Cybersecurity Weekly: Dodging MFA, struggles implementing zero-trust and tax season fraud concerns
New MFA warnings from CISA and FBI, new report indicates struggles with zero-trust implementation and threat actors leveraging tax season to commit fraud. All this, and more, in this week’s edition of Cybersecurity Weekly.
1. CISA and FBI warning: Hackers used these tricks to dodge multi-factor authentication
The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) issued an alert about Russian state-sponsored activity that pre-dates recent warnings over cyber activity related to Russia's military invasion of Ukraine.
2. Security teams struggle to get started with zero-trust
Nearly a third of respondents in a Dark Reading survey on endpoint security strategy say zero-trust is too confusing to implement.
3. Your data, their gain: How threat actors leverage tax season to commit fraud
While tax return fraud is an issue throughout the year, it is, of course, most prevalent during tax season. Around the time when winter turns to spring, threat actors pursue W2 and other tax-related forms, which are chock-full of personally identifiable information (PII) and may provide them with the data they need to commit tax fraud, among other illegal activities.
4. This sneaky type of phishing is growing fast because hackers are seeing big paydays
Researchers warn about an increase in conversation hijacking emails, where hackers abuse accounts of people you trust to send you phishing links and malware.
5. CISOs face 'perfect storm' of ransomware and state-supported cybercrime
For some industries, vulnerability exploitation and system intrusions have crossed from the cyber-realm and become matters of life and death.
Phishing simulations & training
Unlock pricing and see how Infosec IQ can help you empower employees with 2,000+ security awareness resources to:
- Reduce security events
- Reinforce cyber secure behaviors
- Strengthen cybersecurity culture at your organization
In this series
- Cybersecurity Weekly: Dodging MFA, struggles implementing zero-trust and tax season fraud concerns
- Top 5 cybersecurity certifications for beginners for 2026
- What does an IT auditor do? Roles, skills and certifications
- 7 top security certifications you should have in 2026
- 13 best Wi-Fi hacking tools for 2026
- 11 Android hacking apps for ethical security testing in 2026
- 10 popular password-auditing tools compared [2026]
- How Facebook accounts get hacked in 2026: Common methods, warning signs and protection strategies
- How to become an ethical hacker: A 2026 roadmap
- How Wi-Fi password cracking works: WPA2, WPA3 and Aircrack-ng walkthrough for 2026
- What is the NICE Workforce Framework for Cybersecurity?
- How to earn CompTIA A+ CEUs: Complete guide to continuing education
- CompTIA A+ performance-based questions: Complete preparation guide
- CompTIA A+ certification guide: Everything you need to know in 2026
- CompTIA A+ renewal: Complete guide to maintaining your certification
- CompTIA A+ salary guide: What you can earn in 2026
- Top 50 CompTIA A+ Interview Questions and Answers [2026 Update]
- CompTIA A+ jobs outlook 2026: IT career opportunities and market trends
- CompTIA A+ exam changes: Complete guide to Core 1 & Core 2 (220-1201 & 220-1202)
- CompTIA A+ exam domains: Complete study guide for all 9 knowledge areas
- Top 10 penetration testing certifications for security professionals in 2026
- CISSP certification cost and requirements (2025): Your complete preparation guide
- Incident response procedures: Essential steps for effective cybersecurity
- How to become a CMMC Certified Assessor (CCA): Requirements & Assessment Process
- CMMC Certified Professional (CCP): Requirements, exam & career path [2026]
- C3PAO certification guide: How to become a CMMC Third-Party Assessment Organization
- How to become a CMMC Registered Practitioner (RP) in 2026
- CMMC Registered Provider Organization (RPO): Complete guide to becoming an RPO
- CMMC career paths: RP vs CCP vs CCA: Which certification is right for you?
- CMMC compliance: Complete planning & resource guide [2026]
- CMMC 2.0: Complete guide for defense contractors [2026]
- CMMC levels explained: Complete guide to levels 1, 2 and 3 (CMMC 2.0)
- CMMC marketplace guide: C3PAOs, RPOs & service providers explained
- CMMC assessment guide: What to expect, how to prepare & pass successfully
- CMMC certification for organizations: Step-by-step guide to getting certified
- CMMC vs NIST 800-171, ISO 27001 & other frameworks: Complete comparison
- What is CompTIA SecAI+? A practical guide for security teams
- Amazon Athena Security: 6 essential tips
- Security risks of cloud migration
- Cloud penetration testing career path: Essential certifications & skills for 2026
- Cloud PKI implementation: A comprehensive guide
- Virtual DMZ cloud architecture: Securing AWS, Azure and GCP environments
- Cloud security use cases: 8 essential scenarios to protect your infrastructure
- Cloud application security vulnerabilities: A comprehensive guide
- Cloud computing attack vectors and countermeasures: Protecting your infrastructure in 2026
- Malicious AMI detection: Securing Amazon Machine Images (AMIs)
- Virtualization security in cloud computing: A comprehensive guide
- Cloud data sanitization best practices for secure storage
- Cloud honeypot deployment: Complete guide for AWS, Azure and GCP
- Cloud administrator vs. system administrator
- Security+ 601 vs 701: Key changes you need to know
Phishing simulations & training
Unlock pricing and see how Infosec IQ can help you empower employees with 2,000+ security awareness resources to:
- Reduce security events
- Reinforce cyber secure behaviors
- Strengthen cybersecurity culture at your organization
Professional development
Explore the best IT certifications for cybersecurity beginners in 2026, including CompTIA core certs, SSCP, CEH, GSEC and CCNA options to help launch your career.
August 28, 2026
Greg BeldingIT auditor
Learn what an IT auditor does, including key responsibilities, skills, certifications and career paths in IT auditing and cybersecurity.
August 28, 2026
Beth OsborneProfessional development
Explore the top 7 security certifications for 2025 that can boost your career in the cybersecurity field.
August 28, 2026
Jeff PetersHacking
These wireless monitoring and troubleshooting tools will help you secure your Wi-Fi network.
August 14, 2026
Howard Poston