They Had MFA. The Attacker Logged In Anyway.

They Had MFA. The Attacker Logged In Anyway.

An operations director at a Bangkok SME approved an MFA prompt in the back of a taxi. Eleven days later, two employees couldn't log in, 1.8 million baht had gone to the wrong bank account, and a 72-hour legal clock nobody knew about had started running. Here's exactly how the attack worked, what the company got wrong in the first hour, and the five configuration changes that would have stopped it.

Read More
Rethink Security At The Human Layer
Alex Raso Alex Raso

Rethink Security At The Human Layer

Most attacks don’t start with malware. They start with a human mistake. In a world of AI-driven scams and deepfake phishing, your people are your front line. If your strategy doesn’t include them, it’s incomplete.

Read More
The Cyber Scam Machine: Southeast Asia’s Digital Crimewave Hits an Inflection Point
Alex Raso Alex Raso

The Cyber Scam Machine: Southeast Asia’s Digital Crimewave Hits an Inflection Point

Cybercrime in Southeast Asia has exploded into a full-scale industry—powered by AI, cryptocurrency, and human trafficking. With over $37 billion in losses and millions of attacks reported, this blog breaks down what’s really happening, who’s at risk, and what practical steps you can take right now to protect your business. No jargon. No fluff. Just the facts, and what to do about them.

Read More