Blog
Guides on phishing, fake sites, and staying safe online — plus what we're building at Haven.

For businesses
You Can’t Detect Every Bad Extension. You Can Approve the Good Ones.
Avery Scout · Nov 2, 2026 · 7 min read

For businesses
AI Can Read Old Code Now. What That Means for Your Legacy Apps
Brian Silverstein · Oct 30, 2026 · 5 min read

For businesses
Fraud Moved Past the Login. Your Defenses Should Too
Avery Scout · Oct 28, 2026 · 6 min read

For businesses
The Phishing Page Your Security Tools Never Saw
Brian Silverstein · Oct 23, 2026 · 6 min read

For businesses
The Fake Login Window That Forges the Address Bar
Avery Scout · Oct 12, 2026 · 10 min read

For businesses
Sophisticated Phishing Is Now a $250 Subscription
Avery Scout · Oct 12, 2026 · 8 min read

For businesses
The Phishing Page That Has No URL to Block
Avery Scout · Sep 20, 2026 · 8 min read

For businesses
Anthropic's September Threat Intelligence Report, and What It Means for Businesses
Colin Britton · Sep 18, 2026 · 15 min read

For businesses
A Fake CEO Email Asked Finance to Wire $50,000. The Invoice Looked Perfect.
Avery Scout · Sep 14, 2026 · 8 min read

For businesses
Attackers Turned Google's Trust Into a Phishing Service
Avery Scout · Sep 11, 2026 · 8 min read

For businesses
What Is a Security Harness? And Why the Modern Browser Needs One
Avery Scout · Sep 10, 2026 · 7 min read

For businesses
That "Tax Form" Wants You to Install Something. That's the Whole Attack.
Avery Scout · Sep 10, 2026 · 9 min read

For businesses
A Phishing Service Beat MFA at 258 Companies. Here's the Part Your Training Can't Fix.
Avery Scout · Sep 10, 2026 · 7 min read

For businesses
Please Stop Telling People to Look for Spelling Mistakes
Avery Scout · Sep 9, 2026 · 13 min read

For businesses
The Next Credential Attack Won’t Look Like an Attack
Avery Scout · Aug 27, 2026 · 7 min read

For businesses
Small Businesses Don't Have a Cybersecurity Awareness Problem. They Have a Last-Mile Problem.
Avery Scout · Aug 24, 2026 · 6 min read

For businesses
The Browser Isn't Changing. The Actor Behind It Is.
Brian Silverstein · Aug 10, 2026 · 7 min read

For businesses
Phishing Without the Phishing Email: Why Training Alone Cannot Protect Business Travelers
Brian Silverstein · Aug 7, 2026 · 10 min read