social engineering

Business email compromise tricks staff into paying the wrong account. Learn how the fraud works, the warning signs, and the checks that stop it.

What security awareness training should cover, how often to run it, how to measure it, and why it works best alongside testing.

OSINT is the practice of turning public information into security insight. Here is how attackers and testers use it, what it reveals about your business and how to shrink your …

The latest North Korean IT worker case needed no exploit, only a convincing interview. Why hiring is now part of your security perimeter.

Reuters reports a suspected ShinyHunters member known as Rey was detained in Jordan and is helping the FBI. Here is what is confirmed, what is not, and what UK organisations …

What social engineering penetration testing reveals about the untested assumptions behind your security, how it works, what it costs, and whether it’s legal in the UK.

Attackers used a Custom GPT on OpenAI’s own domain to push a fake ChatGPT and a ClickFix lure. Here is how the chain worked and what to check.

Phishing simulation testing shows exactly who clicks and who reports, but NCSC and UK GDPR both set limits on how to run it fairly. Here is how the process works.

Business email compromise costs businesses billions a year without a single virus or hacked network. Here’s how BEC scams work, the main types, and the defences that actually stop them.

WilmerHale paid at least $18 million and Goodwin Procter around $10 million to the Luna Moth extortion group, which broke in using phone calls and fake IT visits rather than …