News

The Phishing Simulation Your Marketing Team Is Missing

A phishing campaign that has been quietly running for at least five months just exposed a hard truth about employee training programs. When threat researchers at CTM360 published their RecruitTrap findings in August 2026, they mapped more than 3,000 phishing URLs impersonating recruiters from over 50 real organizations. The primary victims were marketing professionals, and […]

The Phishing Simulation Your Marketing Team Is Missing Read More »

Behaviour Change Cybersecurity: The Starbucks Portal Lesson

News / POPP3R

In January 2026, attackers gained access to the personal and financial records of 889 Starbucks employees without ever penetrating the company’s core infrastructure. The method was precise: a convincing replica of Starbucks’ Partner Central, the internal portal workers use to manage payroll, benefits, and employment details, was built to harvest credentials. Workers who entered their

Behaviour Change Cybersecurity: The Starbucks Portal Lesson Read More »

Ransomware Awareness Training: Gunra Targets Nonprofits

News / POPP3R

On August 10, 2026, CISA, the FBI, the National Security Agency, and South Korea’s National Police Agency issued a joint advisory warning organizations worldwide about Gunra ransomware, a fast-growing criminal operation that has already claimed Canadian victims. Advisory AA26-222A names healthcare providers, nonprofit services, financial institutions, and government agencies as active targets and describes an

Ransomware Awareness Training: Gunra Targets Nonprofits Read More »

Behaviour Change Cybersecurity: 4 Lessons from Black Hat

News / POPP3R

The message from Black Hat USA 2026, which concluded in Las Vegas on August 7, was directed squarely at organizations still running annual click-training programs: the attackers have moved on, and so must you. Researchers documented a threat landscape in which AI tools produce flawless phishing emails at 95 percent lower cost than manual campaigns,

Behaviour Change Cybersecurity: 4 Lessons from Black Hat Read More »

Security Awareness for Schools: A Social Engineering Lesson

News / POPP3R

The staff at the UK Department for Education did not hand attackers a password. They answered a help desk request, clicked a link, and responded to what looked like a legitimate internal process. On July 30, 2026, a threat group calling itself ExfilSquad confirmed they had used exactly that approach to steal 607,000 records from

Security Awareness for Schools: A Social Engineering Lesson Read More »

Security Awareness Metrics: Canada’s $7M Breach Cost

News / POPP3R

Canadian organizations are paying an average of CA$7.11 million every time a data breach occurs, according to IBM’s 2026 Cost of a Data Breach Report released July 29. That figure is the highest ever recorded since IBM began tracking breach costs in Canada, and it should prompt every security leader in the country to ask

Security Awareness Metrics: Canada’s $7M Breach Cost Read More »

When Business Email Compromise Survives the Takedown

News / POPP3R

Law enforcement took down Kratos. But the 1,800 criminal subscribers who paid for that phishing-as-a-service platform still have the kit code, and security researchers confirm they are already adapting it. For Canadian finance teams and executives, the practical question is not whether criminals will continue using these techniques; it is whether your organization is ready

When Business Email Compromise Survives the Takedown Read More »

Security Awareness for Nonprofits: The Interlock Problem

News / POPP3R

The clients of the Centre for Newcomers came to Calgary for a fresh start. On July 17, 2026, they got something else: their personal records, immigration files, and sensitive status documents became part of a 380 GB haul claimed by the Interlock ransomware group. The organisation, a Calgary-based nonprofit providing immigration and settlement services across

Security Awareness for Nonprofits: The Interlock Problem Read More »

Pink Vishing: Security Awareness for Canadian Organizations

News / POPP3R

Your employees can spot a suspicious email. Fewer of them are prepared for the phone call that follows: someone claiming to be from IT, asking them to register a new passkey, and in minutes the attacker has their Microsoft 365 credentials. This is the active O-UNC-066 campaign, and it targets sectors that form the backbone

Pink Vishing: Security Awareness for Canadian Organizations Read More »

The Phishing Simulation Your Marketing Team Is Missing

Behaviour Change Cybersecurity: The Starbucks Portal Lesson

Ransomware Awareness Training: Gunra Targets Nonprofits

Security Awareness Metrics: Canada’s $7M Breach Cost

When Business Email Compromise Survives the Takedown

Security Awareness for Nonprofits: The Interlock Problem

Quick Links

Services