Author: David Botero
-
Business email compromise (BEC) is fraud carried out through email or messaging: an attacker impersonates an executive, supplier, or employee to trick someone into sending money or sensitive data. Why it’s so costly The FBI’s Internet Crime Complaint Center recorded about US$2.77 billion in reported BEC losses in 2024, among the largest of any cybercrime…
-
Compiled on October 24, 2026 from the sources listed at the end. Items marked “reported” or “rumored” come from a single outlet or are unconfirmed. Details may change. The week in one paragraph EA’s decision to close BioWare and cancel the next Mass Effect was the industry shock of the week. Call of Duty: Modern…
-
Compiled on October 24, 2026 from the sources listed at the end. Items marked “reported” or “claimed” come from a single outlet or from attacker claims. Details may change. The week in one paragraph Two critical flaws in PHP, nicknamed PHP2Shell, dominated the week. They forced some Canadian government and Quebec websites offline as a…
-
Compiled on October 23–24, 2026 from the sources listed at the end. Fast-moving stories can change. Items marked “reported” or “claimed” come from a single outlet or from attacker claims and are not independently confirmed. Top story: PHP2Shell, day three. More attacks, a new flaw, and a patching gap Attacks are growing, but widespread compromise…
-
A call from your CEO asks for an urgent payment. The voice sounds right. It may not be them. How the attacks work – Voice cloning: attackers copy a person’s voice from public recordings such as videos, interviews, or voicemail, then phone an employee – Deepfake video calls: fake participants appear to be executives on…
-
Instead of attacking thousands of companies one by one, attackers compromise something thousands of companies trust: a software package, an update, or a service provider. How it works – Software packages: attackers hijack a maintainer’s account or build process and publish a malicious version of a popular library – Developer tools and extensions: compromised plugins,…
-
Ransomware remains one of the costliest threats to business, and the pattern is changing. The numbers – Volume is up. One tracker counted about 5,257 ransomware incidents in the first half of 2026, around 20% more than in the first half of 2025. The second quarter was slightly below the first, but activity remained elevated.…
-
Headlines focus on the biggest names. The useful part is what the incidents have in common. Details of many incidents are based on company statements, attacker claims, and press reports, and can change as investigations continue. Incidents widely reported in 2026 Security-industry reviews of the year so far point to incidents involving organizations such as…
-
Generative AI tools draft text, summarize documents, and write code. They also introduce risks that every business should understand. Risk 1: Data leakage Employees paste confidential information into public AI tools. Depending on the service and plan, that data may be stored, reviewed, or used in ways you didn’t intend. – Reduce it: approve business-grade…
-
On June 4, 2026, Prime Minister Mark Carney announced Canada’s National Artificial Intelligence Strategy, AI for All. The following day, Minister of Artificial Intelligence and Digital Innovation Evan Solomon highlighted it at an event in Montréal. What the government says it will do – Make security and safety central to AI development and use, by…