AI has been getting much media attention in the cybersecurity sphere; however, the cyber attack basics are still legitimate risks, and they are not going away. We discuss those risks and what organizations need to know.

A new phishing campaign is delivering malware inside files that carry a font extension that is not actually a font. We examine how these campaigns bypass cybersecurity controls and what organizations need to know.

Cybersecurity experts have identified detection gaps with AI-generated malware. We discuss what makes AI malware unique and how it evades discovery.

Security researchers report that cybercriminals are using underground and jailbroken AI models to write sophisticated malware and phishing messages. We comment on how employers can respond.

A finance director is sentenced to prison for a $10.7 million embezzlement scheme he hid through falsified bank statements. We discuss why document review is crucial and what may help avoid the risks.

Two employers suffered financial loss by a bookkeeper. We discuss what led to these losses.

A restaurant franchisee settles a disability discrimination lawsuit with the EEOC involving a "fully-healed" return-to-work policy. We examine rigid medical leave policies and why they lead to risk.

Fraudsters are using messaging apps to impersonate senior executives and convince employees to send money. We discuss how this traditionally email-centered scam has moved to messaging apps and how to avoid the risks.

A private equity fund manager was able to embezzle more than $11 million through bypassing the investment committee. We discuss the importance of committee oversight to help prevent fraud.