SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Spear Phishing Stories

American Stories

Spear Phishing stories

Red Sift brings OnDMARC to Microsoft Sentinel Marketplace
Security Information and Event Management

Red Sift brings OnDMARC to Microsoft Sentinel Marketplace

Microsoft security teams can now ingest email authentication signals in one place, helping spot phishing and spoofing sooner during investigations.

By Sofiah Nichole Salivio • 4 min read • This month
AI fraud fears rise as payment scams hit finance teams
Digital Transformation

AI fraud fears rise as payment scams hit finance teams

Finance teams are losing money to payment scams as generative AI makes fake invoices, emails and voice requests harder to spot.

By Joseph Gabriel Lagonsin • 3 min read • Last month

Global Stories

Spear Phishing stories

Two-thirds of US telecoms in elevated cyber risk band
Ransomware

Two-thirds of US telecoms in elevated cyber risk band

Smaller operators are carrying much of the danger as a new study finds 66% of assessed US telecoms fall into an elevated risk band.

By Joseph Gabriel Lagonsin • 4 min read • Yesterday
AI systems expose sensitive data in ANZ, report finds
Data Protection

AI systems expose sensitive data in ANZ, report finds

Downstream AI alerts in Australia and New Zealand are rising as agents and MCP links create fresh routes for sensitive data leakage.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Google warns of AI-powered cyberattacks in live ops
Malware

Google warns of AI-powered cyberattacks in live ops

Defenders now have minutes, not hours, as attackers use agentic AI to automate credential theft, scanning and extortion across live operations.

By Sean Mitchell • 5 min read • This month
AI scams make phishing harder to spot, Vertech warns
Phishing

AI scams make phishing harder to spot, Vertech warns

Businesses are being urged to verify payment requests independently as AI makes phishing emails, calls and chats far harder to spot.

By Joseph Gabriel Lagonsin • 4 min read • Last month
NCC Group logs record July ransomware cases as AI rises
Malware

NCC Group logs record July ransomware cases as AI rises

Industrial operators faced sustained pressure in July, as ransomware attacks hit 894 cases and AI-assisted tactics began to reshape threats.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Netcraft appoints Darren Lee to board for growth push
Cloud Security

Netcraft appoints Darren Lee to board for growth push

The cybersecurity company is seeking board-level expertise as it expands brand protection services amid rising AI-driven phishing and fraud risks.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Stories from Other Regions

Spear Phishing stories

New Zealanders fall into AI confidence trap, Avast says
Data Protection

New Zealanders fall into AI confidence trap, Avast says

Many New Zealanders are sharing sensitive data with chatbots despite fearing AI fakes, leaving them exposed to scams and data leaks.

By Joseph Gabriel Lagonsin • 4 min read • Today
ReliaQuest finds Microsoft 365 email control bypass
Network Security

ReliaQuest finds Microsoft 365 email control bypass

Phishing emails can still slip into Microsoft 365 mailboxes when attackers leave the SMTP envelope sender blank, ReliaQuest has found.

By Sofiah Nichole Salivio • 4 min read • Last week
ChatGPT search links New Zealanders to unsafe sites
Malware

ChatGPT search links New Zealanders to unsafe sites

New Zealand users risk fake login pages and scam sites after ChatGPT search results were found pointing to unsafe links and downloads.

By Sean Mitchell • 5 min read • Last week
Half of New Zealand agencies miss email security bar
Phishing

Half of New Zealand agencies miss email security bar

Spoofed emails could still reach public servants and citizens, as 50% of more than 200 New Zealand agencies have not met the DMARC standard.

By Sean Mitchell • 4 min read • This month
Proofpoint finds Southeast Asia firms lag on DMARC
Data Protection

Proofpoint finds Southeast Asia firms lag on DMARC

Most of Southeast Asia's biggest firms still leave customers exposed to spoofed emails, with only 17% enforcing the strictest DMARC setting.

By Sean Mitchell • 4 min read • This month
Phantom Deal: Inside an Imposter Scam Targeting an Avast Employee
Virtual Private Networks

Phantom Deal: Inside an Imposter Scam Targeting an Avast Employee

The fake acquisition pitch pushed an Avast employee towards a EUR €626,735.45 wire, exposing a broader impersonation scam across several industries.

By Luis Corrons • 8 min read • This month
PhishByte warns of rising BEC scams hitting Australian firms
Crypto

PhishByte warns of rising BEC scams hitting Australian firms

Australian firms are being urged to tighten payment checks as email impersonation scams drive AUD $166.8 million in losses.

By Karen Joy Bacudo • 4 min read • This month
AI gives criminals speed boost, but basic security failures persist
Ransomware

AI gives criminals speed boost, but basic security failures persist

Australian firms still face email compromise and poor security hygiene, even as AI helps criminals move faster and hide harder.

By David Shilovsky • 6 min read • Last month
Businesses urged to use 159 to fight payment fraud
Phishing

Businesses urged to use 159 to fight payment fraud

Businesses risk sharper losses from phone scams unless staff know to verify suspicious calls using 159, as UK payment fraud hit GBP £1.28 billion.

By Joseph Gabriel Lagonsin • 5 min read • Last month