Latest from the Blog
Thinking out loud about security, risk, and what it means to protect systems.
The Numbers Nobody Wants to Talk About: BEC Losses Hit $2.9 Billion in 2023
The FBI’s Internet Crime Complaint Center received over 21,000 BEC complaints with adjusted losses exceeding $2.9 billion in 2023. Industry analysts estimate the real number is significantly higher because most businesses quietly absorb losses rather than report them publicly. The average BEC wire transfer loss for mid-size companies now sits around $498,000, according to an […]
The Extension Layer: Why Your Browser Add-Ons Are a Ticking Time Bomb for Small Businesses
Last month, researchers flagged 73 malicious VS Code extensions delivering GlassWorm v2 malware — backdoors that spread across IDEs and steal credentials from developers who thought they were installing productivity tools. The unsettling part: these extensions had been sitting in the marketplace since December 2025, building reputation before the malicious update dropped. Then came the […]
Why Small Businesses Don’t Need to Outrun the Bear
The good news: small practices don’t need to outrun the bear. They just need to be harder to penetrate than the practice down the street. Attackers are opportunistic. Most ransomware groups run automated scanning that flags easy targets — unpatched VPNs, legacy protocols left exposed, admin accounts without MFA. Solid MFA, current patches, and offline […]