Computer Security News and Insights
One Click Cost This Company $47 Million In 2023, Clorox disclosed a cybersecurity incident that disrupted operations for months and cost the company an estimated $49 million in recovery expenses. The attack reportedly began with social engineering — a threat actor tricking someone into giving up access. That's not
160 Billion Reasons to Care About Spam Email Roughly 160 billion spam emails hit inboxes every single day. That's not a typo. According to data tracked by cybersecurity researchers, nearly half of all email traffic worldwide is spam. And while most of it is garden-variety junk — fake diet
In 2023, a former employee of a New Jersey healthcare provider walked into an unlocked office, plugged a USB device into an unattended workstation, and exfiltrated over 20,000 patient records before anyone noticed. No firewall stopped it. No intrusion detection system flagged it. The breach happened because a physical
In 2023, MGM Resorts lost roughly $100 million after a social engineering attack delivered malware that crippled operations across Las Vegas for over a week. Slot machines went dark, hotel room keys stopped working, and guest data was compromised. The entry point? A phone call to the help desk. Understanding
A Phone Call That Looked Like Google — But Wasn't In late 2024, a Gmail user received a phone call from what appeared to be a legitimate Google support number. The caller warned of suspicious account activity, then followed up with an email — sent from what looked like a
In 2024, the FBI's Internet Crime Complaint Center received over 298,000 phishing complaints — making it the most reported cybercrime for the fifth consecutive year. Yet when I ask executives to give me a phishing definition, most of them describe something from 2009: a Nigerian prince email with
A few years ago, a journalist for the BBC demonstrated how easy it was to steal PINs and passwords simply by watching people type on their phones in a London coffee shop. He captured over 20 credentials in a single afternoon. No malware. No exploit kit. Just a pair of
The Program That Looked Great on Paper — Until the Breach A mid-size healthcare company I consulted with had a 98% training completion rate. Every employee had clicked through every module. Leadership was proud. Then a single phishing email — disguised as a benefits enrollment update — compromised credentials for three domain admin
The Phishing Attack That Cost One Hospital $65 Million In February 2024, Change Healthcare — one of the largest health payment processors in the U.S. — was hit by a ransomware attack that started with a single compromised credential. No multi-factor authentication on a remote access portal. One phishing attack opened
A 3-Minute Phone Call Cost One Company $37 Million In early 2024, a finance employee at a multinational firm joined a video call with what appeared to be the company's CFO and several colleagues. Every face on the screen was a deepfake. The employee transferred $25.6 million
