Fraud Investigation Techniques
Orgs Move to SSO, Passkeys to Solve Bad Password Habits
In 2025, employees are still using weak passwords. Instead of forcing an impossible change, security leaders are working around the pro...
Google Sues to Disrupt Chinese SMS Phishing Triad
Google is suing more than two dozen unnamed individuals allegedly involved in peddling a popular China-based mobile phishing service th...
Coyote, Maverick Banking Trojans Run Rampant in Brazil
South America's largest country is notorious for banking malware attacks; Maverick self-terminates if its targeted user is based outsid...
Kenya Kicks Off ‘Code Nation’ With a Nod to Cybersecurity
The African country aims to train 1 million workers in tech skills in the short term, with a focus on software engineering, cybersecuri...
‘CitrixBleed 2’ Wreaks Havoc as Zero-Day Bug
The same APT hammered critical bugs in Citrix NetScaler (CVE-2025-5777) and the Cisco Identity Service Engine (CVE-2025-20337) in a sig...
Google Looks to Dim ‘Lighthouse’ Phishing-as-a-Service Op
The phishing kit, run by a group known as the "Smishing Triad," has powered massive amounts of unpaid tolls and package tracking texts....
Microsoft Exchange ‘Under Imminent Threat’, Act Now
Threats against Microsoft Exchange continue to mount, but there are steps both organizations and Microsoft can take.
Phishing Tool Uses Smart Redirects to Bypass Detection
A campaign against Microsoft 365 users leverages Quantum Route Redirection, which simplifies previously technical attack steps and has ...
Patch Now: Microsoft Flags Zero-Day & Critical Zero-Click Bugs
Security teams may have a less burdensome rollout in November after October's Goliath Patch Tuesday, but shouldn't wait on a few top-pr...
Grandparents to C-Suite: Elder Fraud Reveals Gaps in Human-Centered Cybersecurity
Cybercriminals are weaponizing AI voice cloning and publicly available data to craft social engineering scams that emotionally manipula...