Phishing
Use of Bespoke Branding in O365 Phishing Campaigns
How phishing kits abuse Microsoft 365's public branding APIs to clone an organisation's real sign-in page convincingly.
Blog
Recent Posts
Phishing
Defending against Obfuscation and Link-less Phishing
Anatomy of a link-less HTML-attachment phishing campaign — the JavaScript obfuscation used to evade analysis, and how defenders can still catch it.
Cybercrime
Is Cybercrime a Global Phenomenon That Is Not Restricted by Geographical Boundaries?
Why cybercrime shrugs off the geographical and jurisdictional boundaries that traditional crime has always been bound by.
Breaches
Collection 1 - What should you do?
What the 1.1-billion-record Collection #1 breach actually means for you, how to check if you're in it, and why resetting 'the' password isn't the answer.
Passwords
Simple Steps to Good Password Management
Practical, non-obvious habits for stronger passwords — prompted by World Password Day, still relevant every other day of the year.