SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada

Business Email Compromise Stories

Global Stories

Business Email Compromise stories

Proofpoint launches AI security against trusted attacks
Cloud Security

Proofpoint launches AI security against trusted attacks

Targeted phishing and payment fraud are getting harder to spot as attackers mimic routine business workflows and trusted contacts.

By Mara Sugue • 4 min read • Today
Caller ID spoofing warning as phone security evolves
Unified Communications

Caller ID spoofing warning as phone security evolves

Businesses risk being misled into revealing information unless phone systems can verify caller identity across increasingly complex cloud-linked networks.

By Sofiah Nichole Salivio • 4 min read • Last week
Microsoft & Google use shared exchange to hit RedVDS
Phishing

Microsoft & Google use shared exchange to hit RedVDS

Criminal access to thousands of Microsoft accounts was cut off after the companies shared threat data through the Global Signal Exchange.

By Sean Mitchell • 4 min read • Last week
Eftsure buys Relish to expand payment assurance in US
Software-as-a-Service

Eftsure buys Relish to expand payment assurance in US

The deal gives finance teams a single platform to check supplier records and bank details as fraud risks rise across payment systems.

By Karen Joy Bacudo • 3 min read • This month
Cybersecurity chiefs warn of evolving insider threats
Network Security

Cybersecurity chiefs warn of evolving insider threats

Trusted employees and AI agents are now seen as prime insider risks, with deepfake fraud and hidden access gaps worsening the threat.

By Sofiah Nichole Salivio • 5 min read • This month
KnowBe4 launches Google Workspace email security Defend
Cloud Security

KnowBe4 launches Google Workspace email security Defend

For Google Workspace users, the new Defend release adds phishing detection, AI verdicts and employee coaching against business email compromise.

By Mark Tarre • 3 min read • This month

Stories from Other Regions

Business Email Compromise stories

eir business backs .IE Digital Trust Mark for SMEs
Digital Transformation

eir business backs .IE Digital Trust Mark for SMEs

Irish SMEs will get support to tackle weak website, email and domain settings as cyber risk erodes trust and productivity.

By Sean Mitchell • 4 min read • Today
New Zealand SMEs face rising cyber threats, study finds
Data Protection

New Zealand SMEs face rising cyber threats, study finds

Nearly three-quarters of medium-sized firms have faced a cyber threat in six months, as AI scams and weak staff training heighten risk.

By Sean Mitchell • 4 min read • Yesterday
PhishByte warns AI phishing has outpaced detection
Multi-factor authentication

PhishByte warns AI phishing has outpaced detection

Traditional email filters are failing as AI-crafted scams now look legitimate enough to fool staff and drive up fraud losses.

By Joseph Gabriel Lagonsin • 4 min read • Last week
AI shrinks exploit window to zero days, ESET warns
Malware

AI shrinks exploit window to zero days, ESET warns

Businesses have almost no time to patch flaws now, as ESET says the median gap between disclosure and exploitation fell to zero days in 2026.

By Sean Mitchell • 6 min read • Last week
ReliaQuest finds Microsoft 365 email control bypass
Network Security

ReliaQuest finds Microsoft 365 email control bypass

Phishing emails can still slip into Microsoft 365 mailboxes when attackers leave the SMTP envelope sender blank, ReliaQuest has found.

By Sofiah Nichole Salivio • 4 min read • Last week
ChatGPT search links New Zealanders to unsafe sites
Malware

ChatGPT search links New Zealanders to unsafe sites

New Zealand users risk fake login pages and scam sites after ChatGPT search results were found pointing to unsafe links and downloads.

By Sean Mitchell • 5 min read • Last week
Red Sift brings OnDMARC to Microsoft Sentinel Marketplace
Security Information and Event Management

Red Sift brings OnDMARC to Microsoft Sentinel Marketplace

Microsoft security teams can now ingest email authentication signals in one place, helping spot phishing and spoofing sooner during investigations.

By Sofiah Nichole Salivio • 4 min read • This month
Half of New Zealand agencies miss email security bar
Phishing

Half of New Zealand agencies miss email security bar

Spoofed emails could still reach public servants and citizens, as 50% of more than 200 New Zealand agencies have not met the DMARC standard.

By Sean Mitchell • 4 min read • This month
Proofpoint finds Southeast Asia firms lag on DMARC
Data Protection

Proofpoint finds Southeast Asia firms lag on DMARC

Most of Southeast Asia's biggest firms still leave customers exposed to spoofed emails, with only 17% enforcing the strictest DMARC setting.

By Sean Mitchell • 4 min read • This month
Phantom Deal: Inside an Imposter Scam Targeting an Avast Employee
Virtual Private Networks

Phantom Deal: Inside an Imposter Scam Targeting an Avast Employee

The fake acquisition pitch pushed an Avast employee towards a EUR €626,735.45 wire, exposing a broader impersonation scam across several industries.

By Luis Corrons • 8 min read • This month
PhishByte warns of rising BEC scams hitting Australian firms
Crypto

PhishByte warns of rising BEC scams hitting Australian firms

Australian firms are being urged to tighten payment checks as email impersonation scams drive AUD $166.8 million in losses.

By Karen Joy Bacudo • 4 min read • This month
AI gives criminals speed boost, but basic security failures persist
Ransomware

AI gives criminals speed boost, but basic security failures persist

Australian firms still face email compromise and poor security hygiene, even as AI helps criminals move faster and hide harder.

By David Shilovsky • 6 min read • Last month