When someone claims click time scanning can stop phishing, here is why that belief keeps people unsafe

After I posted about the limits of AI in detecting phishing links on LinkedIn, a security provider replied with a familiar example. They pointed to a product feature called Click Time Protection and claimed it can stop phishing by rewriting links and inspecting them at the moment a person clicks. They said it checks URL […]
Everyone thinks AI will save cybersecurity. It won’t – it can’t stop phishing.

After hundreds of billions spent on cybersecurity and the arrival of AI promising to transform it, this article explains why people will still be told the same thing. “Stay vigilant.” “Check suspicious links.” “Don’t trust unexpected messages.” We’ve built an entire industry around technology that tells people to be careful because it can’t protect them. […]
The Evolution of Phishing and the Return of Digital Trust

Phishing has shaped the internet more than any other online threat. It began with simple impersonation on AOL and has since adapted to every new communication platform, from email to mobile messaging. Yet, despite decades of technological progress, the technique itself has barely changed. What’s different today is not how phishing works, but where it […]
The illusion of evolution: why the “Smishing Deluge” isn’t new and what Palo Alto missed

Palo Alto Networks recently described a “sophisticated global smishing operation” built on a complex ecosystem of brokers, developers, and spammers. The language is familiar. Every major vendor publishes similar reports each year, filled with technical diagrams and claims of evolution and complexity. Yet the outcome never changes. People are still told to stay vigilant, and […]
Why protecting the true meaning of Zero Trust for web links and phishing protection matters

Picture this. You manage security for a government agency or large corporation and you need a reliable way to protect employees from phishing on mobile devices. You will learn what Zero Trust means for web links, how it differs from threat detection, what a Cloudflare and iVerify announcement really does, and why preserving the definition […]
What if “stay vigilant” is proof that cybersecurity is broken?

Imagine buying a smoke alarm and being told by the company, “We’ll protect you from fires, but stay vigilant in case one we haven’t seen before engulfs your home.” You’d think they’d lost their minds. Nobody buys a safety device that shifts responsibility back to the user the moment it’s needed most. And yet, that’s […]
OpenAI’s Atlas browser: a new browser, but an old mistake

OpenAI’s new browser, Atlas, feels like a glimpse of the future. It’s fast, elegant, and powered by an AI that can explain, summarise, and search across everything you see online. But beneath the excitement lies a quiet omission that repeats one of the web’s oldest mistakes. Atlas launched without support for third-party extensions. No password […]