The FIRE team uncovered an SEO poisoning marketplace that helps threat actors manipulate search rankings by placing malicious backlinks on compromised but legitimate websites.

John Wilson, Senior Fellow, Threat Research at Fortra, authored an article for The AI Journal examining the security implications of OpenAI’s Sora 2. The piece looks at how increasingly realistic AI-generated video changes the threat landscape, particularly around deepfakes, social engineering, and the misuse of personal likenesses. 

In a Computing Security feature, Pablo Zurro, senior product manager at Fortra, shares perspective on how breach and attack simulation and penetration testing continue to play a critical role as attackers adapt and innovate.

Tyler Reguly, Associate Director of Security R&D at Fortra, was quoted in a CSO article examining Microsoft’s January 2026 Patch Tuesday, which includes an actively exploited zero-day and several critical vulnerabilities affecting Windows, Office, and SharePoint.

Josh Taylor examines how hacktivism has shifted from headline-grabbing stunts to something far more complex and harder to spot.

Pig butchering scams blend romance, emotional manipulation, and financial fraud. In an episode of DateNight... with Laurel House, John Wilson breaks down how organized cybercrime groups use AI generated identities, fake profiles, and crypto investment schemes to exploit victims at scale.

In Security Boulevard, Tyler Reguly explains why the goal of patching every vulnerability is not just unrealistic but counterproductive. Drawing on more than two decades in vulnerability management, he argues that security teams need to stop chasing raw CVE counts and instead focus on risk, context, and asset intelligence to decide what truly matters.Originally published in ​Security Boulevard....

National cybersecurity policies are essential but difficult to implement at the pace modern threats demand. In Manufacturing.net, John Grancarich examines how government frameworks have improved security posture, where they struggle in real-world application, and why private sector vendors play a critical role in closing the gap between policy and practice.Originally published in ​Manufacturing...

FIRE team research on the Scripted Sparrow BEC operation was covered in Cyber Security News, highlighting how the group uses automation to generate and send attack messages at scale.

Fortra experts Josh Taylor and John Grancarich share perspectives on how AI will reshape security operations, accountability, and incident response as agentic systems become more embedded in enterprise environments.

John Grancarich, Chief Strategy Officer at Fortra, shared his 2026 cybersecurity outlook in VM Blog's 18th annual predictions series, outlining why Data Security Posture Management (DSPM) will become core infrastructure for modern data protection. He explains how DSPM solutions fill visibility gaps across cloud, SaaS, and AI environments, works upstream of traditional tools like DLP and IAM, and...

Cobalt Strike is featured in IT Security Guru’s overview of the best red teaming tools for 2026.

Lane Thames was interviewed for a Communications of the ACM article examining the risks and realities of zero-day exploits. The piece looks at why these vulnerabilities are so difficult to detect, how attackers take advantage of the time gap before fixes are available, and what security teams can do to better prepare for the unknown.Originally published in ​Communications of the ACM.​Excerpt: ​...

Information Week covered the critical first steps leaders should take after a ransomware attack and included insights from Chris Reffkin, Fortra’s Chief Security and Risk Officer.

Microsoft issued its final Patch Tuesday update of the year, and Dark Reading included insights from Tyler Reguly on one of the vulnerabilities already seeing real-world exploitation.

Passwords have been the cornerstone of digital identity for decades, but their weaknesses are well known. The industry is moving toward passkeys, which promise faster, phishing-resistant logins and fewer account takeovers. However, as Alex Bamgboye explains, eliminating passwords entirely introduces new risks. Recovery becomes the real challenge. Without a portable fallback, users can lose control...

The holiday season brings more than festive cheer. It also brings a surge in scams powered by AI. Moonlock spoke with John Wilson, Senior Fellow and Threat Research at Fortra, about how cybercriminals are creating convincing fake ecommerce sites, social media ads, and even job offers. Wilson explains that attackers are exploiting gift cards, travel deals, and short-lived coupon sites to trick...