The Ultimate Guide to Phishing
A curated Canadian edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Phishing.
What to know about Phishing
Phishing, a pervasive form of cybercrime, continues to evolve in sophistication and scale, posing significant risks to individuals and organisations worldwide. This tag gathers extensive insights into phishing tactics, including traditional email scams, spear-phishing, SMS phishing (smishing), and emerging AI-assisted attacks that exploit human vulnerabilities and trusted brand impersonations.
Recent stories highlight the increasing frequency and complexity of phishing attacks, such as operations targeting specific sectors like finance, industrial engineering, and healthcare. Reports reveal how cybercriminal groups adapt by leveraging multi-factor authentication exploits, brandjacking, and sophisticated social engineering to compromise credentials and infiltrate networks.
Readers exploring this tag will gain valuable understanding of how phishing attacks are conducted, who the most vulnerable targets are—from individual contributors to C-suite executives—and what measures organisations and individuals can take to mitigate risks. The tag also delves into cybersecurity solutions, training programs, and industry collaborations designed to bolster phishing resistance, emphasizing the critical role of combining technology, awareness, and proactive defense to combat this ever-changing threat landscape.
Canadian Phishing News
Regional stories with direct local relevanceOne in three Canadians targeted by scam, survey finds
Banks and phone firms face pressure to do more, as 34 per cent of Canadians say they were targeted by a scam in the past year.
Richter launches Guardian for executives' cyber risk
Executives and wealthy families now have a gap-filling option as the firm adds human-led monitoring, phishing defence and incident response to its advisory work.
Five practical ways SMBs can strengthen cyber resilience in the age of AI
AI tools are exposing smaller firms to faster scams and data leaks, making basic controls and staff training vital to stay resilient.
Canadians fear deepfake fraud ahead of Real-Time Rail
Most Canadians want tighter fraud controls as the new Real-Time Rail could leave less time to block deepfake-driven scams and impersonation.
eSentire adds email & patch tools to Atlas AI platform
Email-borne attacks can now be tracked alongside endpoint and network threats as eSentire folds patching and response into Atlas AI Platform.
Canon Canada adds ESET cybersecurity to managed IT
Canadian businesses gain a single supplier for IT and endpoint security as Canon broadens its managed services with ESET products.
Analyst Insights
Research and market analysis connected to Phishing
Financial firms face rising AI cyber risk, survey says
Financial services breach risk rises as AI adoption surges
KnowBe4 wins Frost & Sullivan email security award
Phishing costs rise to USD $51,948 per analyst yearly
Gartner says 40% of governments will create TrustOps
Featured News
Expert Columns
SOCtoberfest Kickoff: The 7 Deadly Sins of Cybersecurity Meet CISA's Core Steps
Why AI-Written Phishing Is Outpacing the Native Filters Built to Stop It
Five practical ways SMBs can strengthen cyber resilience in the age of AI
The invisible trust layer: Why payments are becoming a systems problem
Why financial services now leads email deliverability
AI does not invent cyber risk, it accelerates it
Cyber hygiene 101: The big fundamentals
While OT security is maturing, risk is not slowing down
Why service desks are emerging as a critical security weakness
Stolen credentials don't have to mean a breach
Interviews
Interviews and video coverage from the networkRecent Phishing News
Secure.com says ransomware budgets should fix basics first
Most attacks still start with weak credentials, unpatched systems or phishing, so the firm says budgets should shore up basics before AI fears.
Ledger launches Atom security device for AI & crypto
It is aimed at people approving payments, identities and AI tasks on mobiles, with hardware controls designed to block spyware and mistakes.
Identity-led intrusions drive cyber extortion tactics
Attackers are exploiting trusted identities and collaboration tools to steal data and extort victims, leaving defenders with only brief windows to react.
Memcyco updates PoSA to spot attacker devices earlier
Fraud teams can now flag suspicious devices before login, as PoSA v1.11 adds real-time risk scores to help stop account takeovers earlier.
Check Point warns of 48% rise in cyber attacks worldwide
Sensitive data exposure through workplace AI is compounding a 48% annual rise in attacks, with organisations hit by 2,803 per week in September.
Dashlane expands SIEM integrations with browser telemetry
The move aims to close a browser visibility gap, giving security teams earlier warning of risky logins and phishing without another console.
China-linked TA419 targets US AI policy experts in phishing
Researchers say the phishing campaign could expose sensitive thinking on AI regulation, export controls and supply chains in Washington.
Rapid7 launches intelligence platform to outpace hackers
The new system aims to help security teams spot attacks sooner as AI-driven exploitation narrows the window between flaw disclosure and abuse.
Microsoft warns AI is deepening cyber threat links
Threats are now spanning identities, cloud and software supply chains, with AI speeding attacks and complicating defence, Microsoft says.
Retail AI leaks sensitive data to unauthorised users
Nearly one in 10 AI security alerts in retail involved systems exposing protected customer data to users without access, research found.
HP warns of AI lures & QR phishing targeting crypto
Fake AI trading tools and QR code lures are helping hackers steal crypto logins and dodge desktop security controls.
Tech Race Summit explores personalisation, AI and cybersecurity
AI and personalisation are reshaping Softswiss's product, engineering and security priorities as the group warns of higher cyber risk and tighter data demands.
Blackpoint adds identity threat tools to CompassOne
The update gives Microsoft 365, Google Workspace and Cisco Duo users faster containment and clearer evidence as identity attacks rise.
Proofpoint launches AI security against trusted attacks
Targeted phishing and payment fraud are getting harder to spot as attackers mimic routine business workflows and trusted contacts.
Two-thirds of US telecoms in elevated cyber risk band
Smaller operators are carrying much of the danger as a new study finds 66% of assessed US telecoms fall into an elevated risk band.
AI security incidents expose new criminal tradeoffs
Criminals are increasingly using AI for ransomware and credential theft, while flaws in test models are exposing production systems and data.
Whitepaper links water hacks to telecom cyber risk
With most operators exposed to basic flaws, the paper warns telecom networks could face the same low-effort intrusions seen in US water systems.
Microsoft & Google use shared exchange to hit RedVDS
Criminal access to thousands of Microsoft accounts was cut off after the companies shared threat data through the Global Signal Exchange.
IT pros say password sharing is top security lapse
User behaviour remains IT's biggest vulnerability, with 65% of professionals saying password sharing is the worst security lapse.
Check Point warns of rising cyber attacks & AI risk
Organisations faced 2,422 cyber attacks a week in August as ransomware and phishing intensified, while AI use created fresh data exposure risks.