Phishing awareness articles teach readers to identify and avoid phishing attacks across email, SMS, voice calls, and social media. Content includes real-world phishing examples, red flags to watch for, reporting procedures, and tips for running phishing simulation campaigns.
posts
Your Employees Are Eating Phish Food Every Day In March 2024, MGM Resorts was still tallying the damage from a social engineering attack that started with a single phone call. The estimated cost exceeded $100 million. The threat actor didn't exploit a zero-day vulnerability or deploy some exotic
In November 2023, the international law firm Allen & Overy confirmed it was hit by a LockBit ransomware attack that disrupted internal systems and exposed sensitive data. They weren't alone. The American Bar Association disclosed a data breach that same year affecting 1.4 million members. If you
The Call That Almost Fooled a Google Engineer In 2024, a Google engineer received a phone call from someone claiming to be Google support. The caller ID showed a legitimate Google number. The voice was professional, calm, and eerily convincing. It was AI-generated. The FBI warns Gmail users of sophisticated
The Breach That Started With a Single Phone In 2022, Uber suffered a devastating breach after a threat actor targeted an employee's mobile device with repeated multi-factor authentication push requests. The attacker combined social engineering with MFA fatigue, and one tap on a phone screen gave them access
The Hospital That Lost 133 Days to Ransomware In 2024, Change Healthcare suffered a ransomware attack that disrupted claims processing for thousands of hospitals, pharmacies, and clinics across the United States. UnitedHealth Group, its parent company, disclosed costs exceeding $870 million in the first quarter alone. Patient care was delayed.
A Six-Figure Salary With No Degree — and a $80K Debt With One I recently spoke with two cybersecurity analysts at the same company. One had an online computer security degree and $78,000 in student loans. The other had no degree, a handful of certifications, and a home lab built
The Hiring Manager Who Ignored Every Applicant's Diploma A few years ago, I sat in on a hiring panel for a mid-level SOC analyst position. The hiring manager tossed a stack of resumes on the table and said, "I don't care what school any of
In 2023, MGM Resorts lost an estimated $100 million after a threat actor social-engineered a help desk employee with a ten-minute phone call. The attacker didn't exploit a zero-day vulnerability. They exploited a gap in employee policy — specifically, the identity verification process for password resets. A strong cybersecurity
A consultant nearly lost his entire Google account — not to a sloppy spam email, but to an AI-generated voice call that sounded exactly like Google support, complete with a follow-up email from what appeared to be an official Google domain. That's the new reality. Gmail users warned about
The $55 Million Email That Fooled a CFO In 2024, the automotive parts manufacturer Scoular lost $17.2 million to a business email compromise scheme. But that wasn't even close to the record. Ubiquiti Networks lost $46.7 million. Austrian aerospace firm FACC lost $55.8 million — and
