A fake $499.99 PayPal charge appeared on my son’s calendar exactly one year after I documented a similar attack. Here is how calendar invite phishing works, what it means, and what to do when one appears.
All tagged Social Engineering
Your Next Cyberattack Could Start with a Job Application
North Korean IT worker schemes are back in the spotlight with Season 2 of To Catch a Thief. But this isn't just a story about North Korea. It's a reminder that in an era of remote work and AI-generated identities, your next cyberattack could begin with a job application. Here's why hiring has become part of your security perimeter.
A CAPTCHA Should Never Ask You to Open Terminal
A fake CAPTCHA on a trusted website tried to trick me into opening Terminal and executing a malicious command. That experience led to a deeper investigation into ClickFix, a rapidly growing social engineering technique that exploits trust instead of software vulnerabilities, and why attackers are increasingly impersonating security itself.
AI Agents Aren’t Employees: Why Identity Isn’t Enough
Enterprise security has spent decades answering two questions: Who are you? and What are you allowed to do? As AI agents become digital workers, identity and governance remain essential, but they may no longer be enough. This article explores the overlooked question that could define the next generation of AI security: What influences behavior?
If Troy Hunt Can Fall for Phishing, So Can You
Even cybersecurity experts fall for phishing attacks. When Troy Hunt, creator of Have I Been Pwned, clicked a malicious link and entered his credentials, it was a wake-up call for all of us. In this post, we break down what happened, why today’s phishing is more convincing than ever, and what you can do to protect yourself.
