Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How to Defend Against WormGPT-Driven Phishing and Malware

AI is unlocking new ways to work across industries. Nearly four in five CEOs are implementing or likely to implement generative AI to speed up innovation across their companies, and workers at every level are using GenAI to improve or expand their processes. Unfortunately, they aren’t the only ones embracing the power of AI. WormGPT was one of the best-known early examples of an AI that could create convincing social engineering attacks and build malware.

Warning: New Spear Phishing Campaign Targets Executives

Researchers at Stripe warn of a wave of spear phishing attacks targeting C-suite employees and senior leadership across a wide range of industries. The emails pose as OneDrive document-sharing notifications with subject lines like “Salary amendment” or “FIN_SALARY.” If a user clicks the link, they’ll be taken to a spoofed Microsoft Office/OneDrive login page designed to steal their credentials.

Advanced Educational Competition - Ask Your Employees To Submit Their Best Phishing

I occasionally get human risk management (HRM) administrators asking me to help them with ideas of “contests” to better educate their end-users. They have usually done the traditional recommendations, which means at least monthly-to-weekly security awareness training (SAT) and simulated phishing. They are working to educate their end-users about social engineering and phishing attacks as best as they can without being overly annoying.

Smishing Campaign Targets California Taxpayers With Phony Refund Offers

The State of California’s Franchise Tax Board (FTB) has warned of an ongoing SMS phishing (smishing) campaign targeting residents, Malwarebytes reports. The FTB stated, “These text messages contain a link to a fraudulent version of certain FTB web pages, which are designed to steal personal and banking information.

Is That Gmail Security Alert Real? How to Spot a Phishing Scam

In a world where our lives are increasingly managed through email, an unexpected security alert can be a jarring experience. Recently, misinformation spread about a supposed mass security alert from Google, creating widespread panic. While Google has confirmed these claims are false, the incident serves as a powerful reminder of a constant threat: phishing scams. These fraudulent emails mimic real security warnings to trick you into giving away your personal information.

Phishing Attacks Are Rising: Automate Detection Before They Overwhelm Your SOC

Phishing has become one of the most consistent and damaging entry points for attackers. Today's campaigns aren't the obvious scams we once knew. They look professional, mirror trusted brands, and often come packaged as full-service phishing kits with ready-made infrastructure. For SOC leaders, this means one thing: the volume is climbing, and manual detection is no longer sustainable.

10 Budget Moves to Protect Against Ransomware

Protecting your business from ransomware doesn't require an unlimited budget, but it does take careful planning. Cyberattacks grow more advanced each year. Ignoring preparedness could result in massive downtime or data loss. Investing in the right defenses reduces risk without overspending. Knowing where to allocate funds can mean the difference between prevention and recovery costs spiraling out of control. Here are nine actionable investments with real-world impact to safeguard your organization while keeping budgets in check.

The Rise of AI-Powered Attacks Threatening Crypto Trading Platforms

AI has made it cheap and fast to generate convincing scam campaigns. With scam deposits rising 200% year-over-year and 60% of scam funds now tied to AI-enabled fraud, trading platforms are facing an industrialized wave of deception. What once required sophisticated criminal networks can now be automated by anyone with basic technical skills. Crypto crime drained $2.17 billion in H1 2025 alone, already surpassing 2024's total. While the ByBit hack took the headlines, analysts warn that AI-driven infiltration and phishing are eating away at platforms daily, in smaller but relentless amounts.