Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Common Facebook Scam Method

Feb 27, 2026 By Roger Grimes In KnowBe4
A friend posted this on Facebook and it came up on my feed. I know this person and I was so sorry to read. How horrific! I had no idea who was killed in the accident, so I clicked on the news story. It took me to a site that posted this: This is a real reCAPTCHA posted to filter out anti-malware and content filtering services. When I saw this I knew that this was a fake news story and that my friend’s Facebook account had been taken over by a scammer.
Read Post
persona

Document fraud is getting worse. Here's what's changing.

Feb 27, 2026 By Ashley Fang In Persona
Physical discs have given way to streaming. You can make a purchase with a tap of your phone. But relying on documents to verify business and individual identities isn't going anywhere. In fact, the opposite is true. Some regulations require document checks during identity verification. Even when that’s not the case, documents are becoming popular and valuable components of identity checks because they provide information that isn’t available elsewhere.
Read Post
manageengine

The Mitnick Method: Why a 15-Year old schoolboy can empty your bank account

Feb 25, 2026 By Omar Hafiz In ManageEngine
Picture this: It’s 3pm on a busy Tuesday. Your phone rings, and the caller ID shows your company's main number. "Hi, this is Jake from IT," says a confident voice. "We're seeing some unusual activity on your account and need to verify your password to secure it. Can you help me out real quick?". Sound familiar? Well, this was the exact technique perfected by a teenager named Kevin Mitnick in 1983, long before the internet, smartphones, or even Windows or Linux existed.
Read Post
knowbe4

Fake Video Meeting Invites Trick Users Into Installing RMM Tools

Feb 24, 2026 By KnowBe4 Team In KnowBe4
Threat actors are using phony meeting invites for Zoom, Microsoft Teams, Google Meet, and other video conferencing applications to trick users into installing remote monitoring and management (RMM) tools, according to researchers at Netskope. The invites lead to convincingly spoofed landing pages for fake video meetings, complete with a list of coworkers who have supposedly already joined the call. The page instructs the user to install a software update in order to join the video meeting.
Read Post
CrowdStrike

The Art of Deception: How Threat Actors Master Typosquatting Campaigns to Bypass Detection

Feb 23, 2026 By Alen Peric In CrowdStrike
Typosquatting is a deceptive technique in which threat actors register misspelled or look-alike domains of legitimate organizations to trick users into visiting fraudulent sites. It remains one of the most effective and underestimated attack vectors in the modern cyber threat landscape. What appears to be a misspelled domain often conceals sophisticated campaigns designed to phish company employees or customers, harvest credentials, deliver malware, and damage organizational reputation.
Read Post
memcyco

Enterprise Account Takeover Solutions: How to Operationalize Protection After Go-Live

Feb 23, 2026 By Ezra M. In Memcyco
Enterprise account takeover solutions often look strong during procurement. The real test begins after go-live. Integration completes. Alerts begin flowing. Fraud, SOC, and digital leaders see new data. Now the question shifts from deployment to operationalization. How do enterprises turn early ATO visibility into measurable fraud reduction, faster investigations, and stronger regulatory posture?
Read Post
knowbe4

Report: AI-Driven Fraud Surged by 1200% in December 2025

Feb 19, 2026 By KnowBe4 Team In KnowBe4
AI-driven fraud attacks spiked by more than 1200% in December 2025, according to a new report by Pindrop Security. Threat actors are using AI to assist in every stage of the attack, from deploying bots to conduct reconnaissance to using deepfakes to trick humans. “According to Pindrop internal data, AI fraud (or non-live fraud) surged 1210% by December 2025,” the researchers write.
Read Post

150+ FAKE law firm websites found in AI cloning scam #cybersecurity #ai #podcast

Feb 18, 2026 By LimaCharlie In LimaCharlie
In this week's Intel Chat, Christopher Luft and Matt Bromiley discuss how attackers used AI to clone over 150 law firm websites, targeting fraud victims under the guise of offering legal assistance to recover lost funds. Chris points out how easy this has become with AI tools. Attackers can quickly clone a website, host it at a legitimate-looking domain, and start harvesting information. The episode also covers Russian cyber operations targeting the defense industrial base, Team PCP's campaign compromising 60,000+ servers, and exposed OLAMA AI infrastructure.
View Video
memcyco

RFP Essentials for Account Takeover Fraud Solutions: A Procurement Guide

Feb 16, 2026 By Ezra M. In Memcyco
The digital landscape is currently witnessing an industrialization of fraud. Legacy defenses, once considered standard, are now struggling to keep pace with sophisticated attackers who operate with the speed of AI. For enterprises, the Request for Proposal (RFP) process is no longer just a bureaucratic hurdle. It is a critical opportunity to filter out reactive “band-aid” fixes and identify account takeover (ATO) fraud solutions that provide preemptive protection.
Read Post
1Password

1Password's new benchmark teaches AI agents how not to get scammed

Feb 12, 2026 By Jason Meller In 1Password
As we embed AI agents into our lives and workflows, we’re learning the (sometimes surprising) ways in which they outperform human beings, and other ways in which they fall short. And occasionally, we find an example where agents, paradoxically, are both better and worse than their human users.
Read Post
memcyco

Preemptive Defense Is No Longer Optional: Why Frost & Sullivan Is Calling for Earlier Fraud Intervention

Feb 11, 2026 By Ran Arad In Memcyco
Preemptive cybersecurity defense refers to the ability to detect and disrupt fraud and account takeover attempts before credentials are misused and damage occurs. According to a 2026 analyst brief from Frost & Sullivan, most enterprise fraud and cybersecurity controls still activate too late in the attack lifecycle to prevent loss.
Read Post
memcyco

Shift Left Security: Compress Time-to-Detect and Reclaim Hours for High-Impact Work

Feb 5, 2026 By Ezra M. In Memcyco
Imagine this: a customer clicks a paid search ad that looks exactly like you. Same logo. Same layout. Same tone. They enter credentials. They hand everything to a scammer. Your team finds out later. When the fraud case lands. When the customer complains. When a suspicious login alert finally fires. That’s not a tooling problem. It’s a timing problem. Shift-left security is how you get the time back.
Read Post
momentproof

MomentProof Deploys Patented Digital Asset Protection

Feb 4, 2026 By MomentProof
MomentProof, Inc., a provider of AI-resilient digital asset certification and verification technology, today announced the successful deployment of MomentProof Enterprise for AXA, enabling cryptographically authentic, tamper-proof digital assets for insurance claims processing. MomentProof's patented technology certifies images, video, voice recordings, and associated metadata at the moment of capture, ensuring claims evidence is protected against AI-based manipulation, deepfakes, and other malicious digital alterations.
Read Post
memcyco

Account Takeover Fraud in 2026: How Attacks Really Happen and How to Stop Them Before Impact

Feb 4, 2026 By Ran Arad In Memcyco
Account takeover (ATO) fraud is a critical threat to digital businesses. Despite heavy investment in MFA and login anomaly detection, many attacks succeed because they bypass traditional safeguards entirely. Modern ATO doesn’t start at the login screen. It begins upstream with pre-login exposure and real-time credential relay, allowing attackers to hijack sessions before traditional defenses even engage.
Read Post
acronis

Defending against deepfake cyberattacks: Why trust is the new security perimeter

Feb 4, 2026 By Lee Pender In Acronis
Deepfake technology is now a legitimate enterprise level threat. What started as a potentially disturbing AI capability has rapidly become a powerful tool for cybercriminals and one that exploits the most fundamental element of business communication: trust. A new report from Info‑Tech Research Group, Defend Against Deepfake Cyberattacks, breaks down how to understand and assess the risk deepfakes pose to organizations of all sizes.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.