Blog, Threat Intelligence

By harryth_xitx
July 20, 2026

Business Email Compromise Losses: What FBI IC3 Data Reveals About Small Business Targets

Business Email Compromise Losses: What FBI IC3 Data Reveals About Small Business Targets Business email compromise losses surpassed $2.9 billion in reported damages in 2023, and the FBI's Internet Crime Complaint Center (IC3) data...

Blog, Threat Intelligence

By harryth_xitx
July 19, 2026

OAuth Application Abuse: How Attackers Stay Inside Microsoft 365 and Google Workspace After You Change Your Password

OAuth Application Abuse: How Attackers Stay Inside Microsoft 365 and Google Workspace After You Change Your Password OAuth application abuse has become one of the most effective - and underreported - ways attackers maintain...

Blog, Threat Intelligence

By harryth_xitx
July 17, 2026

Fake Software Update Attacks: Why Small Businesses Are Absorbing the Damage in 2024 – 2025

Fake Software Update Attacks: Why Small Businesses Are Absorbing the Damage in 2024–2025 A browser pop-up that says "Your Chrome browser is out of date — update now" does not feel like a threat....

Blog, Threat Intelligence

By harryth_xitx
July 16, 2026

Ransomware Dwell Time: Attackers Spend Weeks Inside Your Network Before You See a Ransom Note

Ransomware Dwell Time: Attackers Spend Weeks Inside Your Network Before You See a Ransom Note Most business owners picture ransomware as a sudden strike: screens go dark, files lock, operations stop. That picture is...

Blog, Threat Intelligence

By harryth_xitx
July 16, 2026

Cloud Misconfiguration: How Exposed S3 Buckets and File Shares Are Quietly Draining SMB Data

Cloud Misconfiguration: How Exposed S3 Buckets and File Shares Are Quietly Draining SMB Data Cloud misconfiguration has become one of the most consequential — and least-reported — attack surfaces hitting small and mid-sized businesses...

Blog, Threat Intelligence

By harryth_xitx
July 6, 2026

Session Token Theft: How Attackers Are Walking Past MFA in 2025

Session Token Theft: How Attackers Are Walking Past MFA in 2025 Session token theft has become the dominant account takeover technique hitting small and mid-sized businesses in 2024 and 2025 — and most of...

Blog, Threat Intelligence

By harryth_xitx
July 3, 2026

Your Inbox Is Being Used Against Your Clients: What 2024 – 2025 BEC Incident Data Reveals

Business Email Compromise: What 2024–2025 BEC Incident Data Reveals About Your Inbox Business email compromise is usually framed as a financial crime — wire fraud, invoice manipulation, CEO impersonation. That framing is accurate but...

Blog, Threat Intelligence

By harryth_xitx
July 3, 2026

IT Helpdesk Impersonation: How a 10-Minute Phone Call Is Handing Hackers the Keys to Small Business Networks

IT Helpdesk Impersonation: How a 10-Minute Phone Call Is Handing Hackers the Keys to Small Business Networks IT helpdesk impersonation is now one of the most efficient initial access methods targeting small and mid-sized...

Blog, Threat Intelligence

By harryth_xitx
June 30, 2026

Inbox Rule Manipulation: How Attackers Quietly Drain Microsoft 365 Accounts Weeks Before You Know You’ve Been Hit

Inbox Rule Manipulation: How Attackers Quietly Drain Microsoft 365 Accounts Weeks Before You Know You've Been Hit Most small business owners never see this attack coming — and most IT firms aren't actively watching...

Blog, Threat Intelligence

By harryth_xitx
June 29, 2026

AI-Generated Phishing: Why the Warning Signs Employees Were Trained to Spot Have Disappeared

AI-Generated Phishing: Why the Warning Signs Employees Were Trained to Spot Have Disappeared AI-generated phishing has quietly dismantled a decade of security awareness training. The grammar mistakes, the odd phrasing, the sender name that...