Security Company Arctic Wolf has reported that it has documented more than 400 incidents where threat actors flooded employees’ inboxes with spam, to the point of extreme frustration, then used Teams to contact the frustrated employee posting as IT support to assist in fixing the problem. The Teams contact comes within minutes of the flooding
threat actors
Fortune 500 Companies’ Credentials Leaking at an Alarming Rate
According to a new report from Nordlayer, a credential from an employee of a Fortune 500 company is posted on the dark web every 100 seconds. The report states that almost 10 million credentials, which include both usernames and passwords of Fortune 500 employees, have been leaked on the dark web and are…
Privacy Tip #504 – What is Spyware?
This week, Apple notified customers in 110 countries around the world (150 countries to date) that they “may have been targeted with spyware capable of hacking into their devices.” Apple notifies users “directly on their iPhone lock screen with a push notification that urges the person to take action.” The threat alert will read “Apple…
Privacy Tip #499 – Scammers Using Big Brand Logos to Launch Fake Recruiting Schemes
Threat actors are spoofing big brand logos in recruiting scams to dupe individuals into believing they are working with real companies and to divulge their Google credentials.
The scam was first identified by a Team Cymru researcher, who discovered that threat actors were impersonating recruiters from big brands to target marketing professionals. The fraudulent emails…
Privacy Tip #498 – ShinyHunters Hits Medtronic
Threat group ShinyHunters continues its incessant campaign to torture companies trying to provide products and services to consumers, with no indication of letting up.
One of its latest victims, Medtronic, the manufacturer of medical devices, healthcare technologies, and therapies, confirmed that it was the victim of an April cyberattack where over nine million records from…
Five Eyes Issue “Call to Action” to Protect Against AI Cyber Threats
The leaders of the Five Eyes cyber security agencies, representing Australia, New Zealand, Canada, the United Kingdom, and the United States, issued an alert on June 22, 2026, entitled “The AI Shift in Cyber Risk: Why Leaders Must Act Now” urging organizations to a “call to action” to protect against cyber threats both for organizations…
Privacy Tip #495 – What We Can Learn from The Worst Breaches of 2026
I apologize that this post is not light reading. It’s critically important to know what the threats are so you can avoid becoming a victim.
Although disconcerting, it is crucial to know what has happened in the first half of this year. TechCrunch recently issued a report outlining the worst breaches of 2026—so far:…
Verizon’s 2026 Data Breach Investigations Report Highlights
I am a big fan of Verizon’s yearly Data Breach Investigations Report. I follow it closely, as it confirms what we are seeing in the field, and provides validation for defense strategies employed to protect against attacks. The 2026 Report was recently published, and as I have mentioned before, it is well worth reading.…
Shadow AI Continues to Expose Company IP
Verizon recently published its 2026 Data Breach Investigations Report, which is full of helpful information for cybersecurity professionals to implement strategies for protection of systems. For a summary, click here.
The Report notes that a whopping “67% of users are using non-corporate accounts on their corporate devices to access AI services” and “45%…
ShinyHunters Hit Instructure + Downs Canvas Learning Management System
Another recent victim of ShinyHunters is Instructure, the supplier of the Canvas learning management system, which disrupted the login portals of 330 colleges and universities during the critical college exam schedule.
According to Dataminr, ShinyHunters “claimed to have stolen 3.654TB of data affecting about 275 million individuals and 9,000 institutions worldwide.” The stolen data…