Inspired eLearning, powered by VIPRE, a global leader and award-winning cybersecurity, privacy, and data protection company, today announced the launch of its new Simulations Lab. This groundbreaking course is designed to equip learners with practical, hands-on experience to identify and react to the most prevalent email phishing, vishing, and SMiShing attacks.
In an era of escalating AI-powered threats, sophisticated social engineering attacks frequently bypass technical defenses. The Simulations Lab empowers an organization’s workforce to become a crucial line of defense, which can be the difference between a close call and a costly data breach.
The Simulations Lab Experience
The Simulations Lab offers organizations a powerful way to build a smarter, savvier security force. By fostering superior information retention through randomized practice and an active, engaging learning methodology, the platform ensures an investment that yields enduring benefits beyond typical Security Awareness Training programs alone. Simulating real workplace scenarios enhances a learner’s ability to apply security best practices effectively.
The platform’s research-driven, purpose-built content connects simulations to real-life scams, while gamified elements and continuous interactions keep learners engaged and motivated to improve. By equipping every employee with the mindset to evade today’s advanced adversaries, the Simulations Lab transforms a company’s workforce into a robust and essential layer of defense.
John Trest
“Technical defenses are essential, but the human element remains the most targeted and critical layer of security,” said John Trest, Chief Learning Officer and Strategic Product Manager, at Inspired eLearning. “With the Simulations Lab, we are giving organizations the tools to turn that potential vulnerability into a powerful strength. We are empowering employees to become the most effective protectors of their organization’s intellectual property, customer data, and sensitive health records.”
By actively fostering a cybersecurity-conscious culture, organizations can demonstrate their commitment to security and inspire their entire team to become a formidable defense against cyberattacks.
About Inspired eLearning
Inspired eLearning powered by VIPRE is a VIPRE Security Group brand and part of Ziff Davis Inc. As part of VIPRE Security Group, an award-winning global cybersecurity, privacy and data protection company, we are committed to delivering eLearning solutions of the absolute highest quality, ones which don’t simply check a box, but which drive positive and measurable changes in organizational culture as well.
We deliver solutions that help clients nurture and enhance workforce skills, protect themselves against cyberattacks and regulatory violations, and maximize the return on their investment in organizational training with our eLearning for employees.
PaperCut, a leading print management and document workflow solutions company, today announced the global launch of PaperCut MF 25. This significant release introduces advanced scanning capabilities, extends support to new environments, and delivers a major architectural uplift to enhance security, stability and scalability for the future.
PaperCut MF 25 provides a powerful mix of innovation and infrastructure, empowering businesses to work faster, support a wider range of environments, and build a more secure foundation for their IT infrastructure.
“This release is about helping our customers and partners solve today’s challenges while future-proofing their technology stack,” says Matt Coad, Head of Self Hosted Software at PaperCut. “The new features in 25 enable more automated and efficient document workflows, while the core infrastructure upgrades lay the groundwork for a more secure and robust platform for years to come.”
Key features and benefits of PaperCut MF 25
Smarter scanning with Advanced Scan Actions
PaperCut MF’s Advanced Scan Actions transforms basic scans into actionable data by enabling users to capture crucial metadata directly at the multi-function device (MFD). Customers can now seamlessly integrate scanned documents into systems like ERP, E-MDS, and CMS, automating processes and minimizing manual intervention. This feature allows partners to offer a more comprehensive solution that addresses complex document workflow needs.
Expanded support for diverse environments
PaperCut MF 25 extends its Advanced Scan to Fax functionality to two critical segments:
Advanced Scan to Fax for Linux: Organizations committed to Linux can now integrate secure, intelligent faxing directly from their MFDs. This new functionality eliminates the need for separate servers or complex workarounds, reducing operational overhead and aligning with Linux-centric IT strategies. This opens up a new segment of the market for our partners, enabling them to offer a complete solution to Linux-first organizations.
Advanced Scan to Fax for Lexmark: The solution is now available directly on Lexmark MFDs, eliminating the need for separate hardware. This integration provides a unified, intuitive user experience and offers a more secure, efficient, and cost-effective solution for advanced faxing needs.
Major infrastructure and security upgrades
PaperCut MF 25 includes a significant infrastructure upgrade with updates to Java 21, Spring 6, and other core dependencies. This major architectural uplift improves long-term security, stability, and scalability by closing vulnerabilities (CVEs) and ensuring the platform is ready for future innovations.
Availability
PaperCut MF 25 is available now. Existing customers can upgrade to take advantage of these new features and security enhancements. For more information, please visit the official PaperCut website or contact your local PaperCut Authorized Partner or Reseller.
The healthcare workforce shortage is a problem with serious consequences. Facilities are under pressure to balance safe staffing with rising overtime costs, expensive temp labor, and clinician burnout.
By 2037, the Bureau of Health Workforce projects a shortfall of more than 200,000 registered nurses (RNs) and 300,000 licensed practical/vocational nurses (LPNs/LVNs).
What is a healthcare staffing marketplace?
A healthcare staffing marketplace is a digital platform that connects medical facilities directly with qualified clinicians who are ready to work. Unlike traditional staffing agencies that act as middlemen, marketplaces use algorithms, credential verification systems, and smartphone apps to streamline how shifts are posted and filled.
For many facilities, staffing marketplaces are becoming a strategic complement to existing workforce management systems by helping facilities respond to census fluctuations, emergencies, and unexpected call outs without relying exclusively on high-cost agency contracts.
Why healthcare staffing marketplaces?
Healthcare facilities face a perfect storm: rising patient demand, too few licensed clinicians, and escalating labor costs.
Traditional staffing agencies lack the ability to respond quickly to staffing needs, leading to the rise of online staffing marketplaces.
These marketplaces offer a more convenient, transparent alternative. Facilities can post staffing needs quickly, access real-time scheduling options, and leverage staffing marketplace features that streamline operations and onboarding.
What to look for in a staffing marketplace
When evaluating a platform, administrators should consider a few key factors:
Skillset coverage: Does the marketplace offer RNs, LPNs/LVNs, CNAs, and unit specialties like ICU, medical-surgical, or ER?
Candidate pool: How many clinicians are active, and are they reliable?
Quality and compliance: What systems exist for background checks, license verification, and training?
Reliability: What are the fill rates, and how are no-shows or cancellations handled?
Pricing model: Is it a transparent and pay-as-you-go model or subscription-based with additional costs?
Support: Does the platform provide real human or regional support for facilities?
These criteria form the backbone for comparisons between healthcare staffing marketplaces.
Top healthcare staffing marketplaces
Each platform has its own strengths. Some focus on workforce optimization, others on shift fulfillment, allied health, or long-term placements. Among them, Nursa stands out for transparent pricing, a broad clinician pool, and ease of use.
Below is a comparison of leading options against the criteria outlined earlier.
Nursa: Best overall
Nursa stands out for speed, transparency, and adaptability. Operating in more than 30 states, it connects facilities with a network of over 300,000 clinicians, including RNs, LPNs/LVNs, nursing assistants, medication aides, and respiratory therapists.
Facilities can build custom credential lists, use ShiftReady to design onboarding courses, and post shifts visible to clinicians in real time.
The model is strictly pay-as-you-go—no subscriptions, startup costs, or hire-away fees—giving administrators total budget control.
Reliability is strengthened through clinician ratings and “Favorites” lists, which simplify rebooking trusted clinicians, plus on-the-ground regional support teams and seven-day human chat assistance.
Clipboard Health: Best for allied health coverage
Clipboard Health connects facilities not only with nurses but also allied health professionals like therapists, dietary staff, and environmental services, making it useful for diverse staffing needs.
Features include rate negotiation, geo-tracking for attendance, and auto-reposting of canceled shifts. Pricing is per completed shift, with optional boost fees to attract talent faster.
For support, entry-level customers get general service lines, while higher-tier clients gain access to dedicated account managers.
SnapCare: Best for workforce optimization
SnapCare is a staffing marketplace and workforce optimization tool. Facilities can forecast needs with the Booker tool, manage compliance and invoicing, and track turnover risks with analytics.
Pricing is transparent on pay and travel, with extra fees for recruitment and supplier management.
Clipboard Health: Best for allied health coverage
Clipboard Health extends beyond nursing, connecting facilities to allied health professionals such as physical therapists, dietary staff, and environmental services. That breadth makes it attractive to facilities with diverse staffing gaps.
The platform allows rate negotiation between facilities and clinicians, offers geo-tracking for attendance verification, and auto-reposts canceled shifts.
Pricing is per completed shift, with optional “boost” fees to attract talent faster.
While the flexibility of shift price negotiation appeals to many (particularly clinicians), it can slow down time-to-fill. Support is mostly digital, without the local teams offered by some competitors.
SnapCare: Best for workforce optimization
SnapCare positions itself as both a staffing marketplace and a workforce optimization tool. Facilities can use the Booker tool to forecast staffing needs, opt in to managed services for invoicing and compliance, and leverage workforce analytics to spot turnover risks.
Its transparent pricing covers pay rates and travel costs, though extra fees apply for recruitment and supplier management.
Reliability depends on facilities adopting its full suite, which may increase cost but can reduce long-term dependence on contingent labor. Support is available 24/7 by phone or online.
ShiftMed: Best for enterprise health systems
ShiftMed is a large platform for hospitals, long-term care centers, and multi-site systems. It offers a national clinician pool, mobile-first shift posting, and digital MSP services for compliance and billing.
Pricing is pay-per-shift with extra enterprise fees. Its wide network supports high fill rates, with account managers for enterprise clients, though smaller facilities may find it less personalized than leaner competitors.
Other honorable mentions
There are several other healthcare staffing companies that have transitioned to providing online services. Here’s a quick look at the major players.
Aya Healthcare
Aya Healthcare is one of the largest U.S. staffing firms, known for travel nurse contracts and permanent placements. More agency than marketplace, its nationwide scale appeals to facilities needing specialized or long-term staff.
AMN Healthcare
AMN Healthcare is a leading agency offering short-term, travel, and permanent staffing, plus tools like predictive analytics and vendor management. However, its agency model lacks the speed and on-demand flexibility of marketplaces.
The future of healthcare staffing is online
Staffing in healthcare is changing quickly. Facilities can’t depend solely on agencies or overtime to cover gaps. The best nurse staffing platforms offer facilities faster clinician access, greater transparency, and cost control—benefits that are reshaping workforce management.
According to Precedence Research, the U.S. healthcare staffing market—valued at $19.47 billion in 2024—is expected to more than double by 2034. That kind of growth signals that online platforms aren’t a temporary fix; they’re becoming essential infrastructure.
Among the platforms compared, Nursa rises to the top.
Its flexible pay-as-you-go pricing, customizable credentialing, ShiftReady onboarding, real-time shift fulfillment, and strong human support give facilities a solution that meets today’s staffing challenges while preparing them for tomorrow.
MDaudit, an award-winning cloud-based continuous risk monitoring platform for RCM that enables the nation’s premier healthcare organizations to minimize billing risks and maximize revenues, has finalized its acquisition of Streamline Health Solutions, Inc., a leading provider of solutions that enable healthcare providers to improve financial performance. The addition of Streamline’s pre-bill integrity solutions to its robust billing compliance and revenue integrity platform positions MDaudit to bridge crucial RCM gaps, thereby mitigating billing compliance risks and strengthening and streamlining the revenue cycle.
First announced in May, the acquisition brings together two healthcare RCM powerhouses supporting healthcare organizations with a combined net patient revenue of more than $300 billion. The companies’ shared belief in centering customer satisfaction while leveraging the latest technologies converges into a powerful platform capable of meeting head-on the revenue cycle realities confronting organizations in today’s complex healthcare environment.
Ritesh Ramesh
“Navigating the unrelenting financial and operational pressures of the current revenue cycle landscape requires a strategic approach to revenue cycle management, one in which real-time data, AI, analytics, and automation provide an uninterrupted view across the revenue cycle continuum,” says Ritesh Ramesh, CEO of MDaudit. “This acquisition allows us to provide healthcare organizations with the data- and AI-driven solutions they need to implement an effective, resilient, and adaptive RCM strategy.”
The award-winning MDaudit platform streamlines healthcare revenue integrity using augmented intelligence. It rapidly analyzes billions of rows of data, monitors coding, billing, and payment processes, and uses AI-powered tools to democratize insights and automate workflows. Benchmarking helps identify charge capture and denial issues, while retrospective audits drive staff education to prevent errors.
Streamline Health’s RCM solutions empower healthcare providers to manage and optimize their revenue streams more efficiently. Its suite of comprehensive solutions focuses on pre-bill charge and coding integrity, ensuring that all charges and coding are accurate before billing and payment. By preventing lost revenue and minimizing denials, Streamline Health enables providers to secure the reimbursement they deserve.
Cain Brothers, a division of KeyBanc Capital Markets, acted as exclusive financial advisor to Streamline, which is now a private company and wholly owned subsidiary of MDaudit. Troutman Pepper Locke LLP served as Streamline Health’s legal counsel. Goodwin Proctor, LLP served as legal counsel to MDaudit.
Marchex (NASDAQ: MCHX), which harnesses the power of AI and conversational intelligence to drive operational excellence and revenue acceleration, today announced the release of its new AI-powered healthcare solution designed for health systems, large ambulatory care facilities, and healthcare marketing organizations. This release equips these organizations with data that more accurately attributes marketing-driven patient leads, prioritizes high-value appointments, and provides alerts for critical patient engagement challenges.
As health systems strive to increase new patient acquisition and manage rising expectations amid growing operational complexity, they need more than call transcripts, summaries, and generalized AI. Marchex’s Healthcare AI Solution addresses this need by transforming unstructured conversation data into structured, contextual insights and recommended actions. This combination helps healthcare organizations improve operational efficiency, focus on appointments and actions with the highest potential impact, and optimize marketing campaigns for improved performance.
Marchex’s Healthcare AI Solution transforms patient conversations into actionable insights, including:
Post-Call Data: Measure patient conversion and fallout rates over time, and across different areas of the patient journey to make more informed decisions.
Actionable Insights: AI-driven insights that reveal why patients book and don’t book—such as appointment availability, pricing, insurance acceptance, lack of specific services offered, and more.
Marketing Optimization: Leverage healthcare-specific lead and appointment rate models to drive down the cost-per-lead for each channel and improve automated bidding.
Targeting and Attribution: Refine targeting strategies with detailed insights into which campaigns and channels perform best. Leverage advanced marketing attribution for patient leads and outcomes with the highest potential revenue impact.
“Marchex’s new healthcare solution delivers intelligence that better understands patient communication across their care journey with greater speed and precision,” said Edwin Miller, CEO of Marchex. “We empower leaders to respond proactively at scale across complex, single and multi-location health organizations to improve patient satisfaction and accelerate growth.”
Designed to Produce Outcomes Marchex’s Healthcare AI Solution provides advanced conversation analytics, understanding of patient intent, and enabling precise lead attribution and validation of marketing results. The Solution converts unstructured patient interactions into trackable insights, helping teams identify patient trends, make data-driven campaign adjustments, and maximize return on ad spend.
Cybersecurity delays in healthcare aren’t just an IT problem — they’re a patient safety risk. When systems go unpatched, cyberattacks can disrupt care, delay treatment, and even increase mortality. In fact, a McKinsey study found that 71% of hospitals impacted by cyber incidents experienced poor patient outcomes, and 12% reported an increase in deaths.
Despite these high stakes, many healthcare organizations struggle to keep pace with timely patching. The root of the problem lies in the fragmented mix of aging legacy systems and newer technologies, which complicates IT operations and leaves critical endpoints exposed. As digital transformation advances unevenly across the sector, slow patch cycles continue to undermine both security and care delivery.
To close these gaps, healthcare organizations must move beyond manual patching. By embracing autonomous patching solutions, they can accelerate remediation, reduce risk, and protect patient outcomes without sacrificing operational uptime.
Legacy Tech Is Slowing Healthcare Down
One of the most significant barriers to effective cyber defense in healthcare is the persistent use of outdated technology. Many organizations still rely on legacy equipment and software due to cost concerns, regulatory constraints, and the need for system interoperability. But this dependence on aging infrastructure makes it difficult to keep systems secure and patched.
Research shows that more than half of IT professionals find patching more difficult than identifying vulnerabilities. Meanwhile, cybercriminals can exploit known flaws in a matter of days, long before many healthcare providers are able to deploy fixes. With many organizations taking a week or more to patch, critical systems are left exposed to attacks that could compromise operations or endanger patients.
Healthcare systems must shift away from manual processes and adopt modern, intelligent patching strategies that can respond at machine speed.
Manual Patching Leaves Healthcare Exposed
The complexity of healthcare environments makes timely patching particularly challenging. Many systems like clinical applications and patient care devices cannot be taken offline without disrupting operations. As such, patching may be delayed for days or weeks, expanding the window of exposure and risk.
But the risks go beyond security. Downtime caused by patching delays can interfere with treatment schedules, lead to compliance failures, and put patient trust at risk. Manual patching also places a heavy burden on IT teams, especially in organizations with multiple facilities or geographically dispersed networks.
Automated patching tools eliminate these barriers. They allow updates to be rolled out consistently, during safe maintenance windows, and with minimal human intervention — reducing the burden on IT staff and minimizing disruptions to care delivery.
Protecting Healthcare IT in an Expanding Endpoint Landscape
From connected monitors and infusion pumps to mobile diagnostic tools, IoT devices are playing a growing role in patient care and clinical workflows. However, as these connected systems proliferate, they also increase the number of endpoints that healthcare IT teams must manage and protect, expanding the overall attack surface.
While many IoT devices run proprietary software that falls outside traditional patch management tools, they often interface with Windows-based servers, applications, and endpoints that are within IT’s domain. If those systems are left unpatched, they can serve as an entry point for attackers looking to pivot deeper into the network through associated devices.
Automated patching solutions help reduce this risk by keeping core IT systems, including servers, workstations, and laptops, consistently updated and secured. This limits opportunities for lateral movement and helps ensure the broader environment surrounding connected healthcare devices remains resilient against threats.
By centralizing and automating patch deployment across supported systems, healthcare organizations can strengthen their cyber defenses, reduce IT burden, and better protect the infrastructure that underpins patient care.
Past Lessons, Clear Priorities
The healthcare industry has weathered a wave of ransomware attacks in recent years, many of which disrupted care and highlighted systemic vulnerabilities. As we’ve seen, it only takes one employee mistakenly downloading malware to shut down ambulance services, close pharmacies, and take critical IT systems offline.
While these events have prompted investments in network segmentation, better access controls, and improved monitoring tools, one critical weakness remains: the slow, manual approach to patching. As long as known vulnerabilities remain unaddressed, even well-segmented networks and strong access policies can be undermined by outdated software, enabling malware to impact unpatched systems and devices.
To close this gap, healthcare organizations must make automated patching a foundational part of their cybersecurity strategy. By accelerating response times, minimizing manual intervention, and ensuring critical systems stay updated without downtime, autonomous patching helps safeguard both data and lives. In healthcare, every second counts, including the time it takes to patch a system.
Denials are on the rise across the healthcare industry, hitting outpatient rehabilitation clinics especially hard. Margins are tight, staffing is limited, and many clinics don’t have the resources or infrastructure that larger organizations do. This puts them at a real disadvantage when it comes to managing their revenue cycle.
Many clinics are simply trying to stay afloat. They’re scrambling to get bills out the door, then waiting to see what feedback comes from the payers. As a result, they end up with high rejection rates, high denial rates, and a significant amount of unpaid accounts receivable. It’s a reactive approach to turning visits into revenue, and it’s not working.
The Root Problem: Front-End Errors
At WebPT, we’ve analyzed our revenue cycle management data (RCM) across our base and found that 67% of all exceptions (rejections, denials, and unpaid accounts receivable) originate from errors made at the front end of the revenue cycle. This includes improper registration, patient eligibility issues, and a lack of prior authorizations.
These are preventable problems. And yet they show up repeatedly, as many clinics don’t have the tools or training to catch them early. The truth is, physical therapists went to school for physical therapy, not business. Many rehab therapy practices are built around that clinical mindset. In turn, the business side ends up being reactive and manual.
Solution: Shift Left to Move Upstream and Solve It
The best way to tackle denials is to “shift left.” That means identifying root causes and solving them earlier in the process, before the claim is submitted. Use data to do this. If you can access the right data, you can analyze it to understand the patterns. Then you can address the issues that are causing denials, rather than just reacting to them.
For example, train your front desk staff to verify patient eligibility before they are seen. Perhaps you need to ensure the patient is registered correctly, so that when the bill is sent, the payer recognizes them. Alternatively, you may need to check that prior authorizations are in place. Some of this is training. Some of it is process. Some of it is using technology. However, all examples require a shift from a reactive to a proactive approach.
Start With the Data
Everything starts with the data. Rejections and denials usually come from the clearinghouse. That’s structured data that you can organize in a meaningful way. Unpaid accounts receivable is a little more subjective, as it comes from the practice management system and the team’s follow-up work.
In many clinics, people are working on these claims one at a time. They’re so deep in the day-to-day that they can’t see the patterns. It requires a system that allows staff to flag the reasons for nonpayment, giving you data you can analyze.
From there, you can examine whether your patterns are associated with a person, a process, a provider, or a payer. The numbers tell the story. The data shows you what to fix, and in what order.
Avoid the One-Size-Fits-All Trap
One mistake clinics can make is over-indexing. Take prior authorization, for example. Every payer has different requirements. If you say, “I’m just going to get prior authorization for every patient,” that creates a new set of problems.
You need a flexible solution. One that looks at the payer and follows the right path for that patient. Otherwise, you’re creating unnecessary work and frustration.
Make It an Ongoing Practice
Remember, this is not a one-and-done effort. You don’t fix it once and walk away. Payer policies change. Staff turnover happens. Patients change insurance. You need to maintain this effort over time. This means regularly revisiting the data, retraining staff, and adjusting processes when necessary to account for changes. It’s not optional. It’s part of how you run a successful business in healthcare today.
The Bottom Line
Rehab therapy clinics can’t afford to be reactive. Denials are too costly, and the system is too complex. But by starting with the data, identifying root causes, and shifting left, clinics can stabilize their revenue cycle and focus more energy on delivering care.
The process isn’t easy. But it’s worth it. Because every time you prevent a denial, you’re one step closer to running a healthier, more resilient practice.
VIPRE Security Group, a global leader and award-winning cybersecurity, privacy, and data protection company, has released its email threat landscape report for Q2 2025.
Through an examination of worldwide real-world data, this report sounds the alarm on the most significant email security trends observed in the second quarter of 2025, enabling organizations to develop effective email security defenses for the remainder of the year.
Unidentifiable phishing kit deployments
A striking 58% of phishing sites now use unidentifiable phishing kits. Cybercriminals are deploying unidentifiable phishing kits to propagate malicious campaigns at scale, indicating a trend towards custom-made or obfuscated deployments. These phishing kits can’t easily be reverse-engineered, tracked, or caught. AI makes them affordable, too. Among the most prevalent are Evilginx (20%), Tycoon 2FA (10%), 16shop (7%), with another 5% attributed to other generic kits.
Manufacturing is the top target sector
For the sixth quarter in a row, the manufacturing sector remains the prime target for cybercriminals. In Q2 2025, manufacturers faced the highest volume of email-based attacks – 26% of all incidents – encompassing BEC, phishing, and malspam threats. Retail follows, accounting for 20% of attacks.
Healthcare is close behind at 19%, reflecting a consistent trend observed since last year and through Q1 2025.
English-speaking executives remain the most targeted for BEC emails (42%), a significant portion are Danish (38%), with the Swedish and Norwegian comprising a combined 19%. Critical corporate communications – especially within HR, finance, and executive teams – often take place in native languages, making localized attacks more convincing.
Impersonation is the most common technique used in BEC scams, with 82% of attempts targeting CEOs and executives. The remaining impersonation efforts are aimed at directors and managers (9%), HR personnel (4%), IT staff (3%), and school heads (2%).
Lumma Stealer, the malware family of the quarter
Lumma Stealer is the most encountered malware family found in the wild during Q2. Analysis shows that it is often delivered via malicious .docx, .html, or .pdf attachments, or through phishing links hosted on compromised or legitimate-looking cloud services such as OneDrive, and Google Drive.
Lumma Stealer is sold as Malware-as-a-Service (MaaS), making it accessible to a broad range of cybercriminals. With active developer support and low cost, it is proving attractive to both novices and experienced cybercriminals.
Top bait, hook, and reel-in tactics
Financial lures representing 35% of the samples – emails regarding money, financial errors, fiduciary imperatives, and such – are the number one ploy used by cybercriminals to get users to open malicious emails. Urgency-based messaging (25%) is the second most tried approach, followed by account verification and updates (20%), travel-themed messages (10%), package delivery (5%), and legal or HR notices (5%).
For phishing delivery, the majority (54%) of cybercriminals leveraged open redirect mechanisms, with legitimate-looking links hosted on marketing services, email tracking systems, and even security platforms to mask the true malicious destination. Compromised websites (30%) are the next most prevalent link delivery method, followed by the use of URL shorteners (7%).
While PDFs (64%) remain the preferred vehicle for delivering malicious attachments, an increasing number now feature embedded QR codes designed to carry out attacks.
Finally, cybercriminals are finishing off their attacks with various exploitation mechanisms, the most observed being HTTP POST to remote server accounting (52%) and email exfiltration (30%).
“It’s clear what the threat actors are doing – they are outsmarting humans through hyper-personalized phishing techniques using the full capability of AI and deploying at scale,” Usman Choudhary, Chief Product and Technology Officer, VIPRE Security Group, says. “Organizations can no longer rely on standard cybersecurity processes, techniques, and technology. They need comprehensive and advanced email security solutions that can help them to deploy like-for-like defenses – at the very least – if not help them stay a step ahead of the tactics used by cybercriminals.”
VIPRE leverages its vast understanding of email security to equip businesses with the information they need to protect themselves. This report is based on proprietary intelligence gleaned from round-the-clock assessment of the cybersecurity landscape.