The ChatGPT ClickFix scam that turns a security check into an attack
October 2, 2026
You search Google for ChatGPT. Click a sponsored result. Land on a page with a familiar name and a genuine website address. Then you are
You search Google for ChatGPT. Click a sponsored result. Land on a page with a familiar name and a genuine website address. Then you are
For years, a lot of phishing advice has boiled down to “Don’t click the link.” But attackers are getting better at reducing the amount of work they
A convincing email lands in accounts. It appears to come from a supplier you know. The invoice looks right. The language is good. The person named in the email
There is a line in Huntress’s latest research that should make anyone responsible for Microsoft 365 security pay attention: MFA = PASS. Token = ISSUED. That is
A contact recently recommended Greg van der Gaast’s book I Call Bullshit. It challenges quite a few accepted ideas within cyber security and one of
Most people have completed hundreds of CAPTCHAs. Click the traffic lights. Find the bicycles. Tick “I’m not a robot”. We have become so accustomed to
Cyber criminals don’t work school hours. Your IT team shouldn’t have to work their hours either. Schools have spent a lot of time talking about
What to do in the first hour of a cyber attack If your business is hit by a cyber attack, the first hour matters. It
Cyber insurance can be vital to small businesses. The Association of British Insurers reported that £197 million was paid out by participating insurers to help UK
One of the most common things I hear when talking to small business owners is: “We’re too small to be a target.” I understand why