Blog

Executive Attacks on Social Media Hit All-Time High as Analysts Point to AI
Blog

How to Combat Executive Impersonation on Social Media

Tue, 10/28/2025
Executive impersonation on social media is at an all-time high as threat actors take advantage of AI to improve and scale their attacks. In Q3, accounts pretending to belong to high-ranking executives on social media climbed to more than 54% of total impersonation volume, surpassing brand attacks for the first time since Fortra began tracking this data. The volume and composition of these attacks...
Blog

Data Categorization or Data Classification?

Tue, 10/28/2025
In the last few years, there has been a dramatic shift from data classification being a “nice to have” tool, to becoming a necessity.Behind this momentum, private companies and organizations are implementing data classification using “traditional” taxonomies and schemas that work for governments and militaries but don’t necessarily translate well into...
Data Classification
jig saw pieces
Blog

Does Your Cybersecurity Framework Need Rebuilding?

By Rohit Dhamankar on Mon, 10/27/2025
Rebuilding a cybersecurity framework is remarkably similar to renovating a home. It’s time consuming, expensive, and, frankly, something that most people try to put off. However, just like a burst pipe or house fire would force you to renovate your home, there are certain indicators and situations that should prompt an immediate framework rebuild, regardless of budget constraints. This might...
The Fortra Platform: A Unified Security Approach
Blog

Creating a Winning Alliance: Bridging Security and Compliance

By Anthony Israel-Davis on Fri, 10/24/2025
Does there have to be tension between security and compliance? They’re certainly not the same, as I note in my previous blog, Security vs. Compliance: What’s the Difference? It’s never been fun to have to show your work, and nobody wants to be a nag, so how can the groups come together to create something stronger than the individual parts? Here are a few ways to create that winning alliance....
coins in palms of hands
Blog

New Report: 33% of Breached Face Financial Trouble Due to Fines, Not Breach Itself

By Donnie MacColl on Thu, 10/23/2025
If the breach doesn’t get you, the fines will. According to the latest Cyber Readiness Report by SMB-focused insurer Hiscox, after being breached, one in three organizations were hit with fines large enough to impact their financial health.This could result from doing business in multiple markets - California, the EU, and Canada, for example - and accruing respective fines of thousands or even...
lumma stealer logo
Blog

Cyber-criminals Turn on Each Other: The Story of Lumma Stealer's Collapse

By Graham Cluley on Wed, 10/22/2025
Normally when we write about a malware operation being disrupted, it's because it has been shut down by law enforcement. But in the case of Lumma Stealer, a notorious malware-as-a-service (MaaS) operation used to steal passwords and sensitive data, it appears to have been sabotaged by other cybercriminals.Lumma Stealer, also known as Water Kurita and Storm-2477, first came to prominence in 2022...
Blog

Fortra Tracks Fivefold Increase in Brokerage Attacks YoY

By Alexis Ober on Tue, 10/21/2025
Throughout 2024, Fortra identified a steady increase in attacks targeting brokerage accounts. Year-over-year, attacks targeting these accounts experienced a growth of more than fivefold in the second quarter of 2025 compared to the same quarter of 2024.
Threat Research & Intelligence
Fortra Blog
Blog

UDRP Domain Takeover vs. Domain Takedown

By Cybersecurity Experts at Fortra on Tue, 10/21/2025
In the world of domain ownership, the need for disputes and enforcement can occur. But how should they be handled? What’s the difference between Uniform Domain-Name Dispute-Resolution Policy (UDRP) domain takeovers and a domain takedowns? Let’s take a closer look at the processes.What Is a UDRP Domain Takeover? Established by the Internet Corporation for Assigned Names and Numbers, UDRP is the...
Phishing Site Takedown
woman with a phone and three email envelopes
Blog

Don’t Send Email? Your Domain Needs to Greenlight DMARC Anyway (and Fast)

By John Wilson on Mon, 10/20/2025
There’s a common misconception: If organizations don’t use their domain to send email, they think DMARC is unnecessary. That couldn’t be farther from the truth. Imagine you don’t drive your car. You want to let everybody know that you don’t drive it, so if they see it around town, they know it’s not you - and something’s amiss. Fortra recently surveyed the top 10 million domains on the internet...
Blog

The Importance of Automation in Data Classification

By Cybersecurity Experts at Fortra on Sat, 10/18/2025
It’s no surprise to anyone that the amount of data that exists is rapidly growing. A report by IDC predicts that by 2025, the global datasphere will have grown to 175 zettabyes. To put in perspective how much data this truly is, one zettabyte is equal to one trillion gigabytes – that is an astronomical amount of data. Needless to say, humans are not...
Compliance
Data Classification
Security Automation
Blog

What Is HIPAA Compliance?

By Cybersecurity Experts at Fortra on Thu, 10/16/2025
Learn about the Health Insurance Portability and Accountability Act (HIPAA) and the requirements for HIPAA compliance in Data Protection 101, our series on the fundamentals of information security.
Compliance
Health Insurance Portability and Accountability Act (HIPAA)
Cybersecurity Regulatory Landscape in Turkey: A Primer for Business
Blog

Cybersecurity Regulatory Landscape in Turkey: A Primer for Business

By Kirsten Doyle on Thu, 10/16/2025
In the last few years, Turkey has found itself increasingly in the crosshairs of bad actors. In Q3 2023, phishing rose sharply with a 20% jump from the previous quarter and a 47% spike year-on-year. The country is also a key target for cyberattacks on industrial control systems. Cyber threats travel fast, while laws usually do not, but in Turkey, that gap is narrowing. What started as a bunch of...
skulls on screens
Blog

NCSC Warns Companies to Prepare for a Day When Your Screens Go Dark

By Graham Cluley on Wed, 10/15/2025
The UK's National Cyber Security Centre (NCSC) has warned that the country faces an average of four "nationally significant" cyberattacks each week - a sharp 129% increase from the previous year.Of a total of 429 incidents handled by the NCSC, a record 204 were classified as nationally "significant," and 18 ranked even more seriously as "highly significant" (meaning that they had the potential to...
Patch Tuesday Analysis
Blog

October 2025 Patch Tuesday Analysis

By Tyler Reguly on Tue, 10/14/2025
Today’s Patch Tuesday Alert addresses Microsoft’s October 2025 Security Updates. We are actively working on coverage for these vulnerabilities and expect to ship that coverage as soon as it is completed.
Threat Research & Intelligence
Vulnerability Management
hands with paper people figures in the palms
Blog

Billions in Cybersecurity Undermined by a Single User. Why People Security Management Is Vastly Underrated

By John Grancarich on Mon, 10/13/2025
It was the most significant breach ever reported, but its origins were not uncommon. The 2024 Change Healthcare ransomware attack, which affected 190 million individuals and came with a price tag of $2.6 billion (and counting), started with an unauthorized intrusion.We spend billions of dollars annually on the best cybersecurity equipment innovated to date, but more and more, attackers are skating...
Security Awareness Training
Fortra Patch Priority Index
Blog

Fortra Patch Priority Index for September 2025

By Lane Thames on Fri, 10/10/2025
Fortra's September 2025 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft, Adobe and Google. Up first on the list are Chromium and Microsoft Edge (Chromium-based) patches that resolve five issues, including use after free, inappropriate implementation, and security feature bypass vulnerabilities. Next are patches for Microsoft Office, Word, Excel, PowerPoint, and...