by Gene Reich | Oct 10, 2025 | Banking Security, Financial Services Security Best Practices, Trends
In the financial sector, trust has always been the currency behind every interaction. Clients expect not only that their money will be handled with care but also that their identities, accounts, and private conversations will be safeguarded. Yet within the everyday...
by Gene Reich | Sep 26, 2025 | Cybersecurity Threats, Identity Verification, MFA, Trends
Help desks remain one of the most common points of attack in cybersecurity. When someone calls in to request a password reset or access change, technicians often rely on phone calls or email confirmations to decide whether the request is legitimate. Attackers know...
by Gene Reich | Sep 15, 2025 | Ephemeral Messaging, Reader's Choice, Social Engineering, Traceless Cybersecurity, Trends
How Compliance Frameworks Took Center Stage Modern cybersecurity is framed not only around technology but also regulation. Beginning in the 1990s, governments and industries began codifying the rules of data protection. HIPAA was introduced in 1996, setting out...
by Gene Reich | Sep 8, 2025 | Cybersecurity Threats, Secure Communication, Trends
The Long Shadow of a 1970s Convenience In 1971, a computer engineer named Ray Tomlinson was working on ARPANET, the experimental network that would later evolve into the internet. As part of a small side project, he typed out a test message and sent it from one...
by Gene Reich | Sep 2, 2025 | Cybersecurity Threats, Pretexting, Secure Communication, Social Engineering, Trends
The rising cost of verification Every organization now runs a quiet economy of verification. Before a password is reset, a vendor changes banking details, or a finance approval is granted, someone must decide if the person on the other end is who they claim to be....
by Gene Reich | Aug 28, 2025 | Pretexting, Scattered Spider, Social Engineering, Trends
Since 2023, the threat group Scattered Spider has repeatedly persuaded help-desk staff across multiple organizations to reset credentials over the phone without verifying identity, bypassing multi-factor authentication (MFA) in several high-profile breaches. This was...
