Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A Sneaky T-Mobile Scam and Lessons That Were Learned

A friend of mine got a call on his phone and he regrettably picked it up. The number was 267-332-3644. The area code is from Bucks County, PA, where he used to live many years ago. But since his multiple anti-scam phone filter apps did not flag the number as a scam, and it was from a place he used to live, he picked it up.

Security Threats to Payroll Data: How Can Your Firm Manage Them?

In modern, connected workplaces, security is a perpetual concern. Some departments in your organization handle high-risk information, such as personal employee data and company finances. Any data breach can bring on a reputational crisis and endanger internal strategic approaches. In February 2025, HR Dive reported the impact of a data breach at an employee screening services provider. The breach affected an unnerving 3.3 million people, leaking people's names and financial account information. Social Security numbers and other ID numbers also got compromised.

Criminals Exploit the Death of Pope Francis to Launch Scams

Scammers are exploiting the death of Pope Francis to launch social engineering attacks, according to researchers at Check Point. The researchers note that threat actors often take advantage of high-profile tragedies and crises to exploit victims’ emotions. “They typically begin with disinformation campaigns on social media platforms like Instagram, TikTok, or Facebook, uploading fake images generated by AI,” the researchers write.

Why Every Business Needs a Secure Payment Gateway to Prevent Cyber Threats

Lots of businesses nowadays conduct at least a portion of their sales online, with many operating entirely online. As such, businesses use payment gateways to authenticate the customer's payment details and facilitate online transactions.

Scams 2.0: How Technology Is Powering the Next Generation of Fraud

Technology is transforming the way financial scams operate, making them more sophisticated, automated, and harder to detect. From deepfake impersonations to cryptocurrency fraud and tech support scams, bad actors are leaving no stone unturned and are leveraging every advanced tool at their disposal to manipulate victims and steal their assets.

Fintech Newscast Episode 253 with Memcyco

Security, growth, and valuations — all packed into one powerful episode. Memcyco CEO Israel Mazin sat down with Fintech Newscast to explore the evolving cyber threat landscape and how startups can stay ahead of the curve. From founding a security company to navigating today’s investment climate, it’s a must-listen for anyone in fintech. Stream the full convo on the Fintech Newscast!

How to Run a Domain Spoofing Check (and Stop Fake Sites Before They Hurt You)

Imagine this: a customer clicks a paid search ad that looks exactly like your brand—same logo, same layout, even your brand tone. They enter their login credentials, maybe their payment details… and they’ve just handed everything over to a scammer. This is domain spoofing in 2025. And it’s scaling faster than most businesses are prepared for.

[Scary] A New Real Cash Scam Sweeps Across the U.S. Warn Your Family and Friends!

Right now, today, thousands of people are being tricked into going to their banks or credit unions to withdraw large sums of cash and will give or send it to a complete stranger, never to see it again. Many of the victims are in the prime of their lives, intelligent, and consider themselves to be of above-average ability in spotting scams and scammers.

Singapore's Scam Surge Strategy: What Enterprises Must Do Now Under the New Shared Responsibility Framework

Scam losses in the Asia-Pacific region continue to escalate, positioning the area as a global testing ground for phishing innovations. Singapore’s recent implementation of the Shared Responsibility Framework (SRF) serves as a critical alert for enterprises: both regulators and customers are demanding heightened vigilance.

Cato CTRL Threat Research: OpenAI's ChatGPT Image Generator Enables Creation of Fake Passports

On March 25, OpenAI introduced image generation for ChatGPT-4o and ChatGPT-4o mini. On March 31, it was announced that the tool was available for free to all users. Since then, users have quickly discovered that ChatGPT’s image generator can be manipulated to create fake receipts and forge other documents.

Watch Out for Websites Impersonating Tax Providers and the IRS During Tax Season

Before you click on that email or open that text message — is that really the United States Internal Revenue Service (IRS) or your tax provider? It may not be. BlueVoyant has identified dozens of websites impersonating the IRS, posing a risk to online users. These phishing sites likely aim to steal sensitive information by tricking users into believing they are interacting with the legitimate IRS website. Here are some examples of the phishing sites uncovered by BlueVoyant.

Why Geolocation Is Essential for Fraud Prevention in Today's Digital World

These days the entire world is at your fingertips. One click of a mouse and you can have anything you desire! However, hiding in the shadows are serious cybercriminals. These criminals are ready to pounce on unprepared individuals. A report by BDO revealed that the UK alone lost a staggering £2.3 billion to fraud in 2024. Thus, fraud prevention remains a top priority in this digital economy. Especially now that every transaction counts.

Shifting to Prevention: How Intelligence Can Stop Card Fraud in Its Tracks

Fraudsters are relentless in their pursuit, targeting physical cards, intercepting personal data, and exploiting online vulnerabilities, all with minimal risk and significant financial reward. In the first half of 2024 alone, unauthorised payment card fraud surged to over £275 million, marking a 7% increase compared to the previous year, according to UK Finance. While the risks associated with fraudsters are well understood, apprehending them remains a significant challenge.

Online Gaming Platform Steam Tops List of Most Imitated Brands For the First Time

Steam was the most impersonated brand in phishing attacks during the first quarter of 2025, according to a new report from Guardio. The researchers note that the gaming platform’s surge to the top comes as “a bit of a shock.” “Historically, the spot has been dominated by the usual suspects - big tech companies like Meta, Microsoft, or even USPS,” Guardio says. “But this quarter, it’s Steam, and by a significant margin.

Australia's Crackdown on Customer Fraud Losses: A Wake-Up Call for APAC

Let’s be honest – the burden of payment fraud has for years fallen squarely on the shoulders of scammed customers – A.K.A., victims. Reimbursement has largely been tactical; an opt-in gesture of goodwill administered on a case-by-case basis to customers who either make enough noise, or hold accounts banks can’t afford to lose. If you’re familiar with the UK’s APP fraud reimbursement mandate, you’ll know that things are changing in a big way.

Warning: QR Code Phishing (Quishing) Becoming Increasingly Stealthy

Attackers are using new tactics in QR code phishing (quishing) attacks, according to researchers at Palo Alto Networks’ Unit 42. Quishing attacks hide phishing URLs within QR codes, allowing them to more easily evade security filters and trick the user into opening the link on their phone.

How New Bot Detection Tools are Using Behavior Analysis to Target Scammers

Not all bots are built equal. Your online life largely relies on friendly, harmless bots that, for example, help power search engines, run social platforms, monitor sites, and much more. However, there are also bad bots out there, built specifically to cause damage and chaos. These online pests include credential stuffing bots designed to take over your user accounts, scraper bots attempting to steal your publicly available information, and scalping bots trying to grab your inventory for resale. It really is a jungle out there.

Cyberfraud on the rise: technology as a shield for businesses

In a world of constant threats, real-time detection and prevention make all the difference. Imagine starting your day with the news that millions of your bank’s customers have fallen victim to a cyberattack. This became a reality last year when cybercriminals claimed to have gained access to Santander Bank’s data, demanding millions of dollars in ransom. While the bank did not confirm the exact details, it admitted to a data breach.