Blog

Guides on phishing, fake sites, and staying safe online — plus what we're building at Haven.

You Can’t Detect Every Bad Extension. You Can Approve the Good Ones.
For businesses

You Can’t Detect Every Bad Extension. You Can Approve the Good Ones.

Avery Scout · Nov 2, 2026 · 7 min read
AI Can Read Old Code Now. What That Means for Your Legacy Apps
For businesses

AI Can Read Old Code Now. What That Means for Your Legacy Apps

Brian Silverstein · Oct 30, 2026 · 5 min read
Fraud Moved Past the Login. Your Defenses Should Too
For businesses

Fraud Moved Past the Login. Your Defenses Should Too

Avery Scout · Oct 28, 2026 · 6 min read
The Phishing Page Your Security Tools Never Saw
For businesses

The Phishing Page Your Security Tools Never Saw

Brian Silverstein · Oct 23, 2026 · 6 min read
The Fake Login Window That Forges the Address Bar
For businesses

The Fake Login Window That Forges the Address Bar

Avery Scout · Oct 12, 2026 · 10 min read
Sophisticated Phishing Is Now a $250 Subscription
For businesses

Sophisticated Phishing Is Now a $250 Subscription

Avery Scout · Oct 12, 2026 · 8 min read
The Phishing Page That Has No URL to Block
For businesses

The Phishing Page That Has No URL to Block

Avery Scout · Sep 20, 2026 · 8 min read
Anthropic's September Threat Intelligence Report, and What It Means for Businesses
For businesses

Anthropic's September Threat Intelligence Report, and What It Means for Businesses

Colin Britton · Sep 18, 2026 · 15 min read
A Fake CEO Email Asked Finance to Wire $50,000. The Invoice Looked Perfect.
For businesses

A Fake CEO Email Asked Finance to Wire $50,000. The Invoice Looked Perfect.

Avery Scout · Sep 14, 2026 · 8 min read
Attackers Turned Google's Trust Into a Phishing Service
For businesses

Attackers Turned Google's Trust Into a Phishing Service

Avery Scout · Sep 11, 2026 · 8 min read
What Is a Security Harness? And Why the Modern Browser Needs One
For businesses

What Is a Security Harness? And Why the Modern Browser Needs One

Avery Scout · Sep 10, 2026 · 7 min read
That "Tax Form" Wants You to Install Something. That's the Whole Attack.
For businesses

That "Tax Form" Wants You to Install Something. That's the Whole Attack.

Avery Scout · Sep 10, 2026 · 9 min read
A Phishing Service Beat MFA at 258 Companies. Here's the Part Your Training Can't Fix.
For businesses

A Phishing Service Beat MFA at 258 Companies. Here's the Part Your Training Can't Fix.

Avery Scout · Sep 10, 2026 · 7 min read
Please Stop Telling People to Look for Spelling Mistakes
For businesses

Please Stop Telling People to Look for Spelling Mistakes

Avery Scout · Sep 9, 2026 · 13 min read
The Next Credential Attack Won’t Look Like an Attack
For businesses

The Next Credential Attack Won’t Look Like an Attack

Avery Scout · Aug 27, 2026 · 7 min read
Small Businesses Don't Have a Cybersecurity Awareness Problem. They Have a Last-Mile Problem.
For businesses

Small Businesses Don't Have a Cybersecurity Awareness Problem. They Have a Last-Mile Problem.

Avery Scout · Aug 24, 2026 · 6 min read
The Browser Isn't Changing. The Actor Behind It Is.
For businesses

The Browser Isn't Changing. The Actor Behind It Is.

Brian Silverstein · Aug 10, 2026 · 7 min read
Phishing Without the Phishing Email: Why Training Alone Cannot Protect Business Travelers
For businesses

Phishing Without the Phishing Email: Why Training Alone Cannot Protect Business Travelers

Brian Silverstein · Aug 7, 2026 · 10 min read
When the Phishing Email Really Comes From Meta: The Business Account Attack
For businesses

When the Phishing Email Really Comes From Meta: The Business Account Attack

Colin Britton · Aug 2, 2026 · 9 min read
Meta Verification Phishing: How the Blue Badge Scam Takes Over Facebook Pages
For businesses

Meta Verification Phishing: How the Blue Badge Scam Takes Over Facebook Pages

Colin Britton · Aug 1, 2026 · 8 min read
What Is Spear Phishing? A Business Guide to Targeted Attacks and BEC
For businesses

What Is Spear Phishing? A Business Guide to Targeted Attacks and BEC

Brian Silverstein · Jul 24, 2026 · 8 min read
Microsoft 365 Phishing That Beats MFA: Fake Logins
For businesses

Microsoft 365 Phishing That Beats MFA: Fake Logins

Brian Silverstein · Jul 22, 2026 · 7 min read
The LastPass Phishing Email Targeting Businesses: How It Works and How to Stop It
For businesses

The LastPass Phishing Email Targeting Businesses: How It Works and How to Stop It

Colin Britton · Jul 20, 2026 · 8 min read
How invoice fraud works, and how to protect your business
For businesses

How invoice fraud works, and how to protect your business

Brian Silverstein · Jul 15, 2026 · 6 min read
Malicious Browser Extensions Are Stealing Enterprise Logins, and MFA Doesn't Stop It
For businesses

Malicious Browser Extensions Are Stealing Enterprise Logins, and MFA Doesn't Stop It

Colin Britton · Jul 9, 2026 · 7 min read
Why Browser Security for Business Starts With Catching the Lie, Not the Malware
For businesses

Why Browser Security for Business Starts With Catching the Lie, Not the Malware

Colin Britton · Jul 8, 2026 · 8 min read
Haven Opens Design Partner Program for Businesses and MSPs
For businesses

Haven Opens Design Partner Program for Businesses and MSPs

Colin Britton · Jul 7, 2026 · 2 min read
Load more
Phishing, Scams & Online Security Blog — Page 3 | Haven