Enterprise Security Tech

An unusual PayPal scam is highlighting how attackers increasingly rely on trusted platforms rather than obvious forgeries to slip past both technical defenses and human suspicion. Over the past several weeks, security researchers and users have observed phishing campaigns that exploit PayPal’s own subscription and notification systems to deliver emails that look entirely legitimate. The messages arrive from PayPal’s real infrastructure, use authentic templates, and land dire

Every December, the internet dresses itself up for the holidays. Social feeds fill with lights and nostalgia, inboxes clog with end of year reminders, and millions of people quietly reset their passwords. According to a new analysis of breached credentials, that seasonal spirit is leaking straight into login security in ways attackers already understand all too well. Security researchers at Specops Software examined roughly 800 million compromised passwords and found that ho

The cybersecurity workforce has spent the past two years bracing for economic turbulence. Layoffs, spending freezes and shrinking budgets hit teams that historically believed they were insulated from broader corporate cutbacks. According to new global research from ISC2 , those financial pressures have begun to stabilize, but the aftershocks are reshaping the field in a more profound way. Leaders are no longer most worried about having too few people. They are worried about h

If you want to understand why cyberattacks keep landing harder and faster, look beyond attacker TTPs and into the boardroom. A new study from VikingCloud reveals a widening psychological fault line inside organizations — one that’s quietly eroding resilience from within. Nine in ten frontline cybersecurity managers say attacks are hitting more frequently, and 88% say those attacks have grown more severe in the past year. Yet in the corner office, that urgency drops to 77% an

Ransomware crews didn’t wait for Black Friday to get busy. New data from NCC Group shows global attacks spiked 41% in October, surging to 594 incidents — an abrupt jump that signals cybercriminals are already gearing up for the year’s most profitable stretch. October traditionally marks the beginning of ransomware’s “golden quarter,” when the mix of holiday shopping, frantic IT teams, and supply-chain pressure creates an unusually rich attack surface. This year’s early wave

Security operations centers are cracking under pressure. According to new research from the Enterprise Strategy Group (now part of Omdia) commissioned by Vectra AI , defenders are contending with an unprecedented wave of threats — in both scale and sophistication — as attackers increasingly harness AI to automate reconnaissance, mimic legitimate traffic, and blend into the digital noise. The report, The Role of Network Visibility in Protecting Modern Environments , paints a c