Cybersecurity

Cybersecurity is the practice of protecting systems, networks, and people from an ever-changing range of digital threats. From ransomware and phishing to insider risks, the landscape is growing more complex every year. A strong cybersecurity strategy requires a balance of technology, processes, and human awareness. In this category, you’ll find in-depth resources that cover core principles, emerging risks, and best practices for building resilience across your organization.

PSD3, PSR and IPR: What the New EU Payment Rules Mean for Social Engineering Defense

PSD3, PSR and IPR: What the New EU Payment Rules Mean for Social Engineering Defense
Alex Beaurepaire
Cybersecurity

PSD3 and the PSR move more fraud losses onto payment providers, including bank staff impersonation scams. What the rules require, and how to make your people a control you can evidence.

Financial Services Cybersecurity: 10 Tools Every CISO Should Know

Financial Services Cybersecurity: 10 Tools Every CISO Should Know
Thomas Le Coz
Cybersecurity

Ten tools financial services CISOs use to cover fraud, identity, data, email, voice and human risk, with what each does, who it suits and where it fits in the stack.

The 2026 Crypto CISO Checklist: How to Protect Crypto & Blockchain Companies Against Social Engineering and Data Breaches

The 2026 Crypto CISO Checklist: How to Protect Crypto & Blockchain Companies Against Social Engineering and Data Breaches
Alex Beaurepaire
Cybersecurity

Social engineering, not smart contract exploits, is now the primary attack vector against crypto firms. Arsen offers a comprehensive solution for crypto companies to mitigate, anticipate and...

Social Engineering Threats Targeting Crypto Teams: 7 Attack Tactics to Know

Social Engineering Threats Targeting Crypto Teams: 7 Attack Tactics to Know
Alex Beaurepaire
Cybersecurity

Most crypto security incidents start with human manipulation. These are the 7 social engineering techniques most actively used against exchanges, DeFi protocols, and blockchain teams.

From Reactive to Resilient: A Practical Guide to Cyber Security Awareness That Actually Works

From Reactive to Resilient: A Practical Guide to Cyber Security Awareness That Actually Works
Alex Beaurepaire
Cybersecurity

Recent CISO surveys point to a more complex threat landscape: AI is accelerating attacks and amplifying risk, even as it offers powerful defensive capabilities when used effectively. At the same...

Why Basic Phishing Training Won't Stop AI Social Engineering

Why Basic Phishing Training Won't Stop AI Social Engineering
Alex Beaurepaire
Cybersecurity

Annual phishing training built around spotting typos and suspicious sender addresses doesn't address AI-enabled social engineering. In 2025, 83% of phishing emails were AI-generated with flawless...

Supply Chain Attacks in Financial Services: Why Your Vendors Are Becoming Your Biggest Vulnerability

Supply Chain Attacks in Financial Services: Why Your Vendors Are Becoming Your Biggest Vulnerability
Alex Beaurepaire
Cybersecurity

Your perimeter controls mean nothing if an attacker compromises a trusted vendor first. The SitusAMC breach in November 2025 exposed data across 100+ financial institutions without touching a...

The Era of "Dark LLMs": How AI is Supercharging Social Engineering

The Era of "Dark LLMs": How AI is Supercharging Social Engineering
Thomas Le Coz
Cybersecurity

Dark LLMs like WormGPT and FraudGPT give attackers fluent phishing, BEC and voice fraud at scale. See how they work and how to train employees to verify requests instead of hunting for typos.

How Sophisticated Vishing Attacks are Currently Bypassing SSO for Wide-Scale SaaS Data Theft

How Sophisticated Vishing Attacks are Currently Bypassing SSO for Wide-Scale SaaS Data Theft
Thomas Le Coz
Cybersecurity

The ShinyHunters group is currently orchestrating vishing attacks and exploiting SSO to bypass multi-factor authentication. These sophisticated campaigns have led to breaches of cloud platforms...

The New Vishing Playbook: Attackers Can now Control the Flow in Real-Time and Break SSO

The New Vishing Playbook: Attackers Can now Control the Flow in Real-Time and Break SSO
Thomas Le Coz
Cybersecurity

Identity attacks are evolving into hybrid vishing operations. New phishing kits allow attackers to manipulate a victim’s browser in real-time, syncing web visuals with phone scripts to perfectly...

How Quishing Can Be Weaponized to Target Top Organizations: The North Korea’s Kimsuky Case

How Quishing Can Be Weaponized to Target Top Organizations: The North Korea’s Kimsuky Case
Thomas Le Coz
Cybersecurity

The FBI warns that North Korean group Kimsuky is using quishing to target organizations. Discover how bad actors exploit QR codes to bypass security controls and how to test your defense against...

The InboxPrime Case: AI-Based Phishing Kits, Or The New Frontier of Credential Theft

The InboxPrime Case: AI-Based Phishing Kits, Or The New Frontier of Credential Theft
Thomas Le Coz
Cybersecurity

AI and LLMs are creating a paradigm shift in cyberattacks. Attackers now use AI-powered kits to automate the entire attack lifecycle with unprecedented speed and precision. CISOs must adapt...

View more