Addresses the tactics attackers use to steal login credentials and the countermeasures organizations can deploy. Topics include multi-factor authentication, credential monitoring, dark web surveillance, secure authentication protocols, and employee awareness training.
posts
In March 2022, the FBI's Internet Crime Complaint Center reported that Business Email Compromise — a scheme built almost entirely on spoofing — cost victims over $2.4 billion in 2021 alone. That made it the single most financially devastating category of cybercrime they tracked. Not ransomware. Not cryptojacking. Spoofing-based
In March 2022, the FBI's Internet Crime Complaint Center reported that business email compromise — a form of spear phishing — caused $2.4 billion in adjusted losses in 2021 alone. That dwarfs every other cybercrime category. Meanwhile, broad phishing campaigns still top the list as the most common attack
In March 2022, the FBI's Internet Crime Complaint Center reported that phishing schemes were the number one reported cybercrime in 2021 — with over 323,000 victims. That's nearly 900 people per day who fell for a fraudulent email. And those are just the ones who reported
In January 2022, the International Committee of the Red Cross disclosed that a sophisticated cyberattack compromised the personal data of more than 515,000 vulnerable people — including refugees, detainees, and missing persons. The attackers exploited an unpatched vulnerability in a single system. One missed update. Half a million of the
The 61% Problem You're Probably Ignoring The 2021 Verizon Data Breach Investigations Report found that 61% of all breaches involved credential data. Not sophisticated zero-day exploits. Not nation-state malware. Stolen, weak, or reused passwords. That single statistic should reshape how your organization thinks about password security best practices
The Breach That Started With "Company2019!" In January 2021, a security researcher discovered that a SolarWinds intern had used the password "solarwinds123" on a critical internal server. That detail, revealed during congressional hearings, became one of the most embarrassing footnotes in what was already one of
In January 2022, the Crypto.com breach exposed a brutal truth: 483 user accounts were compromised because the platform's existing two-factor authentication wasn't strong enough. Attackers bypassed it, drained roughly $34 million in cryptocurrency, and vanished. That incident sits at the extreme end, but the pattern
In March 2021, the FBI's Internet Crime Complaint Center reported that business email compromise — the category that includes every CEO fraud email scam — generated $1.8 billion in reported losses in 2020 alone. That made it the single most financially damaging cybercrime category in the entire IC3 report,
In March 2020, Microsoft engineers published a finding that stunned even seasoned security professionals: accounts protected by multi-factor authentication block over 99.9% of automated attacks. Yet as of mid-2021, adoption remains shockingly low. The FBI's 2020 IC3 report documented $4.2 billion in cybercrime losses, with compromised
In July 2021, a single phishing email gave attackers access to an employee's credentials at a Florida managed service provider, which cascaded into the massive Kaseya VSA ransomware attack affecting up to 1,500 businesses worldwide. One click. One employee who didn't know how to spot
