A small construction company that rejected cybersecurity consulting advice was hit by ransomware weeks later, losing all its data including encrypted backups, and went out of business within months. In a separate incident, attackers used a compromised executive email account to launch a sophisticated phishing campaign against a partner company, employing a man-in-the-middle attack to bypass two-factor authentication. The second attack was thwarted because the target had software in place to detect anomalous logins and revoke access tokens before serious damage could be done.
