The Veriti Spottr Cybersecurity Brief

Emerging Threat AI Fraud July 2026  ·  7 min read Voice cloning fraud surged 1,633% in a single quarter. A convincing clone of any executive's voice can now be built from three seconds of publicly available audio — an earnings call, a podcast, a conference talk, a LinkedIn video. The attacker calls your finance team in that voice, with manufactured urgency, and asks for a wire transfer. The average loss is over $500,000. Here's how the attack works and the one defense that stops it. The Cushman & Wakefield breach in this series started with a phone call — a human attacker social-engineering an IT help desk. The technique worked because humans are wired to be helpful and to trust a voice that sounds legitimate. Now imagine that same attack, except the voice on the phone isn't a stranger doing an impression. It's a perfect clone of your CEO. Your CFO. Your IT manager. Someone the employee has spoken to a hundred ...

Financial Risk Insurance Reality June 2026  ·  8 min read Your Cyber Insurance Policy Has a Secret. 40% of Claims Get Denied. Here's What Voids Yours. 71% of CFOs believe their cyber insurance policy covers most attack-related losses. The data says otherwise. 40% of claims are denied. 27% of data breach claims hit exclusions that result in no payout or partial payout. The coverage you're paying for may not be the coverage you'll receive — and the reasons are buried in the policy language most SMB owners have never read. Cyber insurance was supposed to be the safety net. The post-breach survival plan. The thing that meant a $254,000 average attack cost didn't necessarily mean $254,000 out of pocket. And for businesses that understand exactly what their policy covers, maintain the controls their policy requires, and report incidents within the required window — it often is. For businesses that don't, ...

Breaking Research Credential Crisis June 2026  ·  7 min read On June 12, 2026, security researchers discovered a publicly accessible database containing 24 billion records — usernames, email addresses, plaintext passwords, and the login URLs they unlock. The database is now offline. The credentials are not. Here's what this means for your business and the five actions to take right now. The first thing the researchers did when they saw the number was check it again. Then they checked it a third time. Twenty-four billion records. More than 8.3 terabytes of data, stored in a publicly accessible Elasticsearch cluster discovered on June 12, 2026. The database contained usernames, email addresses, plaintext passwords, and the specific login URLs that those credentials could be used to access. The database was taken offline by June 15 — three days after discovery. But the credentials did not disappear when the database w...

Threat Briefing AI & Cyber Risk June 2026  ·  6 min read The intelligence agencies of five nations just issued a rare joint warning that AI is rewriting the rules of cyberattacks — fast. The headlines are aimed at governments and corporations. But buried in the advisory is a sentence that should change how every small business owner thinks about the year ahead. Here's what it actually says, and what to do about it before you're the one finding out. On June 22, 2026, the cybersecurity chiefs of the United States, United Kingdom, Canada, Australia, and New Zealand — the alliance known as the Five Eyes — did something they almost never do. They put their names to a single joint statement and told the world to brace for impact. The document is titled "The AI shift in cyber risk: why leaders must act now." Its core finding is blunt: the most advanced AI models are improving fast enough to outpace today'...

Financial Impact Action Guide June 2026  ·  7 min read Three in four small business owners say a ransomware attack would end their business. Not inconvenience it. End it. That's not a statistic about companies that got hacked — it's a statistic about companies that haven't been hacked yet. Including, very possibly, yours. Here's what the financial math actually looks like, and what prevention costs compared to what recovery costs. There's a statistic that circulates constantly in cybersecurity writing claiming that 60% of small businesses close within six months of a cyberattack. It's widely repeated, intuitively plausible, and — as the National Cyber Security Alliance confirmed in a 2022 public statement — unverifiable. They disavowed it. The original source doesn't exist. We're not going to use it. The verified numbers are more alarming anyway. 75% of small businesses ...