SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada

Social Engineering Stories

Global Stories

Social Engineering stories

Australian MSPs face rising demand for AI security advice
Security Operations Centres

Australian MSPs face rising demand for AI security advice

Nearly six in 10 prospective customers are worried about AI-related threats, pushing Australian MSPs to explain cyber risk in plain language.

By Mara Sugue • 4 min read • 2 days ago
Cyber security now starts at the job interview
Phishing

Cyber security now starts at the job interview

Remote hiring is now a security risk, as AI lets applicants fake identity and skills before they ever get company access.

By Richard Ford • 5 min read • Last month
Acronis warns awareness gap leaves users open to hacks
Ransomware

Acronis warns awareness gap leaves users open to hacks

Basic cyber hygiene is still patchy, with 35% of people not backing up data regularly as phishing and AI-driven attacks keep rising.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Scams overtake phishing as attacks grow shorter-lived
Phishing

Scams overtake phishing as attacks grow shorter-lived

Scam detections nearly doubled to 6.4 million as criminals shifted to faster-moving fraud that can evade takedowns and hit consumers directly.

By Joseph Gabriel Lagonsin • 3 min read • Last month
Hotejka scam network uses free hosting to target users
Malware

Hotejka scam network uses free hosting to target users

Researchers say the scheme has run since 2017, exposing users to fake Microsoft alerts and remote access theft through legitimate hosting tools.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Workforce identity attacks hit 91% of firms, study says
Phishing

Workforce identity attacks hit 91% of firms, study says

Most organisations now face employee identity attacks, with phishing and stolen credentials pushing insider risk into boardroom-level concern, a survey finds.

By Mara Sugue • 4 min read • Last month
Address-Anchored Identity: Why Data Quality Is the Missing Link in eIDV
Risk & Compliance

Address-Anchored Identity: Why Data Quality Is the Missing Link in eIDV

Synthetic fraud is slipping past standard checks, prompting banks to use real-time address matching to tie identities to physical locations.

By Bud Walker • 4 min read • Last month
IRONSCALES names Laura Beaulieu Chief Marketing Officer
Phishing

IRONSCALES names Laura Beaulieu Chief Marketing Officer

The appointment comes as the email security company widens its pitch beyond phishing to account takeover and deepfake risks across workplace tools.

By Sofiah Nichole Salivio • 4 min read • Last month
Secure.com says ransomware budgets should fix basics first
Firewalls

Secure.com says ransomware budgets should fix basics first

Most attacks still start with weak credentials, unpatched systems or phishing, so the firm says budgets should shore up basics before AI fears.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Stories from Other Regions

Social Engineering stories

Why ASD's new authentication guidance demands a closer look at passkeys
Multi-factor authentication

Why ASD's new authentication guidance demands a closer look at passkeys

Phishing-resistant logins are now a baseline expectation, but Australian organisations still need to decide whether synced or hardware-bound passkeys fit the risk.

By Geoff Schomburgk • 5 min read • 2 days ago
Pressure drives workers to use unapproved AI tools
Phishing

Pressure drives workers to use unapproved AI tools

Most employed respondents said pressure to work faster had pushed them towards unapproved AI tools, raising risks in routine checks and payments.

By Shadda Lie Catugal • 4 min read • Last week
Pressure pushes US workers to skip AI & email checks
Email Security

Pressure pushes US workers to skip AI & email checks

Heavy workloads are prompting US workers to skip checks on emails and AI tools, with 71% spotting suspicious details only after acting.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Most firms hit by AI agent security incidents, report
Phishing

Most firms hit by AI agent security incidents, report

The findings suggest companies are exposing email and payment systems to software agents faster than they can secure them, widening phishing risk.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Finance workers share sensitive data with AI tools
Risk & Compliance

Finance workers share sensitive data with AI tools

More than four in 10 finance and insurance staff using AI at work have shared sensitive data without their employer’s knowledge, a survey found.

By Karen Joy Bacudo • 4 min read • Last week
Data theft overtakes encryption in cyber intrusions
Malware

Data theft overtakes encryption in cyber intrusions

Stolen information is now the main pressure point in cyber intrusions, with exfiltration appearing in 83 per cent of cases investigated in the third quarter.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Singapore office workers vulnerable to AI CEO scams
Email Security

Singapore office workers vulnerable to AI CEO scams

More than a third of Singapore office workers could not tell a real CEO message from an AI fake, leaving firms open to fraud.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Singapore senior managers most likely to trust deepfake CEO
Phishing

Singapore senior managers most likely to trust deepfake CEO

Many Singapore office workers still worry about questioning bosses, leaving firms exposed as 35% of senior managers said they would comply with a cloned CEO voice before checking.

By Sean Mitchell • 4 min read • Last month
Australia 11th in Microsoft cyber report as phishing rises
Malware

Australia 11th in Microsoft cyber report as phishing rises

Phishing now accounts for nearly a quarter of observed intrusions, while Australia slipped to 11th in Microsoft's latest global cyber rankings.

By Mara Sugue • 4 min read • Last month