01
29 July 2026 · 15 min read
Cloned company sites stole B2B advance payments
A campaign cloned Russian corporate websites to steal B2B advance payments. Learn its tradecraft, warning signs and payment controls.
Topic · 26 articles
Human Security
Phishing, scams, safer work and practical habits that help employees recognise pressure, verify requests and report threats quickly.
FIELD NOTES
TOPIC INDEX
Latest research
02
22 July 2026 · 12 min read
Free SOC Analyst Course: 32-Module Path
Explore a free SOC analyst course with 32 modules, 316 lessons, quizzes, and worked analysis from triage and SIEM to OT, AI, and crisis response.
03
10 July 2026 · 8 min read
Ghostwriter Gmail and 2FA phishing targets Poland
CERT Polska reports an intense UNC1151/Ghostwriter Gmail campaign. Fake security alerts steal passwords and real-time 2FA codes from Polish users.
04
10 July 2026 · 9 min read
OpenAI Privacy Filter: PII masking does not equal GDPR
OpenAI's local model detects and masks PII, but it does not guarantee anonymisation or GDPR compliance. Build a safer pipeline for European data.
05
10 July 2026 · 8 min read
Signal backup recovery key phishing: FBI warning
FBI and CISA warn that Russian-linked actors are phishing Signal backup recovery keys. Learn how the attack works and how to respond safely.
06
22 June 2026 · 9 min read
Deepfakes in fake investment ads: how the scam works
Fake ads featuring well-known people are flooding social media. We explain how deepfake investment fraud works and how to recognise it.
07
20 June 2026 · 10 min read
Help-desk vishing: the call that breaches a company
Groups like Scattered Spider call the IT help desk to reset MFA and breach the company. How the 2026 attacks work and how to verify identity.
08
20 June 2026 · 5 min read
Quishing: phishing hidden in QR codes
A QR code slips past email filters and leads to a fake page straight from your phone. We explain how quishing works and how to defend against it.
09
19 June 2026 · 9 min read
SIM swapping: how criminals hijack your number
A SIM swap lets criminals take over your phone number — and with it your texts, codes and accounts. How it works, how to spot it and how to protect yourself.
10
18 June 2026 · 6 min read
Fake KSeF and gov.pl notifications target businesses
Criminals impersonate KSeF, e-government and gov.pl domains to target company finance teams. What this phishing looks like and how to secure it.
11
15 June 2026 · 6 min read
Fake mObywatel fine: how one SMS can drain your account
A campaign impersonating mObywatel uses sender spoofing and a fake 200 PLN fine. We explain why it looks so convincing and how not to fall for it.
12
14 June 2026 · 6 min read
Business Email Compromise: the costliest scam
BEC is one of the most expensive scams for companies. We explain how invoice fraud and the 'urgent CEO transfer' work — and how to stop them.
13
5 June 2026 · 6 min read
BLIK SMS spoofing: how one link hijacks your banking
An intensive campaign impersonates BLIK using SMS spoofing and fake login panels. We show how criminals take over online banking and how to break the chain.
14
1 June 2026 · 6 min read
'Your bank is calling' — vishing and caller-ID spoofing
A call from the bank's number, a calm 'consultant' and a supposed break-in on your account. We break down the fake-bank-employee scam and how to stop it.
15
28 May 2026 · 11 min read
Phishing in 2026: why training alone isn't enough
Phishing still accounts for most successful breaches. We explain why employee education alone isn't enough and what to add to your defences.
16
28 May 2026 · 9 min read
Safe online shopping: how not to lose money
Fake shops, spoofed payments and intercepted cards. A practical guide to spotting a fraudulent store and paying safely online.
17
20 May 2026 · 9 min read
The 'pay a small fee' parcel smishing, explained
A fake parcel-fee text leads to card or banking phishing. Learn how to inspect the domain, authorisation prompt and incident response.
18
14 May 2026 · 10 min read
Smartphone security: 12 settings worth changing
Your phone knows more about you than your computer. Twelve practical settings and habits that genuinely protect your data, accounts and privacy.
19
12 May 2026 · 11 min read
Secure remote work: a standard, not an exception
Remote work is here to stay — and with it company data on home networks and private hardware. A practical standard: devices, access, Wi-Fi.
20
10 May 2026 · 9 min read
OLX and Vinted: fake payment gateways, explained
Impersonations of OLX and Vinted are among the most reported scams in Poland. We explain the 'safe payment' mechanism that actually robs the seller.
21
7 May 2026 · 9 min read
VPN: myths and facts. Does it really protect you?
Ads promise a VPN gives anonymity and total security. We explain what a VPN really does, what it doesn't protect against and when it's worth using.
22
30 April 2026 · 9 min read
Scams targeting seniors: how to protect loved ones
Seniors are fraudsters' most common target: fake grandchild, police or bank staff. Learn the schemes and how to protect parents and grandparents.
23
28 April 2026 · 9 min read
'Send me a BLIK code': Facebook account takeovers
A hacked friend's account asks for a BLIK code or a scan of your ID. We explain how account takeovers happen and why the chain of trust is the weakest link.
24
9 April 2026 · 10 min read
Children's online safety: a guide for parents
How to protect your child online without surveillance and bans? A practical guide to the risks, parental control settings and the conversation that works.
25
2 April 2026 · 10 min read
SPF, DKIM and DMARC: how to secure your company email
Without SPF, DKIM and DMARC anyone can send emails impersonating your domain. We explain these three mechanisms simply and show how to deploy them.
26
6 January 2026 · 11 min read
Microsoft 365 phishing from your own domain: complex routing explained
Microsoft documented internal-looking phishing enabled by complex mail routing and weak spoof protection. A technical analysis of headers, DMARC and connectors.
BR / NEXT STEP
Want to prepare your team for these threats?
We turn current threats into role-based training, safe exercises and a clear reporting path. The free Academy remains available for self-directed learning.
NDA · clear scope · direct communication