Jericho Security | Blog

C-SCRM for Retail: Cyber Supply Chain Risk Guide

iyan@jerichosecurity.com (Iyan Danial) — Mon, 16 Feb 2026 20:58:55 GMT

C-SCRM: Cyber Supply Chain Risk Management in the Retail Industry

Retail security doesn’t fail in one place, it fails at the seams.

Voice Phishing Is Rising: Why “Just a Phone Call” Is Now a Real Threat

iyan@jerichosecurity.com (Iyan Danial) — Mon, 02 Feb 2026 17:05:56 GMT

Your team finally tightened email security. Then the “IT helpdesk” calls start. Someone sounds calm, competent, and in a hurry. They “just need” an MFA code, a password reset, or a quick screen-share to fix an urgent access issue.

Password Cracking: Tools, Techniques, and Ways to Defend Against It

iyan@jerichosecurity.com (Iyan Danial) — Mon, 26 Jan 2026 10:33:52 GMT

Passwords remain the first line of defense for most digital systems but they’re also one of the most frequently exploited. As attackers refine their methods, password cracking has become faster, more automated, and more damaging than ever.

LastPass Users Targeted in Sophisticated Phishing Campaign: What CISOs Need to Know

iyan@jerichosecurity.com (Iyan Danial) — Thu, 22 Jan 2026 18:21:59 GMT

Executive Summary

LastPass has issued a warning to customers about an active phishing campaign designed to steal users’ master passwords and gain access to sensitive vault data. While there is no evidence of a breach within LastPass systems, the campaign underscores a growing reality for security teams: credential compromise increasingly hinges on social engineering, not technical exploitation.

The Deepfake Surge: Ushering in a New Chapter of Cyber Risk for Financial Institutions

may@jerichosecurity.com (May Calceta Wong) — Tue, 25 Nov 2025 23:20:53 GMT

Financial institutions have always operated under a higher standard of security than most industries. Fraud, impersonation, and social engineering attempts predate digital transformation, but AI has rewritten the rules. As deepfake technology becomes more accessible, more realistic, and more automated, the sector is entering a new era of cyber risk where human trust (not infrastructure) is the primary attack vector.

The Season of Scams: How AI Is Supercharging Holiday Phishing Attacks

may@jerichosecurity.com (May Calceta Wong) — Thu, 20 Nov 2025 20:05:47 GMT

Every holiday season, shoppers rush to click “Buy Now” and cybercriminals rush to exploit it. This year, AI-driven phishing is transforming traditional scams into hyper-personalized, near-undetectable attacks that target both consumers and organizations. According to RH-ISAC, it has stated that there is a 520% surge in generative AI-driven malicious traffic in projected in the 10 days leading up to Thanksgiving.

Raising the Volume: Making Cybersecurity Awareness Month Matter

Brian Markham — Tue, 07 Oct 2025 15:48:24 GMT

October is National Cybersecurity Awareness Month. For many of us who’ve worked in this field for years, it can feel a little anticlimactic. You might even feel tempted to be cynical. And honestly, I wouldn’t blame you. After all, cybercrime isn’t slowing down.

Houston, we have a deepfake problem…

may@jerichosecurity.com (May Calceta Wong) — Fri, 26 Sep 2025 15:56:16 GMT

We’re heading to HOU.SEC.CON because the threat landscape has shifted: AI makes social impersonation fast, convincing, and multi-channel.

Voice clones call finance. Video deepfakes join executive standups. Chatbots mimic coworkers. If your verification rituals haven’t evolved, risk sneaks in through the front door.

From September 30–October 1, 2025 at the George R. Brown Convention Center, you can find Jericho at Booth 727 with practical ways to turn “we have a problem” into “we have a solution.”

Why Security Awareness Is Your Strongest Defense Against AI-Driven Threats

may@jerichosecurity.com (May Calceta Wong) — Wed, 17 Sep 2025 18:32:01 GMT

Introduction

Cybersecurity has always been a battle between attackers and defenders, but the rise of AI-powered threats has changed the game. From deepfake-enabled fraud to hyper-targeted phishing, attackers are using artificial intelligence to move faster, act smarter, and bypass traditional defenses.

Kick Off Cybersecurity Awareness Month 2025 with a Free Starter Kit

may@jerichosecurity.com (May Calceta Wong) — Wed, 10 Sep 2025 22:04:58 GMT

Every October, organizations around the world observe Cybersecurity Awareness Month, a dedicated time to strengthen defenses, educate employees, and build a culture of security. With cyber threats evolving faster than ever, this year’s awareness campaign is an opportunity to move beyond posters on the wall and take real, practical steps to protect your team.