Radiant Resources Inc

10/19/2026

Phishing isn’t a craft anymore. It’s a product category.

A new phishing kit is reaching hundreds of organizations with ready-made infrastructure anyone can deploy. The barrier to entry keeps dropping, and attack volume follows.

Cybersecurity Awareness Month is a reasonable moment to ask whether your training cadence has kept up. Short, frequent practice tied to current attack patterns outperforms the once-a-year compliance session most organizations still rely on. Ten focused minutes a month beats a long session nobody remembers by Q2.

When attacks arrive at this volume, annual training is a compliance checkbox, not a defense.

Read more: https://loom.ly/1z-QSGo

A new PhaaS platform called BigBear 2.0 uses AiTM proxy tactics to bypass MFA and steal credentials across 40+ countries.

10/14/2026

Not every scam shows up in your inbox.

Fake texts about a package, a toll, or an account problem are everywhere. So are QR codes on flyers, parking meters, and emails that lead to fake login pages.

Before you tap or scan, ask yourself: did I expect this? If not, go straight to the official website or call the number you already have.

10/07/2026

October is Cybersecurity Awareness Month, and we're treating it like a mission.

Each week has its own target: phishing and social engineering, AI safety and deepfakes, data security and passwords, and incident reporting. The free CAM Resource Kit covers all four with character poster cards, tabletop exercises, training videos, and a weekly planner you can use as is.

Still sorting out this week's activities? Start here: https://loom.ly/-xwigcE

09/29/2026

Zero trust is one of the most used, and most misunderstood, terms in cybersecurity right now. In simple terms, it means an organization stops assuming anything inside its network is automatically safe just because it's inside the network. Every user, device, and request gets verified, every time, regardless of location.

This is a shift away from the older security model, sometimes called castle and moat, where a strong perimeter protected a trusted interior.

That model breaks down once credentials get stolen or employees log in remotely from unmanaged devices, which describes most work environments today.

Organizations don't need to overhaul their entire environment at once.

Starting with identity and access management is usually the highest impact first step, since that's where most real-world breaches begin.

09/14/2026

Two attack methods are climbing fast according to recent threat intelligence. Voice phishing, or vishing, doubled in the first half of this year compared to the second half of last year. Device code phishing, which tricks a user into approving a login on a device an attacker controls, increased roughly fifteenfold over the same period.

Both techniques share a common thread, they exploit trust in a person or a familiar looking prompt rather than tricking someone into clicking a malicious link. In one documented case, attackers moved from initial account compromise to full data theft in under five minutes.

Security awareness training built primarily around email phishing is missing a growing share of the real threat landscape. Employees need to recognize pressure tactics over the phone and unexpected authentication prompts just as readily as they recognize a suspicious email.

09/09/2026

A new report commissioned by IBM found that roughly one in four data breaches now involves AI in some form, a 56 percent increase from the year before.

The sectors hit hardest were critical infrastructure, financial services, and energy, and breaches involving AI cost organizations about a million dollars more on average than the typical incident.

For IT and security teams, the practical takeaway isn't to panic about AI itself. It's to make sure governance keeps pace with adoption.

That means clear ownership of AI related risk, monitoring for how AI tools are actually being used across the organization, and incident response plans updated to account for AI enabled attack methods like automated phishing generation and deepfake impersonation.

08/27/2026

Outbound email remains one of the most under-protected corners of the modern enterprise. Most sensitive data doesn't leave through a sophisticated breach, it leaves through a rushed send to the wrong recipient, an autocomplete mistake, or an attachment nobody double-checked.

KnowBe4's newly introduced Hybrid Mode for Prevent tackles a problem security teams have wrestled with for years: how do you apply real-time coaching without slowing down the people who can least afford friction...executives, sales teams, anyone constantly on the move?

The answer is a configurable model that blends in-the-moment side-panel guidance with post-send teachable moments, giving admins full control over where and how nudges get delivered, without sacrificing visibility or audit trails.

At Radiant Resources, we see this as part of a broader shift in security tooling: away from one-size-fits-all enforcement and toward controls that flex around how people actually work.

08/21/2026

🔒🔑 Multifactor authentication has long been treated as a finish line. New research shows attackers are increasingly treating it as just another obstacle to route around.

Researchers at ReliaQuest are tracking two active phishing toolkits purpose-built to defeat MFA: a device code phishing platform that generates fresh OAuth codes in real time, and a companion AI-powered phishing-as-a-service platform that puts these capabilities within reach of low-skill attackers.

Once inside a compromised Microsoft 365 environment, the pattern is consistent, establish persistence across additional devices, then move quickly into connected SaaS platforms to exfiltrate data for extortion.

The takeaway for security leaders isn't that MFA has failed. It's that MFA alone was never designed to be the entire strategy.

Layered defenses, behavioral monitoring, and a workforce trained to recognize social engineering at the point of contact remain essential, especially as these toolkits become more accessible by the day.

08/17/2026

There are a lot of ways a company can engage with its community. The ones that matter most, in our experience, are the smallest and most local — the events that don't make national headlines but make a place feel like home for the people who live there.

Songwriters on the Beach has been doing exactly that since 2005. Free live music. Thursday nights. Bradley Beach. Twenty seasons of artists, audiences, and ocean — produced year after year by Brookdale Public Radio 90.5 The Night.

Radiant Resources is proud to be a 2026 sponsor alongside The O'Toole Family Foundation and the Bradley Beach Tourism Commission. Supporting community traditions like this one isn't a marketing initiative for us. It's a reflection of where we come from and the communities we're part of.

The 2026 lineup is live at SongwritersOnTheBeach.com. We hope you'll join us at the beach.

08/07/2026

📲 Apple Warns Users to be Wary of Unsolicited FaceTime Calls 📲 Apple is warning users to be wary of unsolicited FaceTime calls amidst a wave of scams impersonating Apple Support, Malwarebytes reports. The scammers inform the user that there’s been fraudulent activity or a technical problem associated with their account, and trick the victim into handing over payment card details, banking credentials or Apple ID logins.

🔗 Read more: https://loom.ly/oLI7z5w