Did the Knicks’ phishing test go too far? Plus, hackers pose as IT in Teams
Source: YouTube · IBM Technology · published Nov 4, 2026 · 30:16
IBM's Security Intelligence podcast covers an MSG phishing test, Teams mail-bombing attacks, and exploited PHP vulnerabilities, concluding phishing remains the top attack vector and layered defenses plus user awareness are essential 0:33.
Key Takeaways:
• MSG staffers fell for a fake championship ring phishing email; attackers exploit emotional moments, and users should treat all email as untrusted rather than relying on old red flags like poor spelling 1:33
• Phishing costs businesses $5M+ annually; AI enables realistic, scalable scams, so real-world training plus layered controls (external flags, SPF/DKIM/DMARC) are essential—"one tool really doesn't cut it anymore" 4:43
• Arctic Wolf documented 400+ Teams mail-bombing incidents where attackers flood inboxes then pose as IT seeking remote access; real IT never asks for credentials—verify and stay skeptical 8:50
• CISA added PHP vulnerabilities to its KEV list, but exploitation requires complex memory conditions, making it far harder to weaponize than Log4j; ~263,000 end-of-life PHP instances remain exposed 19:33
Core message: cyber hygiene—deleting suspicious emails, patching, skepticism—is now a primary defense.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Panelists, today we're talking about fishy emails and fancy rings, but what I want to know is what talent or expertise would earn you a championship ring. >> Maybe I read a lot of books. I guess that's maybe I'd win a ring for that. >> Almost all of my days now are explaining hacking to people who aren't hackers. I'd say use code builder to take a very complex research paper that Patrick provides and make it simple for everybody to read. >> I give you a rig for that for sure. Hello and welcome to Security Intelligence, IBM's weekly cyber security podcast, where our expert panelists turn the biggest industry news stories into practical takeaways that you can use. I'm your host, Patrick Lucas Austin. Our guests on today's show are Patrick Facell, X Force Red Adversary Services Lead, Nikki Ro…