🔗 FieldNotes – The hidden HR cost of security awareness training
Reminders, overdue notices and report preparation all take time. Here’s a view on HR workload that belongs in your next awareness renewal.
Cybersecurity Insights Field Notes
Cybersecurity Insights PacketHunters
#PacketHunters – The passkey holds, or who controls the instructions?
Passkeys resist phishing, but enrolling a new credential is a separate security decision. Claudia examines vishing and passkey registration abuse, with Entra controls, a KQL audit query and a practical test for verifying support requests.
Cybersecurity Insights Decoded
Decoded – Ransomware in Italy is an accounting decision, and the attackers know your books
RedACT counted 148 confirmed ransomware claims against Italian organizations in six months. Almost none of them required sophistication to pull off. What they required was a set of human behaviors so consistent (before the breach and especially after it) that thirty different gangs can price them into a business model.
Cybersecurity Insights Field Notes
🔗 Field Notes – The bait is made of what you love
A Montrachet at an impossible price lands in the inbox of someone who has spent years posting about white Burgundy. Wine phishing scams are not spray and pray. They are built from leaked customer data and public passion, and the wine trade taught attackers everything they know about scarcity and urgency.
Cybersecurity Insights PacketHunters
🎣 #PacketHunters – A fake “payment failed” email, 48 hours, and a £500 Ticketmaster charge you didn’t authorize
One distracted click, one expiring credit card, one Ticketmaster charge for £500. Inside the Spotify phishing kit that’s currently eating subscribers alive – and the brand-impersonation playbook behind it.
Cybersecurity Insights PacketHunters
🎣 #PacketHunters – ZERO passwords stolen. Full Microsoft 365 takeover. The login page was real!
No fake login page. No stolen password. No MFA prompt to fail. EvilTokens walks the victim through Microsoft’s own sign-in flow, and the phishing page stays encrypted until the browser renders it. Here is the full attack chain and the hunting queries your SOC needs today.
Cybersecurity Insights Decoded
Decoded – Messaging app scams don’t care which app you picked
The WhatsApp-versus-Signal-versus-Telegram debate assumes scammers pick a side. They don’t. This Decoded walks through why the app is never the perimeter, why Telegram’s default isn’t what people think it is, and what actually stops the con.
Cybersecurity Insights Field Notes
🔗 Field Notes – Comfort is the attack surface on both sides of the firewall
The 2026 SANS survey lands on a reassuring finding: a trained, skeptical human is still the best defense against AI-enabled attacks. Sit with the rest of the numbers and a harder pattern shows up. Skepticism runs on time and discomfort, and an AI-shaped attack is built to remove both, on both sides of the firewall.
Cybersecurity Insights PacketHunters
🎣 #PacketHunters – 2 fake support techs. 2 shops. 365.000 records = €1,715,600 (aka Wind Tre social engineering breach & Garante fine explained)
Two guys phoned a phone shop, said they were support, and walked out with 365,000 customer records – 41,359 with payment data attached. The Garante fined Wind Tre €1,715,600.
Cybersecurity Insights Field Notes
Field Notes — The consent your employees never gave was set for them
Excerpt: For two days in July, any Instagram user could pull another person’s public posts into an AI-generated image by @-mentioning them, with the setting enabled for everyone by default. Meta withdrew the option after backlash. The interface disappeared. The assumption underneath it, that a person’s public content is reputation exposure rather than attack material, did not.
