Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

manageengine

The Mitnick Method: Why a 15-Year old schoolboy can empty your bank account

Feb 25, 2026 By Omar Hafiz In ManageEngine
Picture this: It’s 3pm on a busy Tuesday. Your phone rings, and the caller ID shows your company's main number. "Hi, this is Jake from IT," says a confident voice. "We're seeing some unusual activity on your account and need to verify your password to secure it. Can you help me out real quick?". Sound familiar? Well, this was the exact technique perfected by a teenager named Kevin Mitnick in 1983, long before the internet, smartphones, or even Windows or Linux existed.
Read Post
knowbe4

Fake Video Meeting Invites Trick Users Into Installing RMM Tools

Feb 24, 2026 By KnowBe4 Team In KnowBe4
Threat actors are using phony meeting invites for Zoom, Microsoft Teams, Google Meet, and other video conferencing applications to trick users into installing remote monitoring and management (RMM) tools, according to researchers at Netskope. The invites lead to convincingly spoofed landing pages for fake video meetings, complete with a list of coworkers who have supposedly already joined the call. The page instructs the user to install a software update in order to join the video meeting.
Read Post
CrowdStrike

The Art of Deception: How Threat Actors Master Typosquatting Campaigns to Bypass Detection

Feb 23, 2026 By Alen Peric In CrowdStrike
Typosquatting is a deceptive technique in which threat actors register misspelled or look-alike domains of legitimate organizations to trick users into visiting fraudulent sites. It remains one of the most effective and underestimated attack vectors in the modern cyber threat landscape. What appears to be a misspelled domain often conceals sophisticated campaigns designed to phish company employees or customers, harvest credentials, deliver malware, and damage organizational reputation.
Read Post
memcyco

Enterprise Account Takeover Solutions: How to Operationalize Protection After Go-Live

Feb 23, 2026 By Ezra M. In Memcyco
Enterprise account takeover solutions often look strong during procurement. The real test begins after go-live. Integration completes. Alerts begin flowing. Fraud, SOC, and digital leaders see new data. Now the question shifts from deployment to operationalization. How do enterprises turn early ATO visibility into measurable fraud reduction, faster investigations, and stronger regulatory posture?
Read Post
knowbe4

Report: AI-Driven Fraud Surged by 1200% in December 2025

Feb 19, 2026 By KnowBe4 Team In KnowBe4
AI-driven fraud attacks spiked by more than 1200% in December 2025, according to a new report by Pindrop Security. Threat actors are using AI to assist in every stage of the attack, from deploying bots to conduct reconnaissance to using deepfakes to trick humans. “According to Pindrop internal data, AI fraud (or non-live fraud) surged 1210% by December 2025,” the researchers write.
Read Post

150+ FAKE law firm websites found in AI cloning scam #cybersecurity #ai #podcast

Feb 18, 2026 By LimaCharlie In LimaCharlie
In this week's Intel Chat, Christopher Luft and Matt Bromiley discuss how attackers used AI to clone over 150 law firm websites, targeting fraud victims under the guise of offering legal assistance to recover lost funds. Chris points out how easy this has become with AI tools. Attackers can quickly clone a website, host it at a legitimate-looking domain, and start harvesting information. The episode also covers Russian cyber operations targeting the defense industrial base, Team PCP's campaign compromising 60,000+ servers, and exposed OLAMA AI infrastructure.
View Video
memcyco

RFP Essentials for Account Takeover Fraud Solutions: A Procurement Guide

Feb 16, 2026 By Ezra M. In Memcyco
The digital landscape is currently witnessing an industrialization of fraud. Legacy defenses, once considered standard, are now struggling to keep pace with sophisticated attackers who operate with the speed of AI. For enterprises, the Request for Proposal (RFP) process is no longer just a bureaucratic hurdle. It is a critical opportunity to filter out reactive “band-aid” fixes and identify account takeover (ATO) fraud solutions that provide preemptive protection.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.