Did the Knicks’ phishing test go too far? Plus, hackers pose as IT in Teams

Visit Security Intelligence podcast page to get more AI content → https://ibm.biz/~vrweMGEy6 Click to claim your free Knicks championship ring, and you might end up in security training. First, MSG sends staff an offer to pick their own championship ring, and everyone who clicks lands in mandatory security training. Timely lures catch real behavior, but the panel debates whether a test this real makes employees wary of the emails they actually need. Then, Arctic Wolf traces more than 400 incidents of attackers flooding inboxes with sign-up emails, then posing as IT support in Teams chats. As one panelist points out, real IT already has access to your machine, so it should never need you to open a remote session. Finally, CISA confirms attackers are exploiting two critical PHP flaws, and 263,000 end-of-life instances in the US alone will never get a patch. Do you know which versions you’re running? All that and more on Security Intelligence. 0:00 – Intro 1:04 – MSG's championship ring phishing test 8:34 – Hackers pose as IT in Microsoft Teams 19:21 – PHP2Shell flaws exploited in the wild "The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication." AI news moves fast. Sign up for a monthly newsletter for AI updates from IBM → https://ibm.biz/~9IfKz4JuD #phishingsimulation #cybersecurity #vulnerabilitymanagement AI was used in the creation of the transcript and metadata for this video.