Take 5 minutes to find out where your defenses fail

Blog — Page 4

How Phishing Sites Trick AI Agents

When Phishing Sites Are Built to Fool Your AI Agent, Not You

See how hidden prompt injections turn phishing sites into traps for AI agents, and what security teams need to detect and disrupt next.

ClickFix Attacks: When Victims Install the Malware

ClickFix Attacks: When Victims Install the Malware

ClickFix scams turn fake CAPTCHAs and browser errors into malware delivery. Learn how the attack works, what to watch for, and how to respond.

Ines Marjanovic

GhostCode Attack: From Contact Form to Account Takeover

GhostCode Attack: From Contact Form to Account Takeover

GhostCode starts with a business contact form and ends with stolen Microsoft tokens. Follow the attack chain and learn how to stop it.

Ines Marjanovic

Device Code Phishing: The MFA Bypass Without a Fake Login

Device Code Phishing: The MFA Bypass Without a Fake Login

Device code phishing sends victims to a real Microsoft sign-in page, then steals the resulting token. Learn how it works and how to defend against it.

Ines Marjanovic

What to Do in the First Hour After You Discover a Lookalike Domain

What to Do in the First Hour After You Discover a Lookalike Domain

Spotted a lookalike domain spoofing your brand? Use this 60-minute response playbook to preserve evidence, assess risk, and start disrupting the infrastructure.

Ines Marjanovic

Scattered Spider’s Playbook: What You Need to Know in 2026

Scattered Spider’s Playbook: What You Need to Know in 2026

Scattered Spider keeps turning help desk trust into initial access. See what changed through 2026 and how to harden resets, MFA, and frontline decisions.

Ines Marjanovic

Building a Social Engineering Defense Platform for Humans and AI Agents

Building a Social Engineering Defense Platform to Protect Both Humans and AI Agents

Social engineering attacks are evolving beyond humans. Learn how Doppel is building a defense platform to protect both humans and AI agents across the social engineering attack chain.

Point Solutions vs Platform: Hidden Security Costs

Point Solutions vs Platform: The Hidden Cost of Stitching Together DRP, HRM, and Email Security

Compare the true cost of stitching together DRP, HRM, and email security with a unified platform that shares context and coordinates action.

Ines Marjanovic

Why Employees Stop Reporting Suspicious Emails

Why Employees Stop Reporting Suspicious Emails

Learn how punitive phishing programs suppress reporting — and how positive feedback, better metrics, and automated triage build resilience.

Learn how Doppel can protect your brand from social engineering attacks

Join hundreds of companies already using our platform to protect their brand and people from social engineering attacks.