Business Email Compromise Stories

Global Stories

Business Email Compromise stories

Google Cloud urges stronger cyber basics amid AI attacks

As attackers use AI to speed up phishing and malware, companies are being told that multi-factor authentication and patching matter more than ever.

By Mark Tarre • 4 min read • Today

Data Protection

Asia Pacific leaders urge overhaul of scam defences

Australia's new scams rules are adding pressure on firms to detect fraud faster as AI-powered attacks expose weak governance and identity controls.

By Sofiah Nichole Salivio • 4 min read • Last week

Data Protection

Abnormal joins OpenAI's Daybreak cyber partner programme

The tie-up will push AI defences into existing enterprise workflows as security teams try to monitor autonomous agents and limit risk.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Malware

Cyberattacks & ransomware surge in July, Check Point

Ransomware victims jumped 49% in July as organisations also endured 2,336 weekly cyberattacks and widening AI data exposure.

By Joseph Gabriel Lagonsin • 5 min read • This month

Virtualisation

Industrial ransomware hits 1,140 incidents in Q2 2026

Industrial firms face growing disruption as ransomware incidents rose 12% to 1,140 in the second quarter, Dragos said.

By Mark Tarre • 4 min read • This month

Data Protection

KnowBe4 launches free cyber awareness kit for 2026

Organisations preparing October training will get new materials on phishing, deepfakes and reporting from a free package aimed at staff awareness.

By Sean Mitchell • 4 min read • This month

Software-as-a-Service

Google links UNC6671 to cloud extortion brand shift

Google says the campaign is shifting towards financial and legal firms, with rebranded extortion sites still stealing cloud logins and tokens.

By Sean Mitchell • 4 min read • This month

Data Protection

Doppel names Hideki Ushigome as Japan Country Manager

AI-driven phishing is heightening risks for Japanese organisations as Doppel expands locally and bolsters its response with a seasoned cybersecurity executive.

By Sofiah Nichole Salivio • 4 min read • This month

Network Security

Infoblox warns cybercrime is becoming industrialised

Nearly 25 per cent of newly observed domains were high-risk, underscoring how AI and rented infrastructure are making attacks harder to detect.

By Mark Tarre • 4 min read • This month

Stories from Other Regions

Business Email Compromise stories

Phishing

PEXA flags drop in scam confidence among homebuyers

Fewer Australians can spot property settlement scams, with confidence in identifying them falling to 41% as AI voice fraud worries grow.

By Mark Tarre • 4 min read • Yesterday

Multi-factor authentication

Australian finance teams warned over payment scam risks

Finance teams are being urged to tighten checks as scammers exploit weak controls, with mid-sized firms, charities and public bodies most exposed.

By Mark Tarre • 4 min read • Yesterday

Digital Transformation

No one's just a number: the finance-team blind spot behind Australia's rising payment scams

Australians lost AUD $166.8 million to payment redirection scams in 2025, as finance teams struggled to verify supplier bank-detail changes.

By Phillip Vella • 5 min read • Yesterday

Malware

Businesses urged to add stronger controls beyond vigilance

Rising scam losses are pushing Australian firms towards stronger payment and login controls as regulators prepare tougher enforcement.

By Sofiah Nichole Salivio • 5 min read • Last week

Data Protection

Why penetration testing must move at the speed of attackers

Stolen credentials can become an operational foothold within hours, leaving annual assessments too slow to catch the real attack paths.

By Patrick Dannacher • 6 min read • Last week

Multi-factor authentication

Proofpoint warns of myGov & invoice scams in Australia

Australians lost AUD $2.18 billion to scams in 2025 as fake myGov logins and bogus invoices exploit tax-season urgency, Proofpoint said.

By Mark Tarre • 4 min read • Last week

Privileged Access Management

AI agent used fake identities to push malicious code

Cybersecurity experts warn single-person approvals are now vulnerable after an AI agent used fabricated identities to slip malicious code past checks.

By Sean Mitchell • 6 min read • This month