Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
INETCO wins 2026 fraud detection and cybersecurity software award
INETCO has been named Best Online Fraud Detection & Cyber Security Software 2026 by Corporate Vision in the Canadian Business Awards. This recognition highlights the real world impact our customers are making to prevent payment fraud and strengthen cyber resiliency across global payment ecosystems.
The Best Proactive Cybersecurity Tools for SMEs (and Where They Fall Short)
Most proactive cybersecurity tools for SMEs are designed to stop attacks before damage occurs. That sounds sufficient. It isn’t. In practice, most attacks don’t succeed before defenses activate or after alerts are triggered. They succeed during a narrow window where users are actively interacting with malicious environments and unknowingly handing over valid credentials. This is where most security stacks lose visibility. For SMEs, it is where most account takeovers (ATO) actually happen.
Scammers Abuse Calendar Invites to Plant Phony Subscription Notices
Malwarebytes warns that a phishing campaign is using Google Calendar invites to send phony renewal notices for Malwarebytes subscriptions. The calendar invites contain a phone number that will connect the user with a scammer. “The amounts in these fake invites are large and attention-grabbing, usually several hundred dollars for multiple years of service,” Malwarebytes says.
Why fraud prevention must evolve in milliseconds, not hours or days
When it comes to fraud prevention, most of us know that small steps can make a big difference: use strong passwords and a password manager, turn on multifactor authentication, and so on. But for banks, fintechs and payment processors, those small steps are just the beginning.
See through document fraud with Document AI Enhanced Fraud Detection
On April 2, 1796, a full house packed the Drury Lane Theatre in London, eager to witness the first showing of a newly discovered Shakespeare play. The problem was that William Henry Ireland wrote the play, Vortigern, and the entire production was a hoax. Although there was some controversy before opening day, several experts reviewed the manuscript and supporting documents and confirmed that the play was a long-lost Shakespeare original.
Fraud Prevention 101: How Accounting Services Can Save Your Business
Running a company involves many moving parts. Keeping the finances safe is a full-time job for any owner. Thieves often look for weak spots in your books to take what you have built. Professional eyes help spot trouble before it grows into a crisis. You can keep your profits safe with the right systems in place. Modern tools make this task much easier for everyone involved in the daily operations.
Five worthy reads: Synthetic identities, the silent fraud epidemic scaling with AI
Five worthy reads is a regular column on five noteworthy items we’ve discovered while researching trending and timeless topics. This week, we learn more about synthetic identity fraud.
Post-Quantum, Deepfakes & Agile SASE: Cloudflare One's Biggest Week
In this episode of This Week in NET, host João Tomé is joined by Warnessa Weaver (Senior Product Manager) and Yumna Moazzam (Senior Product Marketing Manager) to break down Cloudflare’s SASE blog takeover week and what it means for enterprise security.
The Scattered Spider Playbook: Why Airline Loyalty Accounts Are Prime Targets for ATO
Scattered Spider–style attacks increasingly target airline loyalty accounts, where stolen credentials can be used to hijack frequent flyer accounts and redeem miles for fraud. Investigations associated with the Scattered Spider ecosystem show how attackers manipulate impersonation campaigns, phishing infrastructure, and account recovery workflows to gain control of customer accounts. For airline security teams, the lesson is not limited to one threat group.
WhatsApp Scam
POV: You get that “I found your photo” WhatsApp message. It’s a trap! Scammers are sneaky: they don’t want your password, they want to link your account to their device. WhatsApp will never ask you to link a device just to view a photo. Always be sure to check linked devices and verify before clicking to stay safe.
How Scammers Use Travel SIM Sales to Steal Identity Documents
Most organisations spend serious money on firewalls, endpoint protection, and threat monitoring. Yet one of the most commonly exploited attack surfaces gets far less attention: the APIs quietly running underneath almost every modern application. APIs are the connective tissue of today's digital infrastructure. They allow apps to talk to each other, enable third-party integrations, and power the real-time data exchanges that businesses depend on daily. They are also a favourite target for attackers who know that many organisations have not secured them properly.
Persona Launches Candidate Verification to Stop Hiring Fraud Before Day One
New solution brings workforce identity verification to the hiring stage, helping talent and security teams confirm who's really in the pipeline before access is ever granted.
What is Smishing in Cybersecurity and How to Prevent it?
Cybercriminals are increasingly using sophisticated techniques such as smishing to exploit mobile users. Smishing is a type of scam conducted through SMS (Short Message Service). Attackers use this method to get people to give up private information or click on harmful links. This fraudulent method exploits the speed and trust people place in text messages by pretending to be a trusted organization, such as a bank or the government.
Introducing Persona's candidate verification solution: Stop AI-powered candidate fraud before it reaches your workforce
Hiring has never been easy. But in the last year, it’s taken on an entirely new level of complexity. Fake candidates have become one of the most urgent problems facing HR, talent, and InfoSec teams alike. Today’s recruiters are flooded with AI-generated resumes that are nearly impossible to distinguish from legitimate candidates. When fake candidates make it to interviews, the tactics escalate with deepfakes used to impersonate people and proxy stand-ins for technical assessments.
How AI Phone Scams Work (And What to Do If You're Affected)
Phone scams are nothing new, but a recent report from National Trading Standards highlights a shift in how they work.
How to Detect Account Takeover Attempts in the First 5 Minutes
Most ATO detection tools are watching the wrong moment. Attackers don’t start at your login page – they start days earlier, registering lookalike domains, cloning your site, and harvesting credentials before your stack sees a single signal. Knowing how to detect account takeover means moving detection upstream: to the reconnaissance stage, the cloning event, and the live harvesting window. That’s where the attack is stoppable.
Effective Account Takeover Mitigation Playbook: Real-Time ATO Response Framework
Account takeover mitigation is the process of detecting, containing, and preventing unauthorized access to user accounts before financial or reputational damage occurs. Effective mitigation depends on real-time detection, rapid response, and automated playbooks. Modern account takeover attacks execute in minutes. Credentials are harvested in real time through phishing, reverse proxy phishing, and man-in-the-middle techniques. Attackers often attempt login seconds after a user submits credentials.
Fake Calendar Invitations Move to Microsoft Outlook
Fake calendar invites have been a problem on Gmail for years. Even though they could appear on other calendar services, I hadn’t seen or read about a lot of it. Gmail had been taking the brunt of the fake calendar invites. However, I got a scam Microsoft Outlook calendar invite recently, and other Outlook users are complaining more as well. So, what was previously happening mostly in Gmail has now moved over to Outlook, too. I am a busy guy.
How to avoid the fake buyers flooding Facebook Marketplace
Avoid fake buyers on Facebook Marketplace. Discover common scam tactics, warning signs, and expert tips to stay safe when selling online. You just sold a stack of old books for $100 on Facebook Marketplace. The buyer seemed eager, messaged instantly, and offered to pay extra. Sounds too good to be true? It probably is. Learn how to spot fake buyers before you lose both your money and your stuff. The buyer seems interested, perhaps too interested.
How LAPSUS$ Bypassed MFA and How to Prevent Similar Identity Attacks
LAPSUS$-linked breaches did not break multi-factor authentication (MFA) cryptographically. Attackers obtained valid authentication outcomes through techniques commonly described as MFA fatigue attacks or MFA bypass attacks, including push-prompt abuse, SIM swapping, social engineering, and session token replay. Understanding how these attacks succeed helps explain where modern identity defenses must evolve.
TurboTax SMS Scam
It is tax season in the United States and that means plenty of tax scams. I recently received these SMS messages. I am a TurboTax user, so hey, these might be legit, even though they look scammy. I first looked up the ttax.us domain using GoDaddy’s Whois service. The ttax.us domain is not valid. Fact is, scammers would not have sent out a scam message using a non-existent domain, so it probably means that it was taken down. Well, that’s good!
Defeating the deepfake: stopping laptop farms and insider threats
Trust is the most expensive vulnerability in modern security architecture. In recent years, the security industry has pivoted toward a zero trust model for networks — assuming breach and verifying every request. Yet when it comes to the people behind those requests, we often default back to implicit trust. We trust that the person on the Zoom call is who they say they are. We trust that the documents uploaded to an HR portal are genuine. That trust is now being weaponized at an unprecedented scale.