While we discuss AI in the SOC, the attackers have been using it for a while. Phishing mails used to be easy to spot. Bad grammar, strange formatting, generic greetings. Not anymore. Language models write perfect, personal mails in any language, adapted to the recipient´s role and recent news about the company. The old awareness […]
Read Full Post »
Passkeys are one of the few security improvements that are both safer and, in many cases, easier for the user. Let me explain. A passkey is a credential based on public key cryptography, built on the FIDO standards. When you register a passkey with a service, your device creates a key pair. The private key […]
Read Full Post »
While most of us were on vacation this summer, a phishing campaign went through more than 130 organisations. The researchers who mapped it found close to ten thousand stolen accounts. The method was simple. Employees got a text message, supposedly from their IT department, saying their account needed attention. The link went to a convincing […]
Read Full Post »