Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Tech-support scams trick people into giving up personal information, remote access to their devices and even their money. Watch this short video to learn how to spot these scams, protect yourself and take action if you’ve already become a victim.

Did you fall for a scam and accidentally give your card details to a scammer? Don’t panic, watch this video to learn what you should do if you’ve fallen for a scam and how you can avoid these scams in the future.

Automated brand impersonation protection has become a baseline requirement for digital security. As phishing operations scale across web domains, mobile app stores, social platforms, and ad networks, attackers are moving faster and operating more broadly than ever before. Traditional defenses – periodic scans, manual takedowns, post-incident analysis – are too slow and too shallow. Today’s security teams need a real-time system that detects brand impersonation threats from the earliest reconnaissance stage through live user engagement, and neutralizes them before customer trust, credentials, or revenue are compromised.

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Not sure whether to place a fraud alert or a credit freeze? Both help protect you from identity theft, but they work differently. Watch this short video to learn the key differences between the two, when to use each and how to set them up.

The stark challenge to modern phishing site detection is that the efficacy of a detection strategy is now measured in seconds, not hours. In 2024, threat actors stole credentials in a median of 49 seconds from the moment a phishing email was opened, according to Verizons’s Data Breach Investigation Report (DIBR) report. Given this reality, relying on scanning and takedown or traditional threat intelligence feeds – that inherently lag behind real-time user engagement – is no longer a viable defense against even unsophisticated credential theft and account takeover (ATO) scams.

Scammers can do a lot of damage with just your email address. In this video, we’ll break down how cybercriminals get your email, how they use it against you and most importantly, how you can protect yourself.

Scammers are impersonating Amazon to steal accounts and payment details. Watch this short video to learn how to spot fake Amazon emails and keep your online account secure.

Have you ever wondered if a website is legitimate or a scam? Watch this video to learn five easy ways you can check if a website is safe and how to avoid sketchy websites in the future.

Scammers are using Facebook Messenger to trick people into sharing information and sending money. Watch this video to learn the most common Facebook Messenger scams and how to protect yourself from them.

Venmo scams happen quite often, and there are several types. The more aware you are of common Venmo scams, the better you can avoid falling for them and losing money. Watch this video to learn more about the Venmo scams to avoid.

Many cybersecurity teams are familiar with Evil Twin attacks in theory, but fewer have the tools to detect or stop them during a live session, where the real damage begins. Evil Twin phishing is now a leading entry point for real-time credential theft and account takeover. This episode breaks down how it works, where traditional defenses fail, and what’s required to stop it before attackers succeed.