Sometimes, cyberattackers opt to send fraudulent emails—other times, they’re on line one.

Financial fraud frequently takes the form of hackers redirecting funds from a victim’s accounts. A fraudster impersonates an executive, vendor, or bank and sends fake invoices or payment instructions—often through email.

When Leeann Nicolo, director of Coalition Incident Response for cyber insurance provider Coalition, considers the more than 4,000 cyber insurance claims from 2025, she notes a particular signal across the threat landscape: Fraudsters are also using the phone.

Don’t take the call.—BH

For an industry built on efficiency, the tech sector is bedeviled by small inconsistencies that add friction to workflows and projects.

Tech friction can snowball into larger issues in the workplace, including employee dissatisfaction and lower productivity, as IT Brew has previously reported. Fortunately, IT pros can develop strategies to manage that friction.

Look inward. Auditing your workflow is important to understand how your IT teams manage tools, Versa Networks CEO Kelly Ahuja said. Make sure that user access is set properly and that workloads and authentication are assigned to the correct environments.

“You have to say, ‘Hey, this particular user trying to disconnect to this particular application from this particular place, is it taking the best path or not? And if it’s not, how do I ensure that it takes the best path?’” Ahuja said. “There are technologies that allow that to happen.”

Break it down.—EH

For many companies that build cloud products, obtaining FedRAMP certification is a great way to ramp up public-sector deals—pun intended. But can FedRAMP also help those companies score private-sector business?

Onramp. The Federal Risk and Authorization Management Program, or FedRAMP, is a government program used to authorize cloud products and services for public sector use. It assesses cloud service providers’ security, including more than 500 authorized products as of April.

Companies seeking FedRAMP certification for a product or service must go through a third-party risk assessment, and approval depends on the customer agency’s standards. Any inconsistencies, risks, or documentation gaps found by the agency’s review team must be addressed before a final review.

Line it up.—CN

CollabWORK connects you to the hidden job market through IT Brew and other trusted channels. Browse roles curated specifically for this community by clicking through to the job board.

• Manufacturing IT Support Technician at Austin Powder
• Jr Network Administrator at Home Depot
• IT Support Specialist II at Bluepeak
• SVP/Chief Administrative Officer at Energy Northwest
• Staff Software Engineer, Cloud Security at Lyft