A health system is sued by an employee, who alleged she was excluded and given an ultimatum after reporting compliance concerns. We comment on the risks healthcare employers create when they isolate employees instead of conducting an investigation.

An Atlanta children's charity suffers a $5 million loss after an attacker used a trusted vendor's email to request a payment information change. We discuss how vendor email compromise and poor internal controls can combine to create sizeable risks.

A new phishing campaign is delivering malware inside files that carry a font extension that is not actually a font. We examine how these campaigns bypass cybersecurity controls and what organizations need to know.

A Massachusetts man pled guilty to embezzling $7.8 million from two different medical practices using the same scheme. We discuss the importance of due diligence when hiring and how it can help avoid the fraud risks.

Executive impersonation is a common social engineering tactic used by cyber criminals. We comment on protecting the tricked employee from unfounded accusations while protecting the organization from loss.