social engineering

OSINT is the practice of turning public information into security insight. Here is how attackers and testers use it, what it reveals about your business and how to shrink your …

The latest North Korean IT worker case needed no exploit, only a convincing interview. Why hiring is now part of your security perimeter.

Reuters reports a suspected ShinyHunters member known as Rey was detained in Jordan and is helping the FBI. Here is what is confirmed, what is not, and what UK organisations …

What social engineering penetration testing reveals about the untested assumptions behind your security, how it works, what it costs, and whether it’s legal in the UK.

Attackers used a Custom GPT on OpenAI’s own domain to push a fake ChatGPT and a ClickFix lure. Here is how the chain worked and what to check.

Phishing simulation testing shows exactly who clicks and who reports, but NCSC and UK GDPR both set limits on how to run it fairly. Here is how the process works.

Business email compromise costs businesses billions a year without a single virus or hacked network. Here’s how BEC scams work, the main types, and the defences that actually stop them.

WilmerHale paid at least $18 million and Goodwin Procter around $10 million to the Luna Moth extortion group, which broke in using phone calls and fake IT visits rather than …

Russian intelligence services exploited Signal’s linked device feature and fake support texts to access thousands of accounts. Here is the exact technique and what to change in your settings today.

Russian intelligence is stealing Signal backup recovery keys to read encrypted message histories, without breaking the encryption. Here’s what that means for how UK businesses use secure messaging.