Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Token-Spraying Attacks on Microsoft 365: Detecting and Defeating Session-Token BEC Campaigns
The Threat: Stolen Session Tokens, Sprayed at Scale Security researchers have identified a widespread campaign in which threat actors are at...
15,000-Mule Money Laundering Network: Detecting BEC Cash-Out, Payroll Diversion, and Payment Fraud in Your Environment
The Guilty Plea That Exposes the Cash-Out Backbone of Cybercrime A Ukrainian-Russian dual citizen has pleaded guilty to operating a money la...
Zimbra BEC Research: 50+ Vulnerabilities Let Attackers Rewrite Mailboxes — Detection and Hardening Guide
Business Email Compromise has always been a patient crime. The classic playbook — breach a mailbox, sit quietly, map the approval chain, the...
Social Engineering 3.0: Defending Against Autonomous AI Phishing Agents — Detection and Hardening Guide
Social Engineering 3.0: The Fight Moves to Agent Versus Agent For a decade, email security followed one model: scan the message, find someth...
Healthcare Vendor BEC Detection: Defending Against $5.3M Fraud like Children's Healthcare of Atlanta Attack
Introduction In a stark reminder of the financial devastation Business Email Compromise (BEC) attacks can inflict on healthcare organization...
BEC Defense: Detecting Underground Tactics, Account Compromise, and Cash-Out Networks
Introduction Business Email Compromise (BEC) has evolved well beyond the "Nigerian Prince" wire-transfer scams of the past. Based on recent ...
Combating Email Alert Fatigue: Behavioral AI Strategies for BEC and ATO
Introduction It is 2026, and despite billions of dollars invested in email security gateways (ESGs), Security Operations Centers (SOCs) are ...
Onsite Women's Health $2.5M Settlement: Defending Against Email Account Compromise
Introduction Onsite Women’s Health recently agreed to a $2.5M settlement with the U.S. Department of Health and Human Services (HHS) Office ...
AI-Powered Social Engineering: Countering the Shift to 1-to-1 Personalized Attacks
AI-Powered Social Engineering: Countering the Shift to 1-to-1 Personalized Attacks Introduction For the past six months, the cybersecurity l...