Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Extortion Groups are Impersonating Help Desks to Gain Initial Access

Oct 13, 2026 By KnowBe4 Team In KnowBe4
Researchers at ReliaQuest have observed a surge in voice phishing (vishing) and Microsoft Teams phishing over the past several months, particularly from extortion groups like ShinyHunters. “Attackers overwhelmingly targeted users and their unmanaged devices to gain access to accounts,” the researchers write.
Read Post
Identifying Candidate Fraud in Remote Hiring: 10 Red Flags HR Teams Should Know

Identifying Candidate Fraud in Remote Hiring: 10 Red Flags HR Teams Should Know

Oct 13, 2026 By SecuritySenses In SecuritySenses
The rise of remote work and generative AI has triggered a sharp increase in sophisticated recruitment scams. HR teams now face a landscape where identifying candidate fraud is a complex challenge, as fraudsters use deepfakes and stolen identities to bypass traditional screening methods. Implementing robust recruitment and HR services is essential to mitigate these risks effectively.
Read Post
knowbe4

Warning: Attackers Are Tricking Employees Into Sharing Malicious Calendar Invites

Oct 7, 2026 By KnowBe4 Team In KnowBe4
Researchers at Fortra are tracking a new variant of calendar phishing in which threat actors trick employees into sharing meeting links internally. The attackers pose as prospective customers and contact non-sales employees, asking to be directed to a sales representative in order to discuss a business opportunity. The attacker then sends the employee a meeting link to forward to a sales contact. The attack takes place as follows.
Read Post
knowbe4

The Price of a Deal: How Scammers are Hijacking Amazon Prime Day

Oct 6, 2026 By KnowBe4 Threat Lab In KnowBe4
As millions of shoppers prepare their wishlists and await discounts for Amazon’s Prime Big Deal Days starting October 6, cybercriminals are gearing up for their own payday. In the weeks leading up to major shopping events, Amazon impersonation campaigns reach an annual peak.
Read Post

Why academic selfie fraud benchmarks fail in the real world

Oct 2, 2026 By Persona In Persona
Academic deepfake datasets rarely static: generate an image, label it real or fake, done. Real-world fraud doesn't hold still. Zhaofeng Si, a PhD student at University at Buffalo and research scientist intern at Persona, breaks down the gap. Public academic datasets are mostly typical face swaps and diffusion-model-generated images with a fixed label. In the real world, there's an attack-and-defense loop. Fraudsters actively probe for ways to bypass detection, so defenses have to keep adapting instead of training against a static benchmark.
View Video
memcyco

PoSA v1.11: Turning Fragmented Attack Signals Into Actionable Risk

Oct 1, 2026 By Arthur Zavalkovsky In Memcyco
With PoSA v1.11, we focused on a practical problem: detecting more attack activity does not necessarily help fraud and security teams make better decisions. PoSA already identifies activity across digital impersonation, credential theft, attacker devices and account access. The challenge is making the connections between that activity easier to understand, identifying which users and devices require attention, and making that intelligence available to the systems and teams responsible for responding.
Read Post
sophos

The Rising Threat of Deepfakes: Why Organizations Must Rethink Trust

Sep 23, 2026 By Jake Dorval In Sophos
For decades, we believed that if could hear someone’s voice on a phone call or see them on a video call, they were who they said they were. What if that’s no longer true? This article is part of an ongoing series from Sophos frontline security operations specialists, sharing the expertise they use to strengthen our industry-leading Managed Detection and Response (MDR) service and defend customers against evolving AI Era threats.
Read Post
memcyco

iGaming Fraud Prevention: How to Protect Player Accounts Preemptively Without Adding Friction

Sep 23, 2026 By Shay Kosto In Memcyco
iGaming fraud prevention does not have to mean applying more security checks broadly across the player journey. For player account takeover, the better objective is to obtain enough reliable risk context early enough to reserve additional checks for the accounts and access attempts that actually warrant them. The commercial stakes are growing alongside the market. U.S. iGaming revenue reached $10.73 billion in 2025, up 27.6% year over year, according to the American Gaming Association.
Read Post

Cash App Scams: How to Spot Them Before You Lose Your Money

Sep 21, 2026 By Avast In Avast
Cash App makes sending money instant — and that's exactly what scammers are counting on. Once a payment goes through, getting it back is nearly impossible. In this video, we break down the most common Cash App scams circulating right now: fake support agents, phishing texts and emails, payment reversal tricks, crypto investment fraud, and fake giveaways.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.