AI has been getting much media attention in the cybersecurity sphere; however, the cyber attack basics are still legitimate risks, and they are not going away. We discuss those risks and what organizations need to know.

A new phishing campaign is delivering malware inside files that carry a font extension that is not actually a font. We examine how these campaigns bypass cybersecurity controls and what organizations need to know.

Cybersecurity experts have identified detection gaps with AI-generated malware. We discuss what makes AI malware unique and how it evades discovery.

Security researchers report that cybercriminals are using underground and jailbroken AI models to write sophisticated malware and phishing messages. We comment on how employers can respond.

A controller of a small family textile company in California pled guilty and was sentenced to eight years in prison for embezzling more than $3.2M. We comment on the internal controls that can help employers lower their risk.

Ghost companies join ghost employees in the growing list of phantom scams used by embezzlers to steal. We provide an example and provide tips for lowering your risk.

So-called "dual purpose" LLMs may allow malicious AI past your firewall. Find out more about these dark web LLMs, how they are presented, and the risk they represent.

The EEOC recently settled two pregnancy discrimination lawsuits and recovered $285,000. We discuss when it's time to call in the HR experts and how that may help avoid the risks.

A finance director is sentenced to prison for a $10.7 million embezzlement scheme he hid through falsified bank statements. We discuss why document review is crucial and what may help avoid the risks.