Blog
Plain-language write-ups on phishing trends, BEC/vendor fraud tactics, and what small and mid-size businesses actually need to do about them — no fear-mongering, no jargon you need a glossary for.
Latest
Generative AI removed the labor constraint behind fraud. How cloned voices, deepfakes, and fake payment pages are scaling the scam economy — and why businesses need three independent layers of protection.
Read more →
Bitget lost roughly $352 million in September 2026 without a single private key being stolen. Attackers spoofed transaction data at the authorization layer — the same failure mode that cost Bybit $1.5 billion. What it means for any system that moves money.
Read more →
Cloning a voice now costs an attacker under $20 and three seconds of audio. The average loss when they use it is $4.1 million — three times a traditional BEC attempt. What that gap means for how you verify payments.
Read more →
KnowBe4's July 2026 benchmark shows trained employees are harder to phish than ever — and attackers are compensating by scaling volume, not skill. Why the average hides the risk that matters.
Read more →
A 7GB credential dump released this August contained nearly 45,000 stolen session tokens, over 1,800 of them still valid. None of them needed to beat MFA — they walked around it. What continuous identity monitoring has to catch now.
Read more →
Why annual training doesn't work, what the 2026 phishing data actually shows, and what continuous human risk management looks like for a small or mid-size business.
Read more →
One 45-minute session in January does not change what someone does on a Tuesday in October. Here is what actually moves click rates.
Read more →
The email is not the attack. The bank-detail change buried in a normal-looking invoice is. A walk-through of how these run and where to break the chain.
Read more →
Plenty of vendors sell round-the-clock monitoring and then email you at 09:00 on Monday. Four questions that separate real coverage from a dashboard.
Read more →
Why identity, not the network perimeter, is where most breaches now start — and what AI-enabled attacks on logins, MFA, and video calls actually look like in 2026.
Read more →
The most expensive attacks in 2026 don't touch your antivirus at all. Why AI-enabled payment fraud is a verification problem, not a malware problem — and what actually stops it.
Read more →Know how to protect your business, unsubscribe anytime.
The signup form is hosted by Brevo, our newsletter provider. Loading it sets cookies from Brevo, so we only do it when you ask us to.
Double opt-in: we email you a confirmation link and only subscribe you once you click it.