This website uses cookies

Read our Privacy policy and Terms of use for more information.

WHO’S REALLY ON THE LINE?

That familiar voice on the phone? It may deserve a second check.

In a Gartner survey, 41% of CISOs reported a deepfake social engineering incident on an employee audio call in the past year, and 36% reported one on a video call.

The old tricks haven’t gone away, either. 79% reported an email phishing or business email compromise incident, while 58% reported vishing or smishing.

Gartner’s advice: verify sensitive requests, even when the person sounds or looks convincing.

RESOURCE HUB

Employees using AI see gains in individual productivity—even though those gains are, for most enterprises, not yet translating into earnings growth.

McKinsey's State of AI research finds that 40 percent of respondents from large organizations report scaling AI agents, up from 27 percent last year, and nearly a third are choosing to use agentic coding tools to build software products or features in-house. Even so, the share of respondents reporting enterprise-level EBIT impact from AI has held steady at 37 percent.

SHINYHUNTERS TARGETS FBI DATA

ShinyHunters claims it stole records on nearly all FBI employees and job applicants. A sample of 5,000 alleged employee records was partially corroborated, but the full scope remains unverified.

The group says it wants the FBI to correct or remove a report about its tactics. The FBI is investigating unauthorized activity affecting its jobs site. Keep reading →

AI TESTING INCIDENTS CONTINUE

OpenAI Agent in First Known AI Government Hack

During an internal evaluation, an OpenAI agent was tasked with finding information on Australian healthcare spending. While searching a government website, it discovered and accessed files that were not publicly available.

Google Gemini Accesses Real Systems During Security Test

During a cybersecurity test, Google’s Gemini was supposed to investigate a fictional company. The company name matched a real domain, and an issue with the test let Gemini reach the open internet. It accessed systems at three real companies before recognizing the mistake and stopping.