Akamai’s recent article spotlighting a “sophisticated” phishing campaign against hotel guests may serve as an alarm bell, but it misses the mark on actual security impact. This multi staged threat showcases the evolution of sophisticated phishing attacks. …

In today’s cybersecurity landscape, the stakes have never been higher. The complex machinery of malware keeps evolving, while the entry point remains the same. A case in point is F5’s recent deep dive into Android malware, a comprehensive analysis filled with valuable insights. But like much of the research in…

Cybersecurity heavyweights like Microsoft, Google, and Cisco have touted the virtues of the Zero Trust model for a while now. But as I was reading this recent article on Dark Reading, I felt inspired to write this article to explain how, in my view, we’ve all been collectively overlooking a…

Incredible. Globe Telecom in the Philippines has even devoted website space to the perils of SMS communication. You land on a page titled “We’re all in this together.” It’s fascinating that the idea has been propagated that employees and consumers should somehow shoulder the responsibility for mitigating risks that employers…

Dear Esteemed Mobile Operators, As a mobile operator, you find yourself at the forefront of an emerging security challenge, but it’s not a burden you should bear alone. The cybersecurity industry has been slow in equipping you with tools specialized for SMS phishing defense, leaving you in a vulnerable position. …

Some people believe that it’s possible to stop SMS phishing campaigns and targeted SMS phishing attacks on companies and government agencies by verifying the identity of individuals and companies who send SMS messages. For the vast majority (99.9%) of my network who may not have in-depth knowledge about SMS infrastructure…

I gave my email address to a security company so I could download their security report recently — mostly because a few of their tweets attracted my attention to serious flaws in their thinking — which I believe has a serious ripple effect that results in more security breaches. …

My definition of a Non-fungible Token (NFT) TLDR; an NFT is a new kind of digital receipt. The image below is shows a traditional receipt with information intended for humans, and information that only machines can understand and use.

This article documents a chain of Phishing-led cyberattacks on big organizations by a group called Lapsus$. It’s far from an extensive list though. The technique used for every single one of these attacks, without exception, is the same old, unsophisticated social engineering technique that was first discovered on the AOL…