Blog

Blog

Top Ways Employees Make Their Employers Vulnerable

The people factor is still the biggest variable in cyber resilience. Firewalls, EDR, and Zero Trust help, but everyday choices shape outcomes. The top ways employees make their employer vulnerable often come down to habits formed under pressure: clicking quickly, sharing widely, and trusting implicitly. Understanding those patterns — and changing them at scale — requires focusing on human risk...
Blog

PII Data Classification: 4 Best Practices

Getting personally identifiable information (PII) classification right is one of the first steps to having an effective data protection strategy. We break down four best practices in this blog.
Blog

What Is a Health Information System?

Learn what a health information system (HIS) is and how they're key to managing healthcare data, along with HIS benefits, best practices, and more.
Blog

Hacking Attack Leaves Russian Car Owners Locked Out of Their Vehicles

Imagine the scene. It's a cold Monday morning in Moscow. You walk out to your car, coffee in hand, ready to face the day. You press the button to unlock your car, and ... nothing happens. You try again. Still nothing. The alarm starts blaring. You can't turn it off.Welcome to Monday 26 January, 2026, and the chaos that was caused by a cyberattack on Delta - a Russian company that provides smart...
Blog

Data Classification Best Practices: Strategies & Compliance

Not every organization can afford to engage in a data arms race to remain competitive in the data-hungry era of generative AI and large language models. However, embracing data classification best practices is a cost-effective way to get the desired outcomes from your data, highlighting its important value, risk sensitivity, and compliance requirements. Data classification best practices involve a...
Blog

SEO Poisoning Marketplace Topping Search Results, Impersonating Top Financial Institutions

Introduction to the HaxorSEO MarketplaceFortra Intelligence and Research Experts (FIRE) have uncovered a group of active malicious threat actors operating since 2020. The group refers to themselves as Haxor, a slang word for hackers, and their marketplace as HxSEO, or HaxorSEO. HxSEO has established its primary base of operations and marketplace on Telegram and WhatsApp. HxSEO stands out for...
Blog

Artificial Intelligence for Post-Exploitation

Post-exploitation tasks frequently require manual analysis, such as relying on an operators’ expertise to scan a target environment for sensitive information that could support in the pursuit of an objective. For example, searching file shares and internal applications for sensitive information of credentials. These tasks are often time consuming, but can be dramatically improved with the...
Blog

Fortra Secure Email Gateway 6.2: A Major Leap Forward in Threat Detection and Security

The 6.2 release of Fortra’s Secure Email Gateway marks a significant milestone in email security. This major update introduces cutting-edge enhancements powered by the Fortra Threat Brain, designed to deliver superior protection against phishing, malware, and spam.What's New in Version 6.2?At the heart of this release is the Fortra Threat Brain, a sophisticated intelligence engine that aggregates...
Blog

Fortra Patch Priority Index for December 2025

Fortra's December 2025 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft and Google.Up first on the list are patches for Microsoft Edge (Chromium-based) that resolve 13 type confusion, inappropriate implementation, and use after free vulnerabilities.Next on the list are patches for Microsoft Office, Word, Access, Outlook and Excel. These patches resolve 13 remote...
Blog

BEC Global Insights Report: December 2025

This report from Fortra Intelligence & Research Experts (FIRE) outlines key BEC trends for December 2025 based on active defense engagements. Findings include a 1% increase in overall attack volume compared to November, with gift cards as the leading cash-out method (52.8%) and Apple Store cards being most requested (50%).
Blog

WEF: AI Overtakes Ransomware as Fastest-Growing Cyber Risk

We can no longer say that artificial intelligence is a "future risk", lurking somewhere on a speculative threat horizon. The truth is that it is a fast-growing cybersecurity risk that organizations are facing today.That's not just my opinion, that's also the message that comes loud and clear from the World Economic Forum's newly-published "Global Cybersecurity Outlook 2026." As the report bluntly...
Blog

Data Classification Methods: Ensuring Security and Compliance

Data classification methods are techniques used to organize and categorize data into various distinct classes or groups. These methods are essential for numerous applications, such as data analysis and machine learning, as well as data security, data management, and regulatory compliance.What Is Data Classification?Data classification is the process of organizing and categorizing data into...
Blog

6 Areas Turning Cyber Compliance from Checkboxes to Proof

A new year often brings a wave of updated cybersecurity compliance requirements. In 2026, regulators are raising the bar. “Check-the-box” compliance that may once have been sufficient to pass audits is no longer enough. Today’s mandates increasingly demand evidence: proof that controls are operating as designed, faster incident reporting, and broader disclosure obligations across vendors, systems,...