Dune Security @DuneSecurity

One wrong click can trigger a multi-million dollar disaster. 90% of data breaches still start with user behavior. Not malware or firewall failures, but a trusted employee making a single, human mistake. Attackers know this. That’s why they target the User Layer, manipulating…

🎯 Why rob a bank when you can hack one? Marco Maiurano, CISO at First Citizens Bank, explains why banks remain one of the most valuable and strategically targeted sectors for cybercriminals and nation-state actors. Ransomware kits, bribed call center staff, and third-party…

💸 BEC has already cost orgs $55B and AI is making it worse. • $4.89M avg per attack • Deepfake calls & voice clones • AI mimics exec tone + workflows • No malware. Just urgent, believable asks • Victims wire funds, share payroll, reroute $$ 🔗 How BEC works and how Dune…

🎯 Phishing 3.0 weaponizes human error across email, SMS, voice, and apps. These attacks: • Strike across multiple channels • Use AI to mimic execs & workflows • Deploy deepfake calls + video • Stack platforms to build urgency + trust • Hit at strategic moments when users…

🎓 Ghost students are stealing millions in federal aid. Criminal rings are using fake IDs, bots, and AI to exploit college systems: • $90M+ in aid stolen already • 1.2M flagged apps in CA alone • 60% of applicants fake at some schools • Bots submitting AI-written coursework…

🚨 Major cyberattack hits United Natural Foods (UNFI), the main distributor for Whole Foods. Key impact: - Systems shut down - $31B supplier to 30,000+ stores - Whole Foods customers report empty shelves - Stock down 9% 🔗 Learn more: cnn.com/2025/06/09/foo… #CyberAttack…

“There will be upskilling of people in many areas that AI is going to bring along” — Hussein Syed, SVP & CISO, RWJBarnabas Health In our Securing Healthcare webinar, Hussein discusses the role of language models in decision support, the risks of biased data, and why orgs must…

We had a great time this week at the GuidePoint Mid-A Office Event in DC! 🚀 It's always a pleasure spending time with our valued partners, security executives, and industry peers while chatting about User Adaptive Risk Management. Big thanks to the GuidePoint Security team for…

keyboard_arrow_left Previous keyboard_arrow_right Next

🛡️ How do top CISOs protect healthcare in 2025? Our CEO @daviddellapelle sat down with two of the country’s top healthcare CISOs: Patrick Phalan (UCSF) and Hussein Syed (RWJBarnabas Health). They recorded “Securing Healthcare,” a webinar focused on the current threat landscape…

"Fashion giant Victoria's Secret has taken down its website and some store services because of an ongoing security incident" - @BleepinComputer External experts are investigating as stores stay open and restoration continues. Similar recent attacks on Dior, Adidas, and M&S…

"Scammers are raking in more than ever from basic email and impersonation schemes. Last year, the FBI estimates, they made off with a whopping $16.6 billion." - @axios With tools like ChatGPT, phishing emails are no longer full of typos or awkward grammar. They're polished,…

🚨 The FBI is warning law firms and financial organizations across the U.S.: A cybercrime group known as Luna Moth is running a stealth phishing campaign using fake IT support calls and email scams. Victims are tricked into calling bogus helpdesk numbers. On the phone, they’re…

We had a great time at Fogo de Chão in Chicago on Wednesday for our Cyber & Steak Roundtable! 🥩🍷 It’s always a pleasure connecting with security leaders over an incredible meal and meaningful conversations around User Adaptive Risk Management. Thank you to everyone who joined…

Amazing day at @SecureWorld Chicago 2025! 🚀 Dune Security was proud to sponsor this event and connect with CISOs and security leaders at this standout conference. Thanks to everyone who attended our CEO @daviddellapelle's AI in cybersecurity panel and visited our booth to…

keyboard_arrow_left Previous keyboard_arrow_right Next

“AI systems will pioneer new methods of exploitation that humans have not yet tried or even imagined.” - @lawfare With LLMs removing barriers to entry, social engineers are now using AI to craft phishing attacks faster, cheaper, and more convincing than previously possible. 🔗…