Computer Security News and Insights
A few years ago, a journalist for the BBC demonstrated how easy it was to steal PINs and passwords simply by watching people type on their phones in a London coffee shop. He captured over 20 credentials in a single afternoon. No malware. No exploit kit. Just a pair of
The Program That Looked Great on Paper — Until the Breach A mid-size healthcare company I consulted with had a 98% training completion rate. Every employee had clicked through every module. Leadership was proud. Then a single phishing email — disguised as a benefits enrollment update — compromised credentials for three domain admin
The Phishing Attack That Cost One Hospital $65 Million In February 2024, Change Healthcare — one of the largest health payment processors in the U.S. — was hit by a ransomware attack that started with a single compromised credential. No multi-factor authentication on a remote access portal. One phishing attack opened
A 3-Minute Phone Call Cost One Company $37 Million In early 2024, a finance employee at a multinational firm joined a video call with what appeared to be the company's CFO and several colleagues. Every face on the screen was a deepfake. The employee transferred $25.6 million
That "Harmless" Toolbar Was Anything But A few years back, I helped a small accounting firm figure out why their machines had slowed to a crawl every March — right when they needed them most. The culprit? A browser toolbar that one employee had installed, thinking it was a
In March 2024, a finance employee at a Hong Kong multinational wired $25 million to threat actors after a single phishing email led to a deepfake video call with what appeared to be the company's CFO. That's not a Hollywood plot — it's a police-confirmed
The Breach That Nearly Killed a Children's Charity In 2023, Save the Children International confirmed a cyberattack by the BianLian ransomware group that reportedly compromised nearly 7 GB of sensitive data — including financial records, health data, and personal information. A global nonprofit with dedicated IT resources still got
In 2023, MGM Resorts lost roughly $100 million after a social engineering phone call lasting just ten minutes gave a threat actor access to internal systems. The attackers didn't exploit some exotic zero-day vulnerability. They manipulated a help desk employee. If your cyber security definition starts and stops
A Single Employee Click Cost One Hospital $10 Million In 2024, Change Healthcare suffered one of the most devastating ransomware attacks in U.S. history. The breach disrupted pharmacy systems, delayed patient care nationwide, and cost UnitedHealth Group over $870 million in the first quarter alone. The root cause? Compromised
Two Trusted Brands, One Devastating Scam In late 2024, security researchers at Avanan documented a surge in phishing campaigns that combined PayPal and DocuSign branding in a single attack chain. The attackers sent emails that appeared to come from DocuSign, notifying the recipient of a payment document waiting for their
