The CISO
Resource Center

Expert-curated resources for cybersecurity leaders. Playbooks, white papers, checklists, and more to help you stay ahead and strengthen your modern security program.

Wednesday, August 19, 2026

This week on Threat Wire

CISA KEV
Microsoft MSHTML Remote Code Execution Actively Exploited
NSA BULLETIN
AI-Synthesized Executive Voice Fraud Targeting Wire Transfers
CVE ALERT
Zero-Day in Fortinet FortiGate SSL-VPN Exploited in the Wild

Read This Week’s Brief

Editor’s Picks

guide

Security Buyer's Guide to AI Governance

Practical strategies for identifying AI-generated deepfake threats, mitigating risk, and safeguarding your organization's workforce.

articleMay 13, 2026

The Importance of Cybersecurity Awareness Training: The Complete Guide to Defending the Human Layer in the AI Era

playbookMay 13, 2026

AI Just Built Its First Zero-Day Exploit. Here’s What Security Teams Should Know.

whitepaperMay 13, 2026

Cybersecurity Awareness Training Platform Features: The Complete Evaluation Guide

Free Weekly Intelligence

Stay ahead of the threat landscape.

Threat Wire is a free weekly brief built for security leaders who need to know what’s happening – not everything that’s happening. Every Wednesday: five prioritized threats, sourced from CISA, NSA, and InfraGard, each with a clear action step.

The CISOResource Center

This week on Threat Wire

Editor’s Picks

Security Buyer's Guide to AI Governance

The Importance of Cybersecurity Awareness Training: The Complete Guide to Defending the Human Layer in the AI Era

AI Just Built Its First Zero-Day Exploit. Here’s What Security Teams Should Know.

Cybersecurity Awareness Training Platform Features: The Complete Evaluation Guide

Stay ahead of the threat landscape.

All Resources

GPcode: The Ransomware That Turned Extortion Into a Math Problem

Ingram Micro: The Ransomware Attack That Ran Through One Login

Fairlife: When a Ransomware Claim Became a Confirmed Breach

Coca-Cola: Two Ransomware Claims, Three Years Apart

GandCrab: The Ransomware That Turned Extortion Into a Subscription Business

WannaCry: The Ransomware That Moved at the Speed of a Worm

Cryptorbit: The Ransomware That Skipped the Hard Part and Still Got Paid

A History of Notable Ransomware Attacks

Phishing Email Quarantine: How to Review, Release, Report, or Delete Messages Safely in Microsoft 365

Deepfake AI Detection Tools for Social Media: How to Verify Content and Respond to Synthetic Media Safely

Security Awareness Training Platform Data Residency: A Buyer’s Guide to Hosting, Privacy, and Compliance

Phishing Email Response Checklist: How to Contain Cyberthreats, Preserve Evidence, and Recover Securely After an Attack

Email Security Solution Migration: A Complete Guide to Planning, Cutover, Validation, Rollback, and Recovery

AI Phishing Threat Modeling: A Practical Framework to Prioritize Risk and Strengthen Defenses Across Every Channel

Email Incident Response Automation: How to Detect, Investigate, and Contain Phishing Faster Across the Email Environment

Email Account Takeover Fraud: Warning Signs, Response Steps, and Controls That Reduce Financial Risk

AI Phishing Detection False Positives: Causes, Metrics, and Controls for Safer Alert Triage in Production

Email Security Audit: Complete Checklist to Test Identity, Cloud Mail, Human Risk, and Incident Response

Malicious URL Detection: How to Check Links, Evaluate Scanners, and Stop Phishing at Scale Across the Enterprise

Deepfake Awareness Training for Executives: Build Verification Skills That Protect Payments, Data, and Trust

Deepfake Defense Policy: A Practical Framework for Verifying Requests and Reducing Organizational Fraud Risk

Ransomware Reporting for Employees: Complete Steps to Contain Risk, Preserve Evidence, and Support Recovery

Enterprise Security Awareness Training Audit: Complete Checklist for Proving Coverage, Behavior Change, and Control Effectiveness

Microsoft 365 Account Takeover: A Practical Guide to Detection, Response, Recovery, and Prevention at Scale

Deepfake Detection for Video Calls: How Real-Time Tools Expose Fraud and Strengthen Identity Verification

Phishing Awareness Training Checklist: How to Build, Measure, and Improve a Safer Program Across Every Channel

Deepfake Awareness Training for HR Employees: A Practical Guide to Detecting and Responding to Fraud

Email Security for Healthcare: HIPAA Requirements, Encryption, and Best Practices for Safer Patient Communication

WannaCry Ransomware: How It Works, Who Was Behind It, and Whether It Is Still a Threat

How to Check if an Email Is Phishing: A Safe Guide to Links, Attachments, Reporting, and Recovery Steps

Cybersecurity Awareness Training Program Charter: A Practical Guide to Governance, Risk Alignment, and Continuous Improvement

Lookalike Domain Phishing: How to Detect Impersonating Domains and Reduce Credential Theft and Fraud

Deepfake Awareness Training Checklist: 12 Steps to Protect an Organization From AI-Powered Fraud and Impersonation

Spear Phishing Incident Response: A Complete Playbook for Containing Targeted Attacks Before They Spread

Ransomware Preparedness Checklist: How to Protect, Detect, and Recover Before a Cyberattack Costs Millions

Security Awareness: Definition, Examples, and a Practical Guide to Building a Measurable Human Risk Program

Email Advanced Threat Protection Limitations: The 10 Gaps That Let Phishing and BEC Reach the Inbox

Enterprise Security Awareness Training Operating Model: The Complete Framework for Designing a Board-Ready Human Risk Program

End User Security Awareness Training Principles: 7 Core Tenets That Change Behavior and Cut Human Risk in the AI Era

Deepfake Identity Theft: How It Works, Detection, Scams and Protection From Biometric Attacks for Consumers and Businesses

Interactive Phishing Simulation Tools: The Complete Guide for Testing Email, Voice, and Deepfake Threats

AI Phishing Simulation: How It Works, Key Metrics, and How to Build a Multi-Channel Program That Cuts Human Risk

Deepfake Awareness Training Scenarios: 10 Exercises That Build Verification and Reporting Skills Across the Organization

Spear Phishing Risk Assessment: A 3-Phase Framework to Measure and Reduce Human Risk Across People, Technology, and Processes

AI Deepfake Attack Types: A Complete Guide to Detection, Prevention, and Fraud Response Across Business Workflows

Deepfake Audio Detection: How AI Finds Cloned Voices, Verifies Recordings, and Reduces Voice Fraud Risk

How to Check Phishing Links Safely: A Practical Guide to Inspecting, Verifying, and Reporting Suspicious URLs

Security Awareness Training Program Scope: The Complete Guide to Defining, Launching, and Measuring Human Risk

Deepfake Fraud Prevention for Finance Teams: How to Stop AI Payment Scams and Protect Approval Workflows

Stopping the IT Call Hitting Hedge Funds and Wall Street Firms

AI Agents Are Starting to Hack on Their Own. Security Teams Can Meet This Moment Ready.

Deepfake Identity Verification: How It Works, Where Controls Fail, and How to Build Layered Defenses

How to Encrypt Email Attachments: Secure Methods for Gmail, Outlook, Windows, and macOS

Email Incident Communication Plan: Templates, Roles, and Timelines for Faster, Safer Stakeholder Updates

Phishing Email Headers: How to Read, Trace, and Validate Suspicious Messages Safely Before Escalation

Email Phishing Campaigns: How Cyberattacks Work, How to Run Safe Phishing Simulations, and How to Reduce Human Risk

Phishing Email Subject Lines: 50 Examples, Warning Signs, and Safe Response Steps for Employees and Security Teams

Email Security Automation: How AI Detection and Response Reduce Phishing Risk at Scale Without Losing Human Oversight

Email Security False Positives: Causes, Costs, and Safer Ways to Restore Legitimate Mail Without Weakening Phishing Protection

Deepfake Risk Management: A 9-Stage Framework for Enterprise Defense Against Fraud, Impersonation, and Social Engineering

Autonomous AI Phishing Agents: How Agentic Attacks Work and How to Defend Across Email, Voice, SMS, and Video

Phishing Email Filtering: How It Detects Cyber Threats and Where Layered Defense Still Matters for Business

What Is Phishing: Common Tactics, Real Examples, and How to Prevent Phishing Attacks and Stay Safe From Online Scams

Phishing Glossary: 70+ Terms, Attack Types, Warning Signs, and Prevention Tips for Stronger Human-Layer Security

How to Recover from Ransomware: A Step-by-Step Guide to Data Restoration, System Rebuilding, and Post-Incident Hardening

Phishing Prevention Checklist: How to Build a Complete Defense Framework That Stops Modern Attacks Before They Reach Employees

Enterprise Security Awareness Training Program Selection: A Data-Driven Framework for Reducing Human Risk at Scale

Why Are Phishing Attacks So Dangerous: AI-Powered Deception, Massive Financial Losses, and Why Technical Defenses Alone Fail

The Risks of Not Having Cybersecurity Awareness Training: Financial, Regulatory, and Operational Exposure of an Untrained Workforce

Email Security Awareness: The Complete Guide to Protecting Organizations from Phishing and Email-Based Cyberthreats

AI Governance Strategy: The Complete Guide to Frameworks, Implementation, and Best Practices for Enterprise Leaders

The CISO
Resource Center