social engineering
Cybersecurity & Risk
Attackers Abuse Passkey-Themed Social Engineering to Breach Microsoft Cloud Environments
Microsoft disclosed a campaign, active since May 2026, where attackers use passkey-themed social engineering and fake IT-helpdesk calls to hijack Microsoft cloud accounts and exfiltrate data.
Cybersecurity & Risk
AI-Generated Phishing Is Now the Top Enterprise Email Threat, and IBM Data Shows Why It’s So Costly
IBM's Cost of a Data Breach research puts the average phishing-related incident at $4.88 million, as AI-generated phishing becomes the top enterprise email threat in 2026.
Cybersecurity & Risk
AI-Generated Phishing Lures Now See 54% Click-Through Rates, Versus 12% for Human-Written Scams
AI-generated phishing lures now achieve a 54%% click-through rate versus 12%% for human-written scams, while attack preparation time has collapsed from 16 hours to under 5 minutes.
Cybersecurity & Risk
RingCentral’s 1.6M-Account Breach: When a Phone Call Beats Your MFA
ShinyHunters vished a RingCentral employee, exfiltrated 623GB, and dumped data on 1.6M accounts after the company refused to pay.
Cybersecurity & Risk
Aflac 22.7M Breach: Scattered Spider’s Insurance Help-Desk Playbook for CISOs
⚡ Key Takeaways Scattered Spider socially engineered Aflac’s help desk in June 2025, stealing names, SSNs, health records, and claims...
Cybersecurity & Risk
AI Vishing: How Voice Deepfakes Are Becoming Enterprises’ Most Dangerous Attack Vector
⚡ Key Takeaways Voice phishing attacks surged 442% in H2 2024, and AI voice cloning now requires just 3 seconds...
Cybersecurity & Risk
BEC 3.0 in Algeria: Defending Banks and Enterprises Against AI Voice Cloning Fraud
⚡ Key Takeaways BEC 3.0 combines AI voice cloning with deepfake video to impersonate executives in real time. Algerian banks...
Cybersecurity & Risk
AI-Powered Phishing Hits African Banking: Defense Playbook for Algerian Teams
⚡ Key Takeaways INTERPOL’s Operation Red Card 2.0 (December 2025 – January 2026) arrested 651 suspects across 16 African countries,...
Cybersecurity & Risk
BEC Threats in Algeria: How SMBs Can Stop Business Email Compromise in 2026
⚡ Key Takeaways BEC and AI phishing rank as the #1 cyber risk for Algerian SMBs in 2026 — $2.77B...
Cybersecurity & Risk
MuddyWater’s Teams Trap: Inside Iran’s False-Flag Ransomware Campaign in 2026
⚡ Key Takeaways MuddyWater used Microsoft Teams social engineering + Chaos RaaS branding to disguise Iranian state espionage as ransomware...
Cybersecurity & Risk
Deepfake Vishing: Why Voice Cloning Is the New CEO Fraud Weapon in 2026
⚡ Key Takeaways Deepfake vishing surged 1,600% in Q1 2025 — voice cloning fraud up 680% with $600K average enterprise...