Business email compromise is getting harder to spot because criminals are getting better at telling a believable story. Microsoft recently documented a large campaign that sent more than one million phishing emails over just a few days. The messages impersonated executives, vendors, and routine business processes, often leading victims toward ACH payment requests approaching $50,000.Continue reading “Your Boss Approved This Invoice. Or Did They? AI Is Changing Business Email Fraud”
Category Archives: Cybersecurity
Microsoft Is Moving to Passkeys. Attackers Are Already Exploiting the Confusion
Microsoft is moving to passkeys, and small Texas businesses need to prepare employees for changing sign-in procedures. However, a convincing request to “update your security” deserves verification before anyone follows instructions. On September 9, 2026, Microsoft reported attacks using fake passkey, MFA, and single-sign-on updates as bait. Impersonators contacted employees as supposed IT staff, includingContinue reading “Microsoft Is Moving to Passkeys. Attackers Are Already Exploiting the Confusion”
That CAPTCHA Could Be Malware: How ClickFix Tricks Employees Into Infecting Their Own Computers
ClickFix malware turns one of the internet’s most familiar security checks into a trap. Instead of simply asking you to prove that you are human, a fake CAPTCHA may instruct you to open Windows Run, PowerShell, Windows Terminal, or the macOS Terminal and paste a command. If you follow those instructions, you may actually installContinue reading “That CAPTCHA Could Be Malware: How ClickFix Tricks Employees Into Infecting Their Own Computers”