Posts for: #Smb

Passkeys, FIDO Keys, and the Death of SMS MFA: What Small Businesses Should Actually Do Next

On January 9, 2024, the official U.S. Securities and Exchange Commission Twitter account announced that the SEC had approved Bitcoin ETFs. Bitcoin’s price spiked roughly 10 percent in minutes. The announcement was fake — attackers had SIM-swapped the phone number linked to the SEC’s account, intercepted the verification code, and posted on the SEC’s behalf. The actual approval came the next day. The SEC is not a small business. It has a legal team, a security team, and a public-facing communications infrastructure.
[Read more]

The Ransomware Playbook Has Been Rewritten: How AI Is Automating the Attack Chain

The Ransomware Playbook Has Been Rewritten: How AI Is Automating the Attack Chain Abstract Between 2024 and 2026, artificial intelligence transformed ransomware from a skilled-labor-intensive crime into an automated industrial operation. Threat actors now leverage large language models for reconnaissance and target profiling, generative AI for flawless spear-phishing and deepfake-enabled business email compromise, AI-orchestrated lateral movement that compresses breakout times to a median of 29 minutes, and emerging Ransomware-as-a-Service platforms that advertise AI-powered negotiation as a core product feature.
[Read more]