Security
Passkeys beat phishing, but you still need a recovery plan
For small businesses, a synced passkey is generally the better default than a strong password plus a code or push MFA when phishing is the main concern. The…
Tag: phishing
Scams & Fraud
Scammers use small business names to send fake PayPal invoices
Scammers are using legitimate small business names to make fake PayPal invoices look convincing, leaving the business to deal with confused customers and reputational damage, according to Bitdefender.
Security
Kaspersky survey finds 86 percent of small and medium-sized businesses hit by cyber incidents last year
An overwhelming 86 percent of small and medium-sized businesses experienced at least one cyber incident in the past year, according to a new global survey by Kaspersky published…
Security
Why standard text and app codes no Longer protect your business accounts
Standard two-step verification like text messages or app push notifications no longer stops sophisticated phishing attacks that steal active login sessions, according to security researchers and identity providers.…
Scams & Fraud
Winona warns businesses about fake Planning Commission invoices
Scammers in Winona, Minnesota, are sending fake invoices to local businesses, demanding immediate wire transfers, according to KTTC. The emails impersonate the City of Winona Planning Commission to…
Scams & Fraud
Hackers use invisible text to sneak fake loan offers past email filters
Hackers are slipping fake small business loan offers into your inbox by hiding invisible characters inside normal words. Microsoft says it blocked 99% of these messages, but the…
Scams & Fraud
Scam emails pose as city officials to trick contractors into wiring money
Scammers are sending emails that look like official city correspondence to trick contractors and business owners into wiring money. The Mitchell Republic reports that a local contractor and…
Scams & Fraud
Microsoft reports AI invoice scams and passkey phishing targeting cloud accounts
Microsoft has disclosed two active campaigns targeting business accounts, according to The Hacker News. One uses AI to create fake invoices that trick finance staff into sending money.…