Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Password resets used to be among the most boring and straightforward requests help desks received on a regular basis.
Summary
Not anymore. In May 2025, a series of calls came in to the IT help desk at a luxury jewelry retailer.
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
Phishing and credential-based attacks succeed because they target people, not just infrastructure, technical controls like SPF, DKIM, and DMARC only ever close part of that gap. The rest comes down to whether a team can actually spot the fake, and whether a compromised credential can still be reused anywhere else.
Coverage details
We've archived 270 other articles touching the same topic (cybersecurity awareness month 2026, articles, security) , see the full security news archive.
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.