https://www.zerofox.com RSS for Node Fri, 16 Oct 2026 06:37:48 GMT Fri, 16 Oct 2026 06:37:48 GMT Why Are Attackers Writing Fake Content for Machines? Attackers have started writing fake content for a new reader: the large language models (LLMs) and AI agents that summarize, recommend, and increasingly act, autonomously, on what they find online. Most drivers don’t question the turn their navigation app tells them to take, because they trust the […]

]]> https://www.zerofox.com/blog/llm-poisoning-attackers-write-fake-content https://www.zerofox.com/blog/llm-poisoning-attackers-write-fake-content Wed, 14 Oct 2026 09:16:19 GMT ZeroFox Signals Research began scoping the 2026 federal election domain threat surface in June and has observed it continuously since early July. For three months we have been observing it, enriching it, and following how election-adjacent domain infrastructure is being registered, held, and in a few cases reconfigured in ways that warrant watching ahead of […]

]]> https://www.zerofox.com/blog/the-2026-midterm-domain-threat-surface-four-weeks-out https://www.zerofox.com/blog/the-2026-midterm-domain-threat-surface-four-weeks-out Mon, 12 Oct 2026 11:23:55 GMT In mid-2023, a vendor on an underground forum started selling access to a language model with the safety guardrails stripped out. The product was called WormGPT, and it was marketed to people running business email compromise and phishing campaigns. It had a monthly subscription price, a documentation page, and a regular update schedule. That listing […]

]]> https://www.zerofox.com/blog/dark-ai-malicious-llms-dark-web https://www.zerofox.com/blog/dark-ai-malicious-llms-dark-web Wed, 07 Oct 2026 09:39:05 GMT A trusted organization recently watched its own name become the bait for a sophisticated fraud campaign. Scammers cloned its brand, created fake profiles of its executives, and launched counterfeit donation pages, all designed to target the people who trust the organization most. This is what fundraising scams look like today: coordinated impersonation campaigns that exploit […]

]]> https://www.zerofox.com/blog/one-organization-five-scams-what-a-real-impersonation-case-reveals-about-fundraising-fraud https://www.zerofox.com/blog/one-organization-five-scams-what-a-real-impersonation-case-reveals-about-fundraising-fraud Thu, 01 Oct 2026 11:11:24 GMT Verification began in 2009 as a fix for impersonation. A platform confirmed an account was real and marked it. That is still what most people assume the badge means, and it is why a fake profile carrying your firm’s name or your CEO’s headshot gets the benefit of the doubt when it shows up in […]

]]> https://www.zerofox.com/blog/understanding-verification-checkmarks https://www.zerofox.com/blog/understanding-verification-checkmarks Wed, 23 Sep 2026 11:03:21 GMT Last week someone clicked an HBO Max ad on Reddit and installed an infostealer on their own machine. The ad ran through Reddit’s real ad system. Attackers had taken over the HBO Max advertising account and used it to push hundreds of legitimate-looking promos, all pointing at a page dressed up as HBO Max that […]

]]> https://www.zerofox.com/blog/sandbox-verdict https://www.zerofox.com/blog/sandbox-verdict Tue, 22 Sep 2026 09:50:35 GMT Pull up two external threat platform datasheets side by side and the coverage lists look nearly identical. Domains, social, dark web, app stores, paid ads, executive exposure. Every serious vendor in this category monitors all of it, which means the feature grid stops being useful about ten minutes into an evaluation. The comparison that decides […]

]]> https://www.zerofox.com/blog/zerofox-vs-doppel-comparing-two-approaches-to-takedown-and-disruption https://www.zerofox.com/blog/zerofox-vs-doppel-comparing-two-approaches-to-takedown-and-disruption Wed, 16 Sep 2026 11:03:16 GMT Criminals no longer need to break into your internal networks to damage your business—instead, they set up shop in third-party online spaces where your customers, partners, or employees can be easily found. Your Security Operations Center (SOC) team can work around the clock hardening servers and patching endpoints, but your stakeholders are still out there: […]

]]> https://www.zerofox.com/blog/zerofox-alternatives https://www.zerofox.com/blog/zerofox-alternatives Fri, 11 Sep 2026 10:12:11 GMT AI-powered brand protection is having a moment. Across the market, new platforms promise fully autonomous detection, real-time campaign clustering, and automated takedowns across domains, social media, messaging apps, and more. The pitch is compelling: faster alerts, less manual work, and AI-native defense built for modern deception. But brand monitoring and enforcement are not the same […]

]]> https://www.zerofox.com/blog/brand-monitoring-and-enforcement-why-ai-alone-isnt-enough https://www.zerofox.com/blog/brand-monitoring-and-enforcement-why-ai-alone-isnt-enough Thu, 10 Sep 2026 15:09:42 GMT An Afternoon in East London with a Man Who Steals through the Internet for a Living He agreed to meet on the condition that we describe neither his face nor his voice. The introduction came through a source we’ve worked with before on stories about financial crime, passed along after weeks of encrypted back-and-forth on […]

]]> https://www.zerofox.com/blog/interview-with-a-phisher https://www.zerofox.com/blog/interview-with-a-phisher Tue, 08 Sep 2026 09:48:24 GMT Executive travel security is the practice of protecting a named leader in transit across both digital and physical risk, from device and credential compromise to surveillance, theft, and physical harm, before, during, and after each trip. It is one part of a broader corporate travel security program. Here, we’ll focus on the executive layer. An […]

]]> https://www.zerofox.com/blog/executive-travel-security https://www.zerofox.com/blog/executive-travel-security Wed, 02 Sep 2026 10:02:04 GMT The best executive protection companies do more than place guards at the door. They fuse digital threat intelligence, impersonation and PII monitoring, physical security alerting, and rapid takedowns into one program that protects a named leader across both worlds. And the stakes keep rising. Executive security budgets grew 118.9% from 2021 to 2024, and 72% […]

]]> https://www.zerofox.com/blog/top-5-things-to-look-for-in-an-executive-protection-solution https://www.zerofox.com/blog/top-5-things-to-look-for-in-an-executive-protection-solution Tue, 01 Sep 2026 09:26:07 GMT Social media threat monitoring for executives is the continuous practice of tracking, validating, and acting on threats that target named leaders across social platforms, the open web, and the dark web, before those threats reach the physical world. It pairs automated detection at scale with human analysts who separate real danger from background noise. Today’s […]

]]> https://www.zerofox.com/blog/social-media-threat-monitoring-executives https://www.zerofox.com/blog/social-media-threat-monitoring-executives Wed, 19 Aug 2026 10:14:01 GMT A bodyguard protects an executive who is standing in front of them. Executive travel security protects the whole trip: the itinerary, the route, the destination, and the digital exposure that reaches an executive long before they land. Most corporate programs already have the physical piece handled. The gap tends to be intelligence, specifically the digital […]

]]> https://www.zerofox.com/blog/executive-travel-security-2 https://www.zerofox.com/blog/executive-travel-security-2 Tue, 18 Aug 2026 10:25:08 GMT Log into ZeroFox analytics and you’ll find dashboards waiting. But you don’t work by org chart. You work by intent: what am I trying to get done right now? That’s how the Essentials suite is built. That’s how the Essentials suite is built. Every dashboard is tagged to an intent, a job, not a department. […]

]]> https://www.zerofox.com/blog/what-are-your-zerofox-essentials-dashboards-built-to-do https://www.zerofox.com/blog/what-are-your-zerofox-essentials-dashboards-built-to-do Wed, 12 Aug 2026 10:47:10 GMT Somewhere on the open web today, a real financial adviser is being impersonated. She has 26 years in the industry, a clean regulatory record, a real FINRA CRD number, and a real employer. All of that information is currently being used on a website she does not own, to defraud people she has never met. […]

]]> https://www.zerofox.com/blog/financial-advisers-investment-scam-bait https://www.zerofox.com/blog/financial-advisers-investment-scam-bait Mon, 10 Aug 2026 09:50:15 GMT