Tag

Phishing Prevention

Delivers actionable advice on recognizing and preventing phishing attacks, including email phishing, spear phishing, smishing, and vishing. Covers detection techniques, employee training approaches, email security tools, and real-world phishing examples to strengthen your defenses.

posts

Computer Security Advice

Computer Security Advice That Actually Works in 2026

The Breach That Started With a Single Password In 2023, MGM Resorts lost an estimated $100 million after a threat actor social-engineered a help desk employee with a ten-minute phone call. The attackers didn't exploit some exotic zero-day vulnerability. They used basic social engineering — information scraped from LinkedIn

Carl B. Johnson May 19, 2026 5 min read
Ransomware Attack Prevention

Ransomware Attack Prevention: What Actually Works in 2026

A Single Click Cost Change Healthcare $22 Million in Ransom In February 2024, the BlackCat/ALPHV ransomware group crippled Change Healthcare — a company processing roughly one-third of all U.S. health claims. UnitedHealth Group confirmed paying a $22 million ransom. Patient data for over 100 million individuals was compromised. The

Carl B. Johnson May 14, 2026 5 min read
Cybersecurity Due Diligence

Cybersecurity Due Diligence: What Most Companies Miss

The $350 Million Typo in Verizon's Yahoo Deal When Verizon acquired Yahoo in 2017, the discovery of two massive data breaches — affecting all 3 billion Yahoo accounts — knocked $350 million off the purchase price. That's not a rounding error. That's what happens when cybersecurity

Carl B. Johnson May 12, 2026 5 min read
Phishing Definition

Phishing Definition: What It Really Means in 2026

In 2024, the FBI's Internet Crime Complaint Center received over 298,000 phishing complaints — making it the most reported cybercrime category for the fifth consecutive year. That number almost certainly undercounts reality. Most phishing attacks never get reported. If you've landed here searching for a phishing

Carl B. Johnson May 12, 2026 5 min read
CISA Cybersecurity Guidelines

CISA Cybersecurity Guidelines: What Actually Matters

In January 2024, CISA disclosed that a threat actor had exploited vulnerabilities in Ivanti Connect Secure products to breach the agency's own systems. Let that sink in. The federal agency responsible for defending U.S. critical infrastructure got hit. If CISA itself isn't immune, your organization

Carl B. Johnson May 11, 2026 5 min read
Spoofing Caller

Spoofing Caller Attacks: How Hackers Weaponize Your Phone

In 2023, the FBI's Internet Crime Complaint Center received over 40,000 complaints related to spoofing, with losses exceeding $300 million. That number keeps climbing. A spoofing caller attack — where a threat actor manipulates the caller ID to impersonate a trusted number — is one of the oldest tricks

Carl B. Johnson May 08, 2026 5 min read
Cybersecurity for Nonprofits

Cybersecurity for Nonprofits: A Practical Survival Guide

The Breach That Cost a Children's Charity Everything In 2023, Save the Children Federation disclosed it had been hit by the BianLian ransomware gang, which claimed to have stolen nearly 7 GB of sensitive data including financial records, medical information, and personal data. A global nonprofit with significant

Carl B. Johnson May 08, 2026 5 min read
Ransomware Protection

Ransomware Protection Tips That Actually Work in 2026

A Single Click Cost One Hospital Chain $100 Million In 2024, Change Healthcare — the payment processing backbone of the U.S. healthcare system — was crippled by a ransomware attack attributed to the ALPHV/BlackCat group. UnitedHealth Group, its parent company, disclosed the incident would cost over $870 million in direct

Carl B. Johnson May 07, 2026 5 min read