When an Employee Clicks a Phishing Link, the Failure Started Higher Up In August 2022, the City of Lexington discovered that criminals had intercepted its email with the Community Action Council. They used that access to steer about $4 million in federal rent assistance and housing funds into their own bank accounts through three wire […]
Police Impersonation Scam: How to Spot a Fake Officer
On September 17, the FBI’s Internet Crime Complaint Center, the federal office that collects reports of online fraud, warned that the police impersonation scam and related schemes using the names of government officials had drawn nearly 61,000 complaints between January 2025 and July 2026. Reported losses topped $1.6 billion, and the true figure is almost […]
Cyber Insurance Now Costs More, Covers Less, and Fights Harder Over Claims
Cyber insurance costs have risen over the past decade. Applications have tightened, and what insurers will pay has narrowed. As a result, the coverage an organization expects may differ from what it receives after an attack. During a recent review of a large organization’s cyber insurance, our team found a policy that covered only the […]
Cyber Security Training for a Small Office: A 1-Year Plan
Most breaches start with a person. A year of cyber security training for a small office, including part-time staff, takes under five hours per employee. Sixty-two percent of the breaches Verizon examined for its 2026 Data Breach Investigations Report involved the human element. That means a clicked link, a reused password, a file sent to […]
Why Software Updates Are the Cheapest Security You Have
On May 12, 2017, ransomware called WannaCry moved through the British National Health Service and forced hospitals to turn patients away, canceling roughly 19,000 appointments and operations in the days that followed. The flaw it traveled through was neither secret nor new. Microsoft had published the fix on March 14 of that year, 59 days […]
Five Old Scams That Technology Brought Back
When it comes to scams, everything that’s old is new again. Last week I wrote about a package nobody ordered. The scheme behind it, brushing, is years old, and on its own it was never much more than review fraud. What made it worth a column was the card tucked in the box with a […]