Wall Street's New Cyber Threat Starts With a Phone Call
Attackers are shifting from network breaches to logging into cloud platforms, using phone calls to initiate phishing campaigns targeting financial fir
Phishing site impersonates Trezor in top Google search
A phishing site impersonating Trezor appeared as a top Google search result, draining user funds.
Phishing Breach Hits US Defense Supplier IEH Corp
IEH Corporation, a US defense supplier, suffered a phishing attack that compromised a Microsoft 365 mailbox with engineering and export-controlled dat
Microsoft 365 AitM Phishing Targets Finance Emails
A widespread phishing campaign uses adversary-in-the-middle techniques to hijack Microsoft 365 accounts, aiming to steal payroll and finance-related e
Fake IT Help Desks Steal MFA Credentials
Hackers impersonated IT support to steal MFA credentials, targeting over 200 firms, including major financial companies.
Vishing campaign targets top US hedge funds
Google links BlackFile (Redact) to vishing attacks on hedge funds and law firms, impersonating IT staff by phone.
IEH Corp Phished: M365 Mailbox Breached
US defense supplier IEH Corp disclosed a phishing attack that compromised a Microsoft 365 mailbox, exposing emails and potentially export-controlled d
Levi Strauss & Co. says hackers stole corporate data in cyberattack
Levi Strauss & Co. (Levi's) says that hackers used social engineering on three of its employees to gain access to and steal corporate data stored on their machines.
AI Spear Phishing Texts Beat Gut Instinct
A banker ranked AI-crafted spear phishing texts by click likelihood, finding one so convincing it halted the sorting process, showing intuition fails
BlackFile crew targets Blackstone, KKR in vishing wave
Google's Threat Intelligence Group reports that the BlackFile extortion crew has targeted private equity and financial firms with vishing campaigns in
Vishing Campaign Spoofs IT Helpdesk to Steal Cloud Data
Google Threat Intelligence Group reports a vishing campaign since May targeting financial, private equity, and professional services firms, using spoo
Fake vendor email costs Pittsburg nearly $1M
The East Bay city of Pittsburg lost nearly $1 million after falling for a fake vendor email scam.