Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cyberthreats, translation errors - how online English helps to avoid threats

Open your email on a Monday morning and chances are, something feels off. Maybe it's a message from "your bank" that doesn't sound quite right, or a supposed colleague urging you to act fast. Usually, the first clue is not the logo or even the address, it's the words. Awkward grammar, unusual phrasing, a sentence that doesn't belong. Even small errors often act as warning signs for much larger problems. When language betrays the scam.

AI and Fraud Detection: How Bank Reconciliation Tools Protect Your Cash

Fraud has always been a concern in business, but the digital economy has amplified both the scale and sophistication of fraudulent activities. From false vendor payments to suspicious cash transfers, threats are no longer isolated incidents; they're systemic risks that can affect an organization's cash flow. At the same time, finance teams are under immense pressure to deliver timely, accurate reporting while ensuring compliance, where manual processes, spreadsheet errors, and delayed reconciliations leave organizations vulnerable to undetected fraud.

How Cybersecurity Professionals Can Leverage App Reviews for Risk Insights

Cybersecurity analysts often narrow their attention to system logs, performance alerts, and other system logs. Even though these sources are essential, they are not the only sources that need attention. Feedback left by users, particularly on app stores, tends to go unnoticed. This is because the app stores are not only tools to distribute applications; they are invaluable stores of behavioral and experiential intelligence. For security professionals, App Reviews and Ratings can serve as an advanced warning system that highlights possible risks, unwanted activity, or security issues long before technical tools can uncover them.

The Hidden Cost of "Free" Gifts: How Survey Scams Are Evolving to Steal Financial Data

You've probably seen them: enticing online offers for free products from brands you trust, like a Yeti beach chair from Costco or an emergency car kit from AAA. All you have to do is fill out a quick survey and pay a small "shipping fee" of a couple of dollars. But what seems like a harmless transaction is actually a sophisticated scam with a high price tag. The KnowBe4 Threat Lab team has been tracking a phishing campaign where scammers use these fake surveys to steal financial data.

The Technical Sophistication Behind the "Free" Gift Scam: Evading Detection

Below is an example of a sophisticated survey scam phishing email that KnowBe4’s Threat Lab team has been monitoring as discussed in “The Hidden Cost of "Free" Gifts: How Survey Scams Are Evolving to Steal Financial Data”. As discussed in our previous blog, the human element is a critical part of the fake survey scam. However, the campaign's success is largely due to its advanced technical infrastructure.

8 Fraud and Risk Gaps Private Lenders Miss

Would it surprise you to learn that fraud is common in private lending? Probably not if you're in this business. But if you're not, here's what a recent LexisNexis report has revealed: not only is fraud common, but U.S. financial services firms lose $4.41 in costs for every $1 of fraud. This, by the way, is a 28% increase compared to 2022.

The MemcycoFM Show: Episode 13 - How 5 of the Biggest Retail ATO Attacks Could Have Been Stopped

Retailers have become prime targets for account takeover. Loyalty balances, stored cards, and digital wallets represent liquid assets, often guarded by weaker controls than financial accounts. Attackers exploit credential reuse, phishing infrastructure, and automation to scale these intrusions. Reported retail ATO cases in the UK rose 96% year over year (Action Fraud, 2023). The following five breaches illustrate how large brands across loyalty, e-commerce, and digital wallets were compromised, and how real-time, in-session defenses could have altered the trajectory.

The Human Firewall: Building a Culture of Fraud Resilience

Cybersecurity tools are only as strong as the humans who use them. Training, culture, and awareness shape how individuals interact with those systems and whether they succeed. This is especially true when it comes to fraud prevention. While firewalls and encryption protocols can block many external threats, they can’t stop an employee from clicking on a fraudulent invoice, wiring money to a spoofed account, or falling for a phishing scam.

From Human Resources to Human Risk: Why HR is the Perfect Department for Cybercriminals to Impersonate

We all trust HR - or at least we do when we think they’re emailing us! Data from KnowBe4’s HRM+ platform reveals that phishing simulations with internal subject lines dominate the list of most-clicked templates in 2025. Out of the top 10 templates people interacted with between May 1 - June 30, 2025, an incredible 98.4% had subject lines relating to internal topics - with HR mentioned in 45.2%.

Executive Deepfake Defense Strategies: 7 Proven Tactics to Stop CEO Fraud

Deepfake attacks targeting executives are no longer a sci-fi scenario—they’re a real, escalating threat. In 2024 alone, over 105,000 deepfake incidents were reported in the U.S., contributing to $200 million in financial losses in Q1 of 2025. Scammers deepfake voices and videos of CEOs or CFOs to coax employees into sending money or exposing sensitive data. The sophistication and accessibility of this technology demand layered defenses—both human-focused and tech-driven.

The Human Firewall: Building a Culture of Fraud Resilience

Cybersecurity tools are only as strong as the humans who use them. Training, culture, and awareness shape how individuals interact with those systems and whether they succeed. This is especially true when it comes to fraud prevention. While firewalls and encryption protocols can block many external threats, they can’t stop an employee from clicking on a fraudulent invoice, wiring money to a spoofed account, or falling for a phishing scam.

Beyond the Inbox: How Old-School Mail Scams Are Still Stealing Your Money

In a world so full of digital online scams, it’s hard to remember that scammers abuse our postal mailing systems as well. Scams are as old as humanity. And most of the scams we see today on the internet have been occurring for decades or even centuries before the internet was the internet. Nigerian scams have been documented back to the 1700s.

The MemcycoFM Show: Episode 12 - How The 5 Biggest Bank ATO Attacks Could've Been Stopped

Bank account takeover fraud is a growing global threat, costing financial institutions and customers billions each year. Attackers are refining their tactics, blending phishing, credential stuffing, and mobile malware to bypass traditional defenses. For banks, the stakes are high: a single breach can erode customer trust and regulatory standing overnight. We break down five of the most impactful account takeover attacks in recent years, examining what happened, how it happened, and how Memcyco’s real-time, browser-level, and mobile-layer protections could have mitigated the damage.

The Role of AI Custom Solutions in Modern Financial Services

AI has been hard at work redefining the limits of what can be done in almost every industry, but in finance, the stakes and the payoff are especially high. Algorithms are used to make decisions that used to be made by experienced analysts, such as in fraud detection and portfolio optimization. However, the distinction between merely applying AI and actually taking advantage of it is sometimes as simple as a single factor - customization.

BIN checkers: tools that keep online payments secure

BIN (short for Bank Identification Number) refers to the first six digits of a payment card number. These digits reveal the issuing bank's country, card type, and payment network. BIN Checker services let businesses verify this information before a payment is processed, helping prevent errors, detect potential fraud, and avoid costly failed transactions. This guide reviews three popular BIN Checker tools and shows how companies are using them to save money and time.

Defending Digital Trust: Fighting Brand Impersonation in the Wild

Just do it. Think different. The happiest place on earth. Nike, Apple, Disney are three iconic brands that have forever cemented themselves in our consciousness. How did they get there? A catchy slogan? A flashy logo? Sure, while slogans and logos change over time, they still make an impact. But what truly secures a brand’s reputation is trust. And trust is built over years, even decades, through consistency, authenticity, and relentless effort.

Loyalty Fraud Cost Businesses

Think credit card fraud is the biggest threat to eCommerce? Think again. Loyalty fraud cost businesses $4B in 2024, and most companies didn't see it coming. Why? Because the attack vector isn't obvious. It's: Credential stuffing + password spraying Poorly managed APIs connecting loyalty platforms to 3rd parties No real-time detection when the bad guys cash in points for untraceable gift cards.

#AI Voice Scam: How Scammers Mimic CEOs to Steal Your Money #aisecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

The MemcycoFM Show: Episode 11 - Replacing Outdated Phishing Protection with Real-Time Defense

Phishing protection refers to the tools, strategies, and technologies used to detect and prevent cybercriminals from impersonating your brand, stealing credentials, and defrauding your customers. As attackers move faster and impersonate more convincingly, brands need more than just domain scans or email authentication to stay protected.

Anatomy of a Vishing Scam

I hear about a ton of similar-sounding scam calls, where the scammer is pretending to be from a service you use (or used), offering you a substantial monthly discount (30% or more) if you pay some fee ahead of time. Sometimes they take the advance fee using your credit card, and sometimes they tell you that you have to get store gift cards. Who would possibly believe that a legitimate vendor would want them to pay with store gift cards? Hundreds of thousands of people.

FBI Report: Attackers Are Sending Physical Packages with Malicious QR Codes

The FBI has issued an advisory warning that scammers are distributing QR code phishing (quishing) links via unsolicited packages sent by snail mail. Recipients may scan the code to find out where the package came from, which will land them on a phishing page. This is a variation of a “brushing scam,” where unscrupulous vendors send packages designed to harvest information that can be used in phony positive reviews.

Phishing Scams: How to Spot & Stop Video Call Attacks! #cybersecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

What Should You Know About Digital Risk Management Before Investing in Crypto?

Investing in cryptocurrency comes with exciting opportunities, but it also introduces potential risks. Understanding digital risk management is essential to safeguard your assets and make informed, secure investment decisions.

The Memcyco FM Show: Episode 10 - Stopping Fake Mobile Apps and Account Takeover (ATO)

Fake apps are the latest evolution of brand impersonation, and they’re proving just as dangerous as phishing sites. Fraudsters clone legitimate mobile apps, publish them on official app stores, and trick users into entering credentials — which are then reused in the real app before anyone notices. Given that over 60% of web traffic is now mobile, this form of phishing-driven credential reuse has become one of the top blind spots in mobile fraud defense. Yet most mobile security tools can’t detect it — because they don’t know where those credentials came from.