cybersecurity culture

$500 Phishing Kits Demand a Cybersecurity Culture Shift

Last week, the FBI and Indonesia’s National Police dismantled the W3LL phishing network, arresting the alleged developer and seizing the platform’s infrastructure. It was a meaningful enforcement milestone: the first coordinated action between American and Indonesian authorities targeting a phishing kit developer. But the headline about the arrest misses the more important story. The W3LL […]

$500 Phishing Kits Demand a Cybersecurity Culture Shift Read More »

Device Code Phishing Hits Microsoft 365: What to Know

A sophisticated phishing campaign is actively targeting Microsoft 365 accounts at more than 340 organizations across Canada, the United States, Australia, New Zealand, and Germany, using a technique called device code phishing to capture authentication tokens that persist even after a password reset. Security researchers first detected the attacks on February 19, 2026, and the

Device Code Phishing Hits Microsoft 365: What to Know Read More »

Human Risk Management: Beyond Security Awareness Training

Nearly 70% of organizations believe their employees lack fundamental cybersecurity awareness, even at organizations that already run formal training programs. That finding, from Fortinet’s 2024 Security Awareness and Training Global Research Report, captures a frustration that many security leaders recognize immediately: completing a course is not the same as being prepared. In 2026, the industry’s

Human Risk Management: Beyond Security Awareness Training Read More »