On September 17, the FBI’s Internet Crime Complaint Center, the federal office that collects reports of online fraud, warned that the police impersonation scam and related schemes using the names of government officials had drawn nearly 61,000 complaints between January 2025 and July 2026. Reported losses topped $1.6 billion, and the true figure is almost […]
Cyber Security Weekly Roundup: Week of September 28 to October 4, 2026
1. Fortinet Warns of Critical FortiMail Zero-Day Under Active Attack Fortinet disclosed CVE-2026-104286, a critical path traversal flaw in FortiMail that lets an unauthenticated attacker write arbitrary files to a vulnerable system. The company confirmed the bug is already being exploited in the wild, which puts it squarely in the “patch now” category for any […]
Cyber Insurance Now Costs More, Covers Less, and Fights Harder Over Claims
Cyber insurance costs have risen over the past decade. Applications have tightened, and what insurers will pay has narrowed. As a result, the coverage an organization expects may differ from what it receives after an attack. During a recent review of a large organization’s cyber insurance, our team found a policy that covered only the […]
Cyber Security Weekly Roundup: Week of September 21 to 27, 2026
1. Extortion Group Claims It Stole Personnel Records on Every FBI Employee The hacking group ShinyHunters says it used a zero-day vulnerability in Oracle PeopleSoft to reach FBI-linked systems, then pivoted into connected AWS infrastructure to pull an estimated two to three terabytes of data. The group claims the haul includes names, home addresses, phone […]
Cyber Security Training for a Small Office: A 1-Year Plan
Most breaches start with a person. A year of cyber security training for a small office, including part-time staff, takes under five hours per employee. Sixty-two percent of the breaches Verizon examined for its 2026 Data Breach Investigations Report involved the human element. That means a clicked link, a reused password, a file sent to […]