The Password

Unmanaged password breaches remain one of the most common and damaging cyber incidents in today’s digital landscape. Attackers continue to exploit weak credentials, reused passwords and stolen authentication tokens to gain access at scale. Thanks to AI, the growing sophistication of scams and malware make it harder to tell fact from fiction.

A new attack vector emerged as a significant threat in 2025: AI-powered cyberattacks. In addition to malicious insiders (disgruntled employees and vendors) and external threat actors (the lone wolf and organized groups of hackers) who continue to carry out “traditional” human-scale phishing and malware attacks against identified businesses and individuals, companies can now add highly automated cyberthreats leveraging the power of artificial intelligence to focus their attention.

Santa’s workshop at the North Pole suffered a major data breach. In their worst sugarplum and candy cane-induced nightmares, none of the elves on the IT staff at KringleToys, Ltd. ever dreamed that anyone would want to harm Santa Claus’ operations and ruin Christmas, so cybersecurity was not a priority. (Well, the elves are a little naïve).

Entrust Corp., a global leader in identity, payments and data security solutions, recently issued a report warning of a sharp increase in AI-assisted deepfake attacks, which now account for one in five biometric fraud attempts, many of which are quite successful.

Balancing security and productivity is often viewed as a trade-off in modern workplaces, but finding the right equilibrium is essential for operational efficiency. This article explores how organizations can promote secure behavior among employees without hindering workflow or collaboration.

One-click attacks, or clickjacking, have been around for decades. The basic premise involves precisely framing transparent malicious buttons over legitimate webpage buttons and/or embedding malware links in emails to trick users into taking unintended actions.