February 4th, 2025

Cybercriminals are using increasingly sophisticated methods, including phishing toolkits and AI, to conduct attacks. Business email compromise (BEC) schemes are a common tactic, where criminals trick companies into making payments to fraudulent accounts. Additionally, state-sponsored actors are using AI tools such as Google's Gemini to streamline their hacking activities, spanning reconnaissance to data theft. Despite safeguards, AI models can still be exploited, making it critical to strengthen security measures. Moreover, data breaches, such as the one at GrubHub, can expose personal information of customers and other stakeholders. These incidents underscore the need for robust security practices like unique passwords and anomaly detection, as well as careful processes for validating wire transfers.