Phishing awareness articles teach readers to identify and avoid phishing attacks across email, SMS, voice calls, and social media. Content includes real-world phishing examples, red flags to watch for, reporting procedures, and tips for running phishing simulation campaigns.
posts
In March 2024, a finance employee at a multinational firm in Hong Kong wired $25.6 million to threat actors after joining a video call that appeared to feature the company's CFO. The deepfake was convincing, but the attack started with something far simpler — a phishing link embedded
In January 2024, a finance employee at the multinational firm Arup wired $25 million to criminals after a deepfake video call featuring what appeared to be the company's CFO and several colleagues. Every person on that call was fake — AI-generated avatars operated by an organized fraud ring. That
A Legitimate DocuSign Email That Steals Your PayPal Credentials In November 2024, Avanan researchers documented a wave of attacks where threat actors sent phishing emails through DocuSign's actual platform — not spoofed emails, but real DocuSign notifications. The documents inside impersonated PayPal invoices requesting payment authorization for hundreds or
When "Removed" Shows Up and You Start Googling You found an app, a service, or a browser extension labeled "Removed" — or maybe something you installed just vanished and now shows as "removed" in your app list. So you searched "removed is it legit.
In 2023, a finance employee at a Hong Kong multinational wired $25 million to threat actors after a spear phishing email led to a deepfake video call impersonating the company's CFO. That's not a plot from a thriller — it's a real incident reported by
The Breach That Changed How I Think About Cyber Security In February 2024, Change Healthcare — one of the largest health payment processors in the United States — was hit by a ransomware attack that disrupted pharmacies, hospitals, and insurance claims across the country for weeks. UnitedHealth Group, its parent company, later
In January 2023, T-Mobile disclosed that a threat actor exploited an API vulnerability to steal personal data on 37 million customer accounts. Not through some exotic zero-day — through a misconfigured web API that had been leaking data since November 2022. That's two months of silent hemorrhaging before anyone
A $4.88 Million Problem You Can't Solve With a Dictionary In 2024, the average cost of a data breach hit $4.88 million globally, according to IBM's Cost of a Data Breach Report. That number didn't come from sophisticated nation-state hackers exploiting exotic
In May 2023, Progress Software's MOVEit file transfer tool was exploited by the Cl0p ransomware gang, compromising data from over 2,500 organizations and roughly 67 million individuals. Government agencies, hospitals, universities, Fortune 500 companies — none were spared. If you asked any of those organizations whether they had
The Cybersecurity Talent Gap Is Real — But So Is the Debt In April 2025, CyberSeek reported roughly 470,000 unfilled cybersecurity positions across the United States. That number has barely budged in three years. Meanwhile, the average cost of a data breach hit $4.88 million in 2024 according to
