We wanted to take a minute to share some trends we are seeing in recent security incidents. This is from a combination of AT's experience and industry intelligence from sources such as our partners and the FBI. Taken together, these trends can offer simple steps to help protect yourself and your organization.

Trend #1: Social Engineering 
Many of the attacks we see combine trends 2 & 3 with social engineering. The one thing that can override much of the security protections put in place is the person on the keyboard. There are two common ruses: making the abnormal seem normal and causing alarm. In one instance, attackers noticed a promotion on LinkedIn, and sent a fake HR request for paperwork related to payroll change. This person then logged into what they thought was Office 365, even providing MFA authorization to the attackers. The most common tactic is to alert someone to large charges on their credit card, Amazon account, Apple account etc. and give them a method to stop the charges by calling the attacker. Panic overrides the brain's normal logic, so this is a very successful technique.

What can you do to protect your staff from social engineering?

1. Frequent security awareness training. While every training does not touch on all methods of attack, just watching the security video reminds staff to be vigilant. AT recommends quarterly training at a minimum.
2. Strong MFA. MFA can help protect against social engineering, and some services, such as Office 365, now offer updated versions of MFA which include protection against the most common social engineering attack methods. 
3. Remind staff to be suspicious. Many people still view these warnings with skepticism, thinking they're not a target or that their data isn't confidential, so data theft isn't a major concern. Even when nothing valuable is lost or stolen, dealing with a security incident is very disruptive to the individual and the company, and can be an unexpected and unwelcome expense.

Trend #2: Stolen Passwords
Attackers are no longer hacking their way into accounts: they are using passwords stolen from other services to log right in. Websites and data are compromised every day from various sources, and often these compromises do not result in proper notification to customers. This means it is not safe to use the same password on multiple websites, or the same password you use for work on any other website. Additionally, when the attackers need MFA as a second step, they will utilize techniques such as sending numerous MFA requests to the user until the user gives in and clicks Yes/Allow. 

What can you and your staff do to protect your company from this trend?
 

1. Never use the same password for work accounts that you use for personal accounts.
2. Use a password manager to generate unique passwords for every service, and ensure they are long and complex. (AT has partnered with Keeper, if you would like more information contact Noah Barbel)
3. Advise staff to never allow/accept unexpected MFA requests and report them to IT.

Trend #3: Apple ID Compromise 
AT has seen multiple Apple IDs get compromised, causing compromised corporate cloud accounts and hardware. Many people use SMS on their iPhone for multi factor into work accounts. Since iCloud shares SMS messages across all registered devices, a compromised Apple ID can unlock those cloud accounts. Additionally, a compromised cloud account allows attackers to wipe or lock Apple computers.

How can you protect your staff and company from this threat?

1. Ensure Apple IDs for staff are well secure, with strong passwords and MFA. Many people are using the same Apple ID password from when they bought their first iPhone.
2. Never give your Apple ID credentials to anyone, ever.
3. Avoid using SMS for MFA.

Lo-fi and hi-fi prototypes are essential tools in the design and development process, each serving distinct purposes and offering unique benefits. 

Join in the golfing fun or sponsor the Chicago Golf Outing Benefiting ASAE Research Foundation:
Monday September 22, 2025