AI has been getting much media attention in the cybersecurity sphere; however, the cyber attack basics are still legitimate risks, and they are not going away. We discuss those risks and what organizations need to know.

A health system is sued by an employee, who alleged she was excluded and given an ultimatum after reporting compliance concerns. We comment on the risks healthcare employers create when they isolate employees instead of conducting an investigation.

An Atlanta children's charity suffers a $5 million loss after an attacker used a trusted vendor's email to request a payment information change. We discuss how vendor email compromise and poor internal controls can combine to create sizeable risks.

A new phishing campaign is delivering malware inside files that carry a font extension that is not actually a font. We examine how these campaigns bypass cybersecurity controls and what organizations need to know.

A Massachusetts man pled guilty to embezzling $7.8 million from two different medical practices using the same scheme. We discuss the importance of due diligence when hiring and how it can help avoid the fraud risks.