Think BEC attacks come from custom-built malicious domains?
Last month, 62% came from free webmail providers. The same ones in your inbox right now.
JT Newby breaks down the latest BEC findings from our FIRE team 👇
A risk appetite of zero makes security worse.
Chase total prevention and you starve detection, response, and recovery. Myriam Abiaad, BISO at Sky, on why good enough has to be the goal:
→ https://t.co/0XB6fL6Pzu
Fortra is hiring in Colombia, and we're just getting started. Whether you defend systems, break into them on purpose, or keep the whole operation running, there's a spot here for you.
https://t.co/3KA4cbn0ju
Americans lost $3.5 billion to imposter scams in 2025. The FTC recovered $70 million of it.
Graham Cluley on the FTC data, the nearly 3× increase from 2020, and the attack types driving the losses:→ https://t.co/fIXGCz6Hva
Pulling the phishing email doesn't neutralize this one.
Health-ISAC threat bulletin on CalPhishing in the health sector, crediting our FIRE team:
→ https://t.co/MEolr3GGYO
A product session at 1,000+ metres. Peter Pendelin and Michael Leitner walked partners through Fortra's cybersecurity portfolio at sysob IT-Distribution's #sysobGipfeltreffen on the Kaitersberg. Thanks for having us.
IBM puts the average data breach cost at $3.92M. Most of them start with everyday workflows, not sophisticated attacks.
Fortra's safe data sharing guide covers what a layered data security approach actually looks like in practice.
→ https://t.co/XfZ8LDulKg
FIRE on Microsoft 365 Groups phishing: how attackers use the group mailbox, shared files, and Outlook calendar to stage a persistent, multi-surface delivery path, and why purging the email leaves the threat in place: https://t.co/ZIvvSH3hUJ
Data protection is now part of the defence procurement conversation, not a side track.
Fortra was at Eurosatory 2026 in Paris through Friday, talking information resilience and trusted data with defence and government stakeholders.
Ransomware is 35 years old. The first ransom demand was $189, sent to a http://P.O. Box.
The logic is the same. Everything else has changed.
Fortra's Cary Hudgins on what end-to-end ransomware defense actually looks like in 2026:
→ https://t.co/DkHrIYgM1r
Security is a cycle of testing, fixing, and starting over. Organisations that treat it as a point-in-time exercise quickly fall behind.
Fortra's Pablo Zurro in @IT_SecGuru on whether offensive security is keeping up with modern attackers.
→ https://t.co/5IeKPRtml7
AI adoption and data security don't have to be a tradeoff.
Fortra's Tony Kelly makes the case on SC Media's Business Security Weekly.
→ https://t.co/7oZSIZ9B8H
206 CVEs. Record Patch Tuesday. AI accelerating vulnerability discovery.
Fortra's Tyler Reguly in Dark Reading cuts through the noise: only 3 were publicly disclosed, none exploited at release, and KEV averages haven't moved dramatically.
→ https://t.co/vJd0MpCi4J
Security analysts don't have time to chase alerts that lead nowhere.
Fortra DLP + ARC filters the noise, guides investigation, and lets you remediate in real time — from any screen.
👉 https://t.co/7mzqp5OvAf
New from Fortra: DLP inspects what's being sent to generative AI applications. Brand protection reactivation detection runs 25% faster. Q2 also brought new red team tooling, three new email AI/ML models, DSPM for hybrid file shares, and more.
https://t.co/DO92gr8hma
Silent Ransom Group doesn't use malware, exploits, or zero-days.
Just a phone call from "IT support," a screen-sharing request, and a legitimate remote access tool, and they're walking out with your data.
How it works, according to Graham Cluley: https://t.co/Bt1TWrYmV3
Zero Trust has a branding problem, not a security one.
Fortra's Mieng Lim cuts through the oversell in @Info_Sec_Buzz — and makes the case for what a realistic Zero Trust approach actually looks like.
→ https://t.co/WSNyCqSzx5
Compromise a misconfigured agent credential and you inherit everything it was authorized to do.
Fortra's Josh Taylor in https://t.co/5syrncoHU6 on why agentic AI is turning NHI sprawl into an ungovernable attack surface.
→ https://t.co/9OM5HS9JNz
A "quote request" walks into a bank's inbox.
Inside: a .bat file running a 3-layer encrypted payload, injecting into Windows Explorer entirely in memory.
How Phantom Stealer Malware works 👇
https://t.co/JD8gjrFLg8
Tomorrow, Skip Chapman, Lansing Nye-Madden, and Coalfire's Marc Zurcher walk through a step-by-step path from CUI identification to audit-ready CMMC Level 2 evidence. One hour, practical approach, no rework required.
Register today https://t.co/72ZholSl9Q