Security awareness tips, industry news, and product updates.
Every back-to-school season brings a surge of phishing aimed at schools, universities and students - and the lures land in corporate inboxes too. What the latest data shows and how to prepare your workforce before the wave peaks.
Push bombing turns the employee habit of tapping 'Approve' into a breach vector. The fix pairs number matching and phishing-resistant MFA with one trained rule: never approve a prompt you did not trigger.
Attackers now purpose-build phishing for smartphones, where desktop email defenses cannot see and distracted users tap first. Research shows smishing drives 69.3 percent of mobile phishing - and iPhones are not the safe haven many assume.
New 2026 research shows malicious SVG attachments have grown fifty-fold, becoming the third most common malicious attachment type. Here is why an image file can phish you - and what to change in your filters, policies and simulations.
New 2026 survey data shows one in four Americans received an AI deepfake voice call in the past year - and nearly as many doubt they could spot one. The defense is a policy, not an ear.
The Luna Moth extortion crew escalated sharply in May and June 2026: an FBI FLASH alert, a leak site listing roughly 100 victims, reported $20 million ransom demands and attackers walking into law firm offices in person.
Infostealer malware harvested more than 1.8 billion credentials in six months, and stolen session cookies now let attackers walk past MFA. The infection almost always starts with one human decision.
Phishing volume fell roughly 20 percent for two years running, but Zscaler's data shows attacks are now fewer, smarter, and aimed at routine business workflows. Falling numbers are not falling risk.
The Digital Omnibus postponed the AI Act's high-risk regime, but the Article 50 transparency duties applied on schedule from 2 August 2026. Chatbot disclosure, deepfake labeling, and emotion-recognition notices are now enforceable, and security teams have work to do.
Google has filed a RICO lawsuit against the AI-powered 'Outsider' smishing network, exposing an industrialized text-scam economy that rents for 88 dollars a week. Here is what the case means for employee awareness on mobile.
Menlo Security's 2026 Browser Threat Report finds one in five clicked phishing links goes completely undetected by URL filtering, and a third of evasive threats come from 'trusted' domains. The data-driven case for trained humans as the last line of defense.
A vishing crew is calling employees as fake Microsoft IT staff and walking them through a bogus Entra passkey enrollment - then registering the attacker's own passkey for persistent access. The weak point is the enrollment moment, not the passkey.