Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

memcyco

Brand Impersonation Protection: How to Detect, Disrupt, and Stop Impersonation Attacks

May 29, 2026 By Craig Currim In Memcyco
Brand impersonation protection helps enterprises detect, disrupt, and stop impersonation attacks where criminals imitate trusted brands, websites, apps, domains, ads, or digital journeys to deceive users and steal credentials, data, money, or access. The goal is not to stop every fake asset from ever appearing. That is not realistic.
Read Post
sumologic

How digital banking is redefining fraud prevention

May 28, 2026 By Tamara Bailey In Sumo Logic
The banking industry stands at a critical intersection of technology, security, and customer experience. As financial institutions navigate massive data volumes and increasingly sophisticated threats, they’re also trying to survive the digital transformation that’s made customer expectations higher than ever and trust more fragile than before.
Read Post
knowbe4

Free Gift Fallacy: How Attackers Harvest Credit Cards via Fake Surveys

May 27, 2026 By KnowBe4 Threat Lab In KnowBe4
The classic 'survey reward' scam is back and hitting harder than ever. KnowBe4 Threat Labs is tracking a massive, high-volume campaign that is not only impersonating a wide array of trusted global brands across retail, logistics, and healthcare, but is using hundreds of newly registered domains (NRDs) and sophisticated psychological priming to fly past traditional security defenses.
Read Post
persona

8 ways I use Graph to uncover fraud rings

May 27, 2026 By Ashley Fang In Persona
As a fraud analyst at Persona, I have to balance working on fraud escalations for specific customers and keeping an eye on cross-customer (and cross-industry and cross-region) fraud trends. The work naturally overlaps, as one escalation can turn into a trend as fraud rings move on to new targets. And, getting ahead of large trends helps us stop escalations. I have a lot of tools at my disposal, but I want to discuss Graph, Persona’s real-time link analysis product.
Read Post
inetco

Why Kuwait's WAMD penalty framework demands real-time payment visibility and in-flight fraud prevention

May 27, 2026 By Joe Kitos In INETCO
When Kuwait launched the WAMD real-time payment rail in 2024, the goal was clear: Enable banks and financial institutions to add speed, convenience and resilience to the country’s national payment infrastructure. Facilitated by the KNET Payment Gateway under the supervision of the Central Bank of Kuwait (CBK), the service has become such a key part of the country’s digital banking ecosystem that the CBK is making it crystal clear that real-time must also mean reliable.
Read Post
memcyco

Brand Impersonation Protection vs Domain Takedown: What Security Teams Actually Need

May 26, 2026 By Julian Agudelo In Memcyco
Brand impersonation protection is often evaluated by how quickly fake domains, cloned pages, scam ads, and impersonation assets can be removed. That metric matters, but it does not answer the more important security question: who was exposed while the asset was live, and what risk did that exposure create? Domain takedown reduces the life of an impersonation asset.
Read Post

The Nigerian Prince Scam Is Still Working - Here's How to Spot It

May 26, 2026 By Avast In Avast
Think the Nigerian Prince email scam is ancient history? Think again. Also known as the 419 scam, this classic con has evolved way beyond your inbox — showing up on social media, dating apps, and even phone calls. In this video, we break down exactly how the scam works: the emotional storytelling, the upfront fee trap, and why people — smart people — still fall for it. Spoiler: scammers are now using AI to make their messages more convincing than ever, without the telltale spelling mistakes you used to rely on.
View Video
inetco

CCI Welcomes INETCO to National Network of Innovators

May 25, 2026 By Joe Kitos In INETCO
Canada’s fintech and cybersecurity sectors continue to gain global recognition, and organizations like the Council of Canadian Innovators (CCI) play an important role in amplifying the companies shaping the country’s technology future. CCI represents many of Canada’s fastest-growing technology firms, advocating for policies and initiatives that strengthen innovation, economic growth and global competitiveness.
Read Post
memcyco

How to Prevent Credential Stuffing Attacks: Beyond MFA and Rate Limiting

May 22, 2026 By Ezra M. In Memcyco
Most organizations think MFA and rate limiting are enough to stop credential stuffing. They aren’t. Attackers have adapted, and the controls that worked five years ago are now routinely bypassed using residential proxy networks, low-and-slow automation, and real-time session token interception.
Read Post
knowbe4

Report: Romance Scams Cost UK Victims £102 Million Last Year

May 20, 2026 By KnowBe4 Team In KnowBe4
UK residents lost £102 million ($138 million US) to romance scams in 2025, according to a new report from the City of London Police. “Data shows 10,784 reports of romance fraud were made to Report Fraud last year - a 29 percent increase compared with 2024,” the report says. “Police believe this rise is partly driven by increased awareness and confidence in reporting, but it also highlights the ongoing scale and impact of a crime that often unfolds over weeks or months.
Read Post
inetco

INETCO surpasses 100 billion annual transactions as demand for payment fraud protection soars

May 20, 2026 By Joe Kitos In INETCO
Monitoring milestone highlights shift toward real-time transaction intelligence as financial institutions face escalating fraud and operational risk VANCOUVER, B.C. — May 21, 2026 — INETCO, a global leader in real-time payment fraud prevention, today announced the monitoring of more than 100 billion transactions per year, empowering financial institutions and payment service providers across more than 30 countries to outsmart fraudsters, stay compliant and keep every customer safe.
Read Post
memcyco

How to Calculate the ROI of Brand Protection Software: A Framework for Security Leaders

May 19, 2026 By Ezra M. In Memcyco
Security leaders know the threat is real. Getting finance to agree is a different problem. Brand protection ROI is calculable, but most teams never build the model, so the budget request dies in review. The core formula is straightforward: add avoided fraud losses, account takeover (ATO) remediation savings, churn prevention value, and analyst time recovered, then subtract software cost and edivide by that cost.
Read Post
What Is a Reverse Digital Footprint Audit? How to Track Scammers Using OSINT

What Is a Reverse Digital Footprint Audit? How to Track Scammers Using OSINT

May 19, 2026 By SecuritySenses In SecuritySenses
A reverse digital footprint audit is the systematic extraction of an entity's online breadcrumbs-emails, IP addresses, aliases, and exposed credentials-to expose the true identity behind a malicious campaign. It turns the attacker's operational security failures against them. You think cybercriminals are ghosts. They aren't. They buy servers. They register domains. They recycle passwords. They get lazy.
Read Post
knowbe4

FTC: Americans Lost $2.1 Billion to Social Media Scams Last Year

May 18, 2026 By KnowBe4 Team In KnowBe4
A new report from the US Federal Trade Commission (FTC) has found that Americans lost $2.1 billion in 2025 to scams that began on social media. Nearly 30% of people who reported losing money to a scam said it started on social media, far outpacing other modes of contact.
Read Post
securonix

Analyzing TAX#TRIDENT: Fake Indian Tax Lures Pivot Across ZIP, VBS, Stego and PHP-Wrapped VBS Delivery

May 18, 2026 By Shikha Sangwan, Akshay Gaikwad, Aaron Beardslee In Securonix
Securonix Threat Research tracks TAX#TRIDENT, an active fake Indian Income Tax-themed campaign that uses three delivery paths to reach Windows endpoints. The campaign starts with fake tax assessment lures and then moves victims toward ZIP files, VBScript downloaders, or PHP-looking web endpoints that actually return script content.
Read Post
The Best Platforms for Bot Management and Account Takeover Prevention in 2026

The Best Platforms for Bot Management and Account Takeover Prevention in 2026

May 18, 2026 By SecuritySenses In SecuritySenses
Online fraud is no longer a niche IT concern. Bots account for nearly half of all internet traffic, and account takeover attacks are costing businesses billions every year. Whether you're protecting a login page, an e-commerce checkout, or a marketing funnel, the platform you choose to defend your digital infrastructure matters enormously. This guide breaks down the top platforms across two categories: account takeover (ATO) prevention and bot management. Each list ranks solutions based on specialization, detection depth, and real-world effectiveness.
Read Post
memcyco

Regulation E and Digital Banking Fraud: What Financial Institutions Need to Know

May 15, 2026 By Ezra M. In Memcyco
Fake banking sites aren’t just a customer problem. CFPB guidance makes clear that when a fraudster obtains account access information through deception and uses it to initiate a covered EFT, the transfer may qualify as an unauthorized EFT under Regulation E. That means cloned login pages can create investigation obligations, provisional credit requirements, and reimbursement exposure for banks, even when the customer typed the password themselves.
Read Post
inetco

INETCO's Bijan Sanii on the threat every South African bank should be worried about

May 13, 2026 By Stacy Gorkoff In INETCO
Article by Luis Monzon originally published on MyBroadband, May 9, 2026. Anthropic’s AI model Mythos, part of its Claude software, represented a clear threat to banks and financial institutions in South Africa. This is according to Bijan Sanii, CEO of Canadian fraud detection provider INETCO. Anthropic, one of the world’s most important generative AI makers, positioned Mythos as an extremely capable AI model designed to identify vulnerabilities in critical software beyond human capabilities.
Read Post
memcyco

How to Reduce Time-to-Detect Fraud: Why Most Teams Are Already Too Late

May 8, 2026 By Ezra M. In Memcyco
ATO fraud cost US adults $15.6 billion in 2024, yet most fraud teams are still measuring detection time from the moment an alert fires, not from the moment an attacker starts building infrastructure. That gap is where the damage happens. To reduce time to detect fraud, teams need to move detection upstream, to Stage 1 and Stage 2 of the fraud lifecycle, before phishing sites go live and before a single credential is submitted. Faster transaction monitoring won’t close this gap.
Read Post
inetco

Are banks ready for AI-powered cyber threats?

May 7, 2026 By Joe Kitos In INETCO
A recent American Banker article, “Knock on wood: Are banks doing enough to cope with Mythos?” raises a timely and uncomfortable question about advanced AI models like Anthropic’s Claude Mythos. As highlighted in the article, INETCO CEO Bijan Sanii points out a critical truth: The conversation is being fueled by the emergence of AI technology capable of identifying software vulnerabilities at a speed and scale that was previously unimaginable.
Read Post
memcyco

How to Detect Account Takeover in Real-Time: Moving Beyond Login Alerts

May 6, 2026 By Ezra M. In Memcyco
Most enterprise fraud stacks are built to detect account takeover after it’s already succeeded. Login anomaly rules fire at authentication. Transaction models fire at monetization. By both points, the attacker is already inside. Knowing how to detect account takeover in real-time means shifting detection upstream – to behavioral signals, device trust, credential exposure feeds, and session integrity monitoring that activate before any fraudulent transaction is attempted.
Read Post
knowbe4

Attackers Continue to Pose as Help Desks in Social Engineering Attacks

May 6, 2026 By KnowBe4 Team In KnowBe4
Researchers at Google’s Threat Intelligence Group (GTIG) are tracking a new threat actor that’s impersonating help desks to trick users into installing malware. The threat actor, which GTIG tracks as “UNC6692,” begins by sending a large volume of spam emails to the victim, then initiates contact via Microsoft Teams to ostensibly help the user block the spam.
Read Post
memcyco

Preemptive Cybersecurity in Practice: Why Brand Impersonation Protection Can't Wait for the Takedown

May 6, 2026 By Ezra M. In Memcyco
Most brand impersonation protection programs are built around a process that starts after the damage is done. A fake site goes live. Customers land on it. Credentials get stolen. Then the takedown request goes in. That sequence isn’t a workflow problem. It’s an architectural one. Preemptive brand impersonation protection means intervening before credentials are entered, not after a cloned site is discovered.
Read Post
Payment Infrastructure Is Now Part of the Attack Surface

Payment Infrastructure Is Now Part of the Attack Surface

May 5, 2026 By SecuritySenses In SecuritySenses
Every payment creates a moment of trust. A customer enters card details, a gateway approves or rejects the transaction, fraud checks run in the background, and sensitive data moves between systems in seconds. When that process works, it feels invisible. When it fails, the damage can reach far beyond a lost sale.
Read Post
memcyco

How to Stop Digital Impersonation Attacks: Why Email Authentication Alone Isn't Enough

May 1, 2026 By Ezra M. In Memcyco
Phishing reports and customer complaints are not early warning signals. By the time they arrive, attackers have already built the infrastructure. Lookalike domains are live, credential harvesting pages are indexed, and the exposure window is open. To stop digital impersonation attacks, organizations need to shift detection to the infrastructure preparation stage, before distribution begins.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.