Blog

Blog

Imposter Scams Cost Americans $3.5 Billion in 2025 - and It's Getting Worse

If you've ever received a text message warning that your bank account has been compromised, or a phone call from someone claiming to be from the IRS, you know just how alarming that can be. And according to new research from the US Federal Trade Commission (FTC), an awful lot of people are not just alarmed by these messages - they are being scammed by them.The FTC has revealed that US $3.5 billion...
Blog

Top DSPM Solutions for Enterprises 

As enterprise data expands across modern environments, organizations face growing challenges in understanding and securing sensitive data, driving the rise of DSPM. However, solutions vary, making it critical to evaluate capabilities like discovery, classification, risk analysis, and enforcement when choosing the right fit.
Blog

Getting to Know Myriam Abiaad, BISO at Sky

We recently sat down with Myriam Abiaad, BISO at Sky, to explore her journey from “cyber born and bred” technologist to leading BISO, and to understand how this evolving role is reshaping the relationship between security and the business. We discussed subjects including the BISO as a bridge between cyber and the business, why chasing zero risk can undermine real security outcomes, and how...
Blog

Phishing Campaign Targets Banks with Fileless Phantom Stealer Malware

Executive SummaryFortra Intelligence and Research Experts (FIRE) have identified an active phishing campaign targeting high-capital organizations, particularly those operating within the banking sector. The campaign uses evasive techniques to distribute Phantom Stealer, a commercially available Malware-as-a-Service (MaaS) infostealer used to steal credentials, financial data, and sensitive...
Blog

June 2026 Patch Tuesday Analysis

A record-breaking Patch Tuesday brings 568 CVEs. Tyler Reguly breaks down the most critical vulnerabilities, including a high-risk HTTP.sys RCE, and what security teams need to watch for potential exploitation.
Blog

DSPM for AI: A Practical Look at AI Data Security

By now, you've probably heard the airplane analogy when it comes to AI and cybersecurity. If not, cybersecurity for AI has been likened to a plane being assembled while airborne. This is a fitting visual as many of us are trying to keep up with something that is already taken off. With this same analogy, you can start to think of data as the plane fuel. No one really knows what's in the tank at...
Blog

Meta's Own AI Chatbot to Blame for Instagram Accounts Being Stolen in Seconds

Hackers have been hijacking Instagram accounts at scale by exploiting Meta's AI support chatbot. And, as if that weren't bad enough, the technique required no technical skill whatsoever.When we think about accounts being taken over, we often imagine something of at least some level of sophistication: a credential stuffing attack, a phishing campaign, a SIM-swap, or call center workers being bribed...
Blog

RatPressto Phish Kit

Learn how the RatPressto phishing kit exploits compromised WordPress sites to deploy ScreenConnect RATs through Adobe-themed social engineering attacks.
Blog

CSPM vs DSMP (or Both): How to Think About Cloud Security

As organizations continue moving workloads, applications, and sensitive data into the cloud, security teams face a growing challenge: protecting both the infrastructure and the data that lives within it.That’s where cloud security posture management (CSPM) and data security posture management (DSPM) come in. While the two technologies are closely related, they solve different problems. CSPM...
Blog

Defenders Fall Behind, as AI Rewrites the Rules of a Data Breach

For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon Data Breach Investigations Report (DBIR). But that's no longer the case.According to the newly published 2026 report, exploitation of vulnerabilities has overtaken credential theft as the leading vector for hackers to gain their initial access — accounting for 31% of...
Blog

Agentic AI's Affordability Gap Is a Security Problem

The first agentic SOC products entering trial or are in early access phases are already metering investigations by token consumption and rate-limiting how many an organization can run per hour. Enterprise buyers can absorb this. Mid-market companies, public sector agencies, and critical infrastructure operators running lean security programs cannot, and they face the same threat landscape.