Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

New Phishing Kit Uses AI to Fully Automate Vishing Attacks

A new phishing kit is using generative AI to fully automate voice phishing (vishing) attacks, according to researchers at Group-IB. The phishing platform, called “Balonx,” includes a module dubbed “CallFlow” that the researchers say “represents a fundamental evolution” in the phishing-as-a-service market.

How to Detect Shadow AI: 8 Key Steps

Security teams have spent years building visibility into unsanctioned SaaS apps, cloud services, and other forms of shadow IT. But shadow AI raises the bar. Discovering an unsanctioned AI app or autonomous agent is only the beginning. Teams also need to determine which identities it authenticates with, what credentials and permissions it relies on, what data it can access, which systems it integrates with, and what downstream actions it performs. The scale of the challenge is already becoming apparent.

How to Build a More Flexible and Connected AV Setup

A boardroom gets used for a client demo on Monday, a town hall on Wednesday, and a hybrid interview on Friday. It was built for one of those. It's now handling all three, badly. That mismatch is what flexible AV design fixes. Not by cramming in more gear, but by rethinking how the room, the network, and the equipment connect to each other in the first place.

How AML Software for Accountants Can Improve Client Due Diligence

If your firm is getting ready for Tranche 2, AML software for accountants can make that process far easier. It helps you manage AML compliance, speed up due diligence, and keep client due diligence consistent from the start. Instead of relying on spreadsheets and manual follow-ups, you can use one system to check, record, and review what matters.

The Screenshot Looked Better-But One AI Edit Changed the Evidence

A security analyst prepares a phishing report for publication. The original screenshot is accurate but messy: a personal email address is visible, the browser contains unrelated tabs, and a notification blocks part of the page. The analyst uses an image editor to clean it up. The result looks professional. Unfortunately, one character in the suspicious domain has also changed. Tools such as Nano Banana can edit existing images and generate new ones, but security communication introduces a requirement ordinary visual content may not have: some pixels represent facts. Improving the image cannot be allowed to rewrite them.

The Best Speech-to-Text APIs for Media Captioning and Broadcast Workflows

Media captioning and broadcast transcription put different pressure on speech-to-text APIs than general business use cases. Accuracy still matters, but so do low latency for live output, speaker handling, timestamp quality, multilingual support, and the ability to keep working when the audio includes overlapping speakers, background sound, remote contributors, or fast-paced unscripted dialogue.

Configuration Drift in the Age of AI: 2026 Telemetry Report

Reach analyzed a year of telemetry from more than 50 production environments. The average organization generated 13 configuration drift alerts per day. 12 of them traced to a genuine, risk-prioritized exposure. A 92% signal rate on a category of alert most teams treat as background noise. The full report is out now. Security Intent vs. Security Reality: Configuration Drift in the Age of AI.

5 AI Prompts Every MSP Should Know | WatchGuard Webinar

AI should do more than generate answers. It should help MSPs make better decisions. Many MSPs are experimenting with AI, but isolated tools and generic prompts often create more noise than value. Without the right questions, workflows, and operational foundation, AI can become another disconnected technology to manage rather than a meaningful driver of security and growth. This webinar explores five practical AI prompts every MSP should know, and how to apply them across security, service delivery, operations, and business strategy.