https://firrisk.ai/tags/business-email-compromise/Recent content in Business Email Compromise on FIR Risk Advisory | Risk Intelligence. Engineered.Hugoen-usTue, 20 Oct 2026 00:00:00 +0000https://firrisk.ai/tuesday/e94-shift-in-the-physics-of-cyber-risk/Tue, 20 Oct 2026 00:00:00 +0000https://firrisk.ai/tuesday/e94-shift-in-the-physics-of-cyber-risk/<h2 id="a-year-on-microsoft-asks-the-board-question-itself" class="heading ">A year on, Microsoft asks the board question itself<a href="#a-year-on-microsoft-asks-the-board-question-itself" aria-labelledby="a-year-on-microsoft-asks-the-board-question-itself"> <!-- <i class="fas fa-link anchor"></i> --> <svg class="svg-inline--fa fas fa-link anchor" fill="currentColor" aria-hidden="true" role="img" viewBox="0 0 576 512"><use href="#fas-link"></use></svg>&nbsp; </a> </h2> <p>Last November, in <a href="https://firrisk.ai/tuesday/e73-mddr-2025-summary/">E73</a>, we summarized the 2025 edition of Microsoft&rsquo;s Digital Defense Report with one line: treat cyber risk as business risk. The 2026 edition, &ldquo;Decoding emergence,&rdquo; covers July 2025 through June 2026 and goes further. Its first takeaway is that &ldquo;AI is changing the physics of cybersecurity,&rdquo; which Microsoft defines as AI &ldquo;reducing the time, expertise, and cost required to discover and exploit weaknesses.&rdquo; Those three things used to slow attackers down. Its first priority for organizations is to &ldquo;govern cyber risk at leadership level,&rdquo; and it frames the defining question for boards as &ldquo;not whether disruption will occur, but whether the organization can continue operating, contain harm, recover quickly, and maintain trust when it does.&rdquo;</p>