SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada

Business Email Compromise Stories

Global Stories

Business Email Compromise stories

Microsoft & Google use shared exchange to hit RedVDS
Phishing

Microsoft & Google use shared exchange to hit RedVDS

Criminal access to thousands of Microsoft accounts was cut off after the companies shared threat data through the Global Signal Exchange.

By Sean Mitchell • 4 min read • Last week
Eftsure buys Relish to expand payment assurance in US
Software-as-a-Service

Eftsure buys Relish to expand payment assurance in US

The deal gives finance teams a single platform to check supplier records and bank details as fraud risks rise across payment systems.

By Karen Joy Bacudo • 3 min read • This month
Cybersecurity chiefs warn of evolving insider threats
Network Security

Cybersecurity chiefs warn of evolving insider threats

Trusted employees and AI agents are now seen as prime insider risks, with deepfake fraud and hidden access gaps worsening the threat.

By Sofiah Nichole Salivio • 5 min read • This month
KnowBe4 launches Google Workspace email security Defend
Cloud Security

KnowBe4 launches Google Workspace email security Defend

For Google Workspace users, the new Defend release adds phishing detection, AI verdicts and employee coaching against business email compromise.

By Mark Tarre • 3 min read • This month
Abnormal AI adds email controls & phishing training
Data Protection

Abnormal AI adds email controls & phishing training

Businesses face broader email risk as Abnormal adds outbound data-loss controls and adaptive phishing training to its security platform.

By Joseph Gabriel Lagonsin • 4 min read • Last month
TA4922 uses PackClient malware in tax phishing attacks
Phishing

TA4922 uses PackClient malware in tax phishing attacks

Proofpoint said the modular trojan can steal data and monitor users, raising risks for finance teams targeted by fake tax notices.

By Sean Mitchell • 4 min read • Last month

Stories from Other Regions

Business Email Compromise stories

New Zealand SMEs face rising cyber threats, study finds
Data Protection

New Zealand SMEs face rising cyber threats, study finds

Nearly three-quarters of medium-sized firms have faced a cyber threat in six months, as AI scams and weak staff training heighten risk.

By Sean Mitchell • 4 min read • Today
PhishByte warns AI phishing has outpaced detection
Multi-factor authentication

PhishByte warns AI phishing has outpaced detection

Traditional email filters are failing as AI-crafted scams now look legitimate enough to fool staff and drive up fraud losses.

By Joseph Gabriel Lagonsin • 4 min read • Last week
AI shrinks exploit window to zero days, ESET warns
Malware

AI shrinks exploit window to zero days, ESET warns

Businesses have almost no time to patch flaws now, as ESET says the median gap between disclosure and exploitation fell to zero days in 2026.

By Sean Mitchell • 6 min read • Last week
ReliaQuest finds Microsoft 365 email control bypass
Network Security

ReliaQuest finds Microsoft 365 email control bypass

Phishing emails can still slip into Microsoft 365 mailboxes when attackers leave the SMTP envelope sender blank, ReliaQuest has found.

By Sofiah Nichole Salivio • 4 min read • Last week
ChatGPT search links New Zealanders to unsafe sites
Malware

ChatGPT search links New Zealanders to unsafe sites

New Zealand users risk fake login pages and scam sites after ChatGPT search results were found pointing to unsafe links and downloads.

By Sean Mitchell • 5 min read • Last week
Red Sift brings OnDMARC to Microsoft Sentinel Marketplace
Security Information and Event Management

Red Sift brings OnDMARC to Microsoft Sentinel Marketplace

Microsoft security teams can now ingest email authentication signals in one place, helping spot phishing and spoofing sooner during investigations.

By Sofiah Nichole Salivio • 4 min read • This month
Half of New Zealand agencies miss email security bar
Phishing

Half of New Zealand agencies miss email security bar

Spoofed emails could still reach public servants and citizens, as 50% of more than 200 New Zealand agencies have not met the DMARC standard.

By Sean Mitchell • 4 min read • This month
Proofpoint finds Southeast Asia firms lag on DMARC
Data Protection

Proofpoint finds Southeast Asia firms lag on DMARC

Most of Southeast Asia's biggest firms still leave customers exposed to spoofed emails, with only 17% enforcing the strictest DMARC setting.

By Sean Mitchell • 4 min read • This month
Phantom Deal: Inside an Imposter Scam Targeting an Avast Employee
Virtual Private Networks

Phantom Deal: Inside an Imposter Scam Targeting an Avast Employee

The fake acquisition pitch pushed an Avast employee towards a EUR €626,735.45 wire, exposing a broader impersonation scam across several industries.

By Luis Corrons • 8 min read • This month
PhishByte warns of rising BEC scams hitting Australian firms
Crypto

PhishByte warns of rising BEC scams hitting Australian firms

Australian firms are being urged to tighten payment checks as email impersonation scams drive AUD $166.8 million in losses.

By Karen Joy Bacudo • 4 min read • This month
AI gives criminals speed boost, but basic security failures persist
Ransomware

AI gives criminals speed boost, but basic security failures persist

Australian firms still face email compromise and poor security hygiene, even as AI helps criminals move faster and hide harder.

By David Shilovsky • 6 min read • Last month
AI fraud fears rise as payment scams hit finance teams
Digital Transformation

AI fraud fears rise as payment scams hit finance teams

Finance teams are losing money to payment scams as generative AI makes fake invoices, emails and voice requests harder to spot.

By Joseph Gabriel Lagonsin • 3 min read • Last month