Computer Security News and Insights
A Single Phone Call Cost One Company $25 Million In early 2024, a finance worker at engineering firm Arup was tricked into wiring $25 million after a video call with what appeared to be the company's CFO — deepfake technology made the voice and face indistinguishable from the real
In 2023, the FBI's Internet Crime Complaint Center received over 880,000 complaints with potential losses exceeding $12.5 billion — a 22% increase from the previous year. A staggering number of those incidents involved some form of malicious software. Understanding the types of malware your organization faces isn&
In 2023, the FBI's Internet Crime Complaint Center received over 880,000 complaints with losses exceeding $12.5 billion — a 22% increase from the prior year. A significant portion of those complaints involved malware, ransomware, and credential theft that started with a single computer virus. If you think
In 2024, the Verizon Data Breach Investigations Report found that stolen credentials were involved in roughly 31% of all breaches over the prior decade. That number hasn't budged much. I've worked incident response cases where a single reused password — a seven-character string an employee used on
In 2023, the FBI's Internet Crime Complaint Center received over 298,000 phishing complaints — making it the most reported cybercrime category for the fifth consecutive year. Despite billions spent on email filters and endpoint detection, phishing still works. And it works devastatingly well. If you've ever
In 2024, a finance team at a mid-size logistics company wired $25 million to a threat actor who impersonated their CFO on a deepfake video call. Every person on that call had passed their company's annual security training. Every single one. That's the gap between checking
The Breach That Took 277 Days to Find According to IBM's Cost of a Data Breach Report, the average time to identify and contain a breach was 258 days in recent years — nearly nine months of a threat actor living inside your network. I've worked incidents
That Gmail Account Access Warning Might Be Real — Or a Trap Last month, a mid-sized accounting firm in Texas lost access to every client file they had. It started with a single employee who received what looked like a legitimate Gmail account access warning — a notification claiming someone in another
The FTC Just Fined a Company $1.5 Million — Because They Skipped the Basics In 2023, the FTC settled with Chegg for $3.5 million after four separate data breaches exposed tens of millions of customer records. Employees had been sharing login credentials. Sensitive data sat in plain text. Multi-factor
In 2024, the breach at Snowflake's customer environments didn't exploit some exotic zero-day vulnerability. Threat actors simply used stolen credentials — many of them passwords reused across services without multi-factor authentication. Over 165 organizations were impacted, including Ticketmaster and AT&T. The lesson was brutal and
