AI has been getting much media attention in the cybersecurity sphere; however, the cyber attack basics are still legitimate risks, and they are not going away. We discuss those risks and what organizations need to know.

A new phishing campaign is delivering malware inside files that carry a font extension that is not actually a font. We examine how these campaigns bypass cybersecurity controls and what organizations need to know.

Cybersecurity experts have identified detection gaps with AI-generated malware. We discuss what makes AI malware unique and how it evades discovery.

Security researchers report that cybercriminals are using underground and jailbroken AI models to write sophisticated malware and phishing messages. We comment on how employers can respond.

Fraudsters are using messaging apps to impersonate senior executives and convince employees to send money. We discuss how this traditionally email-centered scam has moved to messaging apps and how to avoid the risks.

A private equity fund manager was able to embezzle more than $11 million through bypassing the investment committee. We discuss the importance of committee oversight to help prevent fraud.

AI has been getting much media attention in the cybersecurity sphere; however, the cyber attack basics are still legitimate risks, and they are not going away. We discuss those risks and what organizations need to know.

An Atlanta children's charity suffers a $5 million loss after an attacker used a trusted vendor's email to request a payment information change. We discuss how vendor email compromise and poor internal controls can combine to create sizeable risks.

A new phishing campaign is delivering malware inside files that carry a font extension that is not actually a font. We examine how these campaigns bypass cybersecurity controls and what organizations need to know.