Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The MemcycoFM Show: Episode 6 - Pre-emptive Account Takeover Detection: A Five-Step Guide

Jun 27, 2025 By Memcyco In Memcyco
Modern security leaders know that account takeover detection (ATO) isn’t just about spotting a bad login. ATO attacks are part of a broader scam lifecycle – starting with phishing or impersonation, escalating into credential harvesting, and ending with unauthorized access. To stop ATOs effectively, security teams need visibility into this full progression, not just the login attempt. That’s why a true ATO prevention strategy starts long before a password is entered.
View Video
knowbe4

Warning: Scammers are Targeting WhatsApp Users

Jun 26, 2025 By KnowBe4 Team In KnowBe4
Researchers at Bitdefender warn of a wave of social engineering attacks targeting WhatsApp accounts. The attacks begin with automated phone calls that instruct users to add a specific phone number to their WhatsApp contacts. The call then ends abruptly. The scammers are doing this to gather potential targets for future attacks. Most people will ignore the calls, but those who do add the number to their contacts will be more likely to fall for additional social engineering attacks.
Read Post

The MemcycoFM Show: Episode 5 - DNS Cache Poisoning Prevention: How to Protect Accounts in Real-Time

Jun 26, 2025 By Memcyco In Memcyco
For security teams, it’s no great revelation to say that DNS cache poisoning prevention is essential for guarding against attacks using that vector. But it’s easier said than done. While traditional network-layer defenses like DNSSEC reduce poisoning risk, they can’t fully prevent it. Downstream – after redirection – bad actors await, ready to harvest credentials, bypass MFA, and take over accounts.
View Video
avast

Why AI scam protection is more important than ever

Jun 25, 2025 By Emily Lockwood In Avast
Online scams are getting smarter—and harder to detect. Learn why AI-powered protection is essential in 2025, and how Avast Scam Guardian helps keep you safe from phishing, fake sites, and fraud—free for everyone. In a world where technology keeps us connected, informed, and entertained, it also creates new opportunities for scammers to sneak into our digital lives.
Read Post
knowbe4

FTC States That Scams Cost U.S. Consumers $158.3 Billion in One Year

Jun 23, 2025 By Roger Grimes In KnowBe4
I am used to repeating some pretty big numbers when talking about the financial impact of cybercrimes. When you look into the data, it is pretty easy to start talking about tens of billions of dollars. I occasionally come across figures that are in the hundreds of billions of dollars in damage across multiple years globally. So, imagine my surprise when I learned the U.S. Federal Trade Commission (FTC) said Americans lost $158.3B in 2023, one year, to scammers, and that annual figure is getting worse.
Read Post
Can AI Prevent Fraud Without Interfering with Your Privacy?

Can AI Prevent Fraud Without Interfering with Your Privacy?

Jun 23, 2025 By SecuritySenses In SecuritySenses
Fraudsters are getting craftier, but fortunately, the technology against them is becoming more intelligent as well. The question on everyone's mind is, how can we apprehend the bad guys without becoming Big Brother? You may be surprised at the answer. The idea of fraud detection has been synonymous with gathering as much information as possible about all people. It was as though there was a security camera in every room just in case. However, AI is turning the tables, and it is, in fact, turning things more private rather than less.
Read Post
knowbe4

Warning: Voice Deepfakes Continue to Improve

Jun 18, 2025 By KnowBe4 Team In KnowBe4
AI-generated voice deepfakes present an urgent threat to organizations, according to researchers at Pindrop. The researchers warn that speech generation tools can create realistic-sounding cloned voices in near real-time, allowing attackers to hold live conversations with victims while imitating someone the victim knows. Additionally, these tools can now convincingly imitate human emotions, making social engineering attacks even more persuasive.
Read Post
Internxt

14 WhatsApp Scams & How to Avoid Them

Jun 17, 2025 By Internxt In Internxt
WhatsApp has reached over 2 billion users worldwide, making it one of the most popular messaging platforms available for your phone, tablet, and desktop. It’s a great way to connect with friends, send photos, create group chats, and host video calls. It also gives scammers a huge field to play with when attempting to scam people online. To help you protect your data, finances, and accounts, we will explain the 14 most common WhatsApp scams cybercriminals use and how to prevent them.
Read Post

The MemcycoFM Show: Episode 4 - How to Prevent Credential Stuffing Attacks

Jun 17, 2025 By Memcyco In Memcyco
Credential stuffing attacks are one of the most persistent and damaging account-based threats facing security teams – and one of the hardest to detect. Most enterprises rely on server-side, post-login detection, which captures only successful login attempts. Failed attempts remain invisible, slowing time-to-detection and increasing the risk of successful account takeovers (ATOs). Why is this such a challenge? The reasons are many, as we’ll explore.
View Video
The Hidden Cyber Threats Lurking on Job Boards

The Hidden Cyber Threats Lurking on Job Boards

Jun 17, 2025 By SecuritySenses In SecuritySenses
If you've ever job-hunted online-or run a hiring campaign-you already know how much the process has changed. Everything is digital now. Resumes are uploaded, interviews are scheduled through apps, and entire careers begin with a single click on a job board. But here's the part we don't talk about enough: cyber threats have evolved right alongside the recruitment process.
Read Post
idstrong

What to Know About Unpaid Toll Text Message Scams

Jun 16, 2025 By IDStrong In IDStrong
An increasing number of people are reporting receiving text messages about unpaid tolls. Although some of these messages are legitimate, fraudsters are now using this tactic to trick unsuspecting individuals into sharing personal information or making fraudulent payments. Typically, these scam messages create a sense of urgency, pressuring recipients to act quickly before verifying the claim.
Read Post
knowbe4

Google Report Outlines the Latest Scam Trends

Jun 16, 2025 By KnowBe4 Team In KnowBe4
Researchers at Google have published a report on the latest scam trends, noting an increase in travel-themed scams targeting people preparing for their summer vacations. “Ahead of the summer vacation season, our teams have observed a spike in travel scams,” the researchers write. “Fake travel websites lure users into booking travel with a promise of ‘too good to be true’ prices, experiences, or discounts.
Read Post
cyjax

How AI Is Redefining Fraud Detection

Jun 12, 2025 By Shail Yadav In CYJAX
Card fraud is escalating at an alarming rate, with no signs of slowing down. In a world where digital payments have become the norm, almost everyone, consumers, businesses, and financial institutions, finds themselves at risk. The convenience of card payments has made them an essential part of daily life, but it has also paved the way for sophisticated fraud schemes. For businesses, the stakes are even higher.
Read Post
Arctic Wolf

Arctic Wolf Observes Organizations Receiving Unsolicited Microsoft MFA Messages

Jun 11, 2025 By Andres Ramos In Arctic Wolf
Arctic Wolf has recently observed customers receiving unsolicited Microsoft multi-factor authentication (MFA) text messages. These messages originate from legitimate Microsoft short code numbers; however, the source and intent have not been confirmed. This issue appears widespread, affecting organizations across multiple industry verticals. Example of Text Message It is currently unclear whether this activity is due to a systemic issue on Microsoft’s side or part of a malicious campaign.
Read Post
netacea

Inside the Botnet Economy: Building, Selling, and Using Compromised Devices for Cyberfraud at Scale

Jun 11, 2025 By Threat Research Team In Netacea
Botnets have become a core part of the infrastructure in today’s cybercrime ecosystem — not just as enablers of disruption, but as purpose-built networks engineered for profit, stealth, and scalability. Built from large networks of compromised devices and rented out via criminal marketplaces, botnets are now essential as-a-service components of any cyberfraudster’s toolkit. While the concept of a botnet is not new, their construction, use cases, and value have certainly advanced.
Read Post
knowbe4

Fake MFA Reset Warning Message

Jun 6, 2025 By Roger Grimes In KnowBe4
A KnowBe4 co-worker of mine recently got this SMS phishing message (i.e., smish). They quickly identified it as a social engineering attack and shared it on our internal communication channel for sharing such things. I have had more and more of these types of similar smishes occurring over the last few months. It is an attempt to trick someone into worrying that their Gemini, Gmail, Microsoft, Instagram…or whatever account…is in the middle of being compromised and you need to react NOW! NOW!
Read Post
memcyco

7 Best Practices for eCommerce Fraud Prevention

Jun 6, 2025 By Lori Moss In Memcyco
When it comes to the stress of dealing with eCommerce scams, digital business teams don’t need reminding. But the current and projected cost of eCommerce fraud is truly staggering. A study by Juniper Research, a leader in fintech insights, forecasts that eCommerce fraud is set to leap from $44.3 billion in 2024 to $107 billion by 2029. That’s stomach-churning 141% jump. Needless to say, eCommerce fraud prevention has never been a more pressing goal.
Read Post
knowbe4

Copyright-Themed Phishing Lures Target Europe

Jun 5, 2025 By KnowBe4 Team In KnowBe4
A phishing campaign is targeting European countries with lures themed around copyright infringement, researchers at Cybereason warn. The phishing emails are designed to deliver the Rhadamanthys infostealer malware. “These campaigns often involve emails impersonating companies and their legal departments, falsely claiming recipients have violated copyright on social media or elsewhere and demanding content removal,” the researchers write.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.