Covers cybersecurity training programs, techniques, and best practices designed to equip employees and individuals with the skills to recognize and respond to cyber threats. Topics include security awareness curricula, simulation exercises, and measuring training effectiveness.
posts
In January 2024, a finance employee at the multinational firm Arup wired $25 million to criminals after a deepfake video call featuring what appeared to be the company's CFO and several colleagues. Every person on that call was fake — AI-generated avatars operated by an organized fraud ring. That
In 2023, a finance employee at a Hong Kong multinational wired $25 million to threat actors after a spear phishing email led to a deepfake video call impersonating the company's CFO. That's not a plot from a thriller — it's a real incident reported by
A $4.88 Million Question Nobody Asks Until It's Too Late In May 2023, the city of Dallas, Texas got hit with Royal ransomware. Emergency services disrupted. Court systems offline. Weeks of recovery. The estimated cost ran into tens of millions. And the entry point? A service account
A $4.88 Million Problem You Can't Solve With a Dictionary In 2024, the average cost of a data breach hit $4.88 million globally, according to IBM's Cost of a Data Breach Report. That number didn't come from sophisticated nation-state hackers exploiting exotic
In May 2023, Progress Software's MOVEit file transfer tool was exploited by the Cl0p ransomware gang, compromising data from over 2,500 organizations and roughly 67 million individuals. Government agencies, hospitals, universities, Fortune 500 companies — none were spared. If you asked any of those organizations whether they had
In March 2025, a mid-size logistics company in the Midwest lost $2.3 million after a single employee clicked a fake DocuSign link. The attacker harvested credentials, pivoted into the company's financial systems, and initiated wire transfers over a long weekend. The employee had never received phishing awareness
The Email That Cost One Company $37 Million In 2024, the FBI's Internet Crime Complaint Center reported that phishing and its variants remained the number one reported cybercrime by volume, with over 298,000 complaints in a single year. But here's the part that should keep
In 2023, MGM Resorts lost an estimated $100 million after a threat actor called Scattered Spider socially engineered its way past the help desk with a single phone call. But the reconnaissance that made that call possible? It started with spear phishing — targeted research, crafted messaging, and a specific human
In February 2025, a finance employee at a Hong Kong multinational wired $25 million to threat actors after a deepfake video call impersonating the company's CFO. That single incident captures the state of social engineering attacks right now: they're sophisticated, they exploit trust instead of technology,
In January 2024, a finance employee at engineering firm Arup wired $25 million to threat actors after joining a video call with what appeared to be the company's CFO and other colleagues. Every person on that call was a deepfake. The attackers never exploited a software vulnerability. They
