August 28, 2026 • 4 mins
In this episode, we discuss Paubox's recognition in G2's Fall 2026 reports, a surge in MyChart phishing scams targeting patient credentials, and a Chicago cardiology practice breach that went undetected for ten weeks. We also cover the new customizable reply-to feature in Paubox Forms and examine how ransomware groups are now using AI-generated legal risk reports as a pressure tactic against victims.
Listen
Watch
Mark as Played
Transcript
Episode Transcript
Available transcripts are automatically generated. Complete accuracy is not guaranteed.
SPEAKER_00 (00:00):
You're listening to Pow Box Weekly Fully Automated.
SPEAKER_01 (00:03):
And I'm Jen, cybersecurity person,
professional skeptic.
SPEAKER_00 (00:07):
I'm Alex, Healthcare IT, Eternal Optimist.
Somehow we balance out.
SPEAKER_01 (00:12):
It's August 28th, 2026, and we've got a mix this
week.
Some wins, some warnings, andsome genuinely creative
extortion tactics.
SPEAKER_00 (00:21):
Let's start with the win.
G2 just dropped their fall 2026reports, and Powbox had a pretty
big showing.
SPEAKER_01 (00:29):
Pretty big is underselling it.
Highest rated solution for bothemail encryption and HIPAA
compliant messaging.
Featured in 127 reports.
120 badges.
Number one position in 49 ofthem.
That's a lot of badges.
It's a lot of badges.
And look, we work here, so takethis with appropriate salt.
(00:49):
But G2 rankings come from actualuser reviews.
That's not marketing fluff.
That's customers saying thisworks.
So thank you.
Genuinely.
SPEAKER_00 (01:00):
Moving on.
SPEAKER_01 (01:01):
MyCart is dealing with a phishing surge.
Scammers using the MyChart name,the logo, fake emails about
medical results, Medicare kits,the whole playbook.
SPEAKER_00 (01:11):
And one version actually told users to bypass a
Windows security warning todownload a file.
SPEAKER_01 (01:17):
Which is bold.
Ignore that thing designed toprotect you is really a trust
exercise.
The goal is credential theft,right?
Fake sign-in pages?
Exactly.
You click, you land on somethingthat looks like my chart, you
enter your password, and nowsomeone else has it.
Classic.
SPEAKER_00 (01:36):
The takeaway here: if a message asks you to bypass
security or download somethingunexpected, stop.
Go directly to your patientportal.
Don't click the link.
SPEAKER_01 (01:48):
Assume every link is lying until proven innocent.
SPEAKER_00 (01:50):
On a lighter note, Powbox Forms has a new feature.
SPEAKER_01 (01:54):
The reply to field is now customizable.
When someone fills out the emailfield on your form, their
address can automaticallypopulate as the reply to.
SPEAKER_00 (02:03):
Which sounds small, but it's actually a workflow
saver.
You hit reply and you'reresponding to the right person.
No copying, no pasting.
SPEAKER_01 (02:12):
And PalBox Forms is free for any paid customer
account.
So if you're already a customerand not using it, why?
SPEAKER_00 (02:20):
Now, less fun news.
A Chicago cardiology practicedisclosed a breach from 2024.
SPEAKER_01 (02:26):
An employee's email account was compromised for 10
weeks.
They only found it whileinvestigating a separate
incident in January of thisyear.
10 weeks is a long time.
It is.
And here's the thing (02:37):
mailbox compromises are some of the
hardest to detect without activemonitoring.
There's no ransomware note, noencrypted files, just someone
quietly reading your mail.
SPEAKER_00 (02:49):
And healthcare email accounts accumulate a lot.
Patient records, insurance info,scheduling details.
SPEAKER_01 (02:56):
It's a gold mine sitting in an inbox.
The fix, mailbox monitoring,access logging, and maybe, just
maybe, not keeping sensitivedata in email longer than you
need to.
SPEAKER_00 (03:08):
And finally, this one's a new twist.
SPEAKER_01 (03:11):
Ransomware groups are now sending victims
AI-generated legal risk reports,personalized analyses that say,
here's what data we stole,here's the regulatory penalties
you're facing, here's yourliability.
That's almost professional.
It's psychological warfare witha business casual tone.
And it lands while your forensicteam is still figuring out what
(03:32):
happened, before you even knowthe scope.
SPEAKER_00 (03:34):
One victim called it a real scare tactic in terms of
the information they provided.
SPEAKER_01 (03:40):
Because it is.
It's designed to panic you intopaying before you've had time to
think.
The takeaway (03:44):
don't let attackers control the narrative.
Get your own legal and forensicteams working before you respond
to anything.
SPEAKER_00 (03:52):
So, phishing scams impersonating trusted brands.
Email compromises sittingundetected for months.
Ransomware groups using AI tomanipulate victims.
SPEAKER_01 (04:04):
And on the other side, tools that actually help.
Recognition that says customerstrust what we're building.
Small features that make securecommunication easier.
SPEAKER_00 (04:14):
The theme isn't bad luck.
It's bad configurations, blindspots, gaps that don't have to
stay open.
Most of this is fixable.
That's the frustrating part.
And the hopeful part.
Thanks for listening, everyone.
Stay safe out there.
SPEAKER_01 (04:30):
And check your reply to settings.
It's the little things.
SPEAKER_00 (04:33):
See you next week.
You're listening to Pow Box Weekly Fully Automated.
SPEAKER_01 (00:03):
And I'm Jen, cybersecurity person,
professional skeptic.
SPEAKER_00 (00:07):
I'm Alex, Healthcare IT, Eternal Optimist.
Somehow we balance out.
SPEAKER_01 (00:12):
It's August 28th, 2026, and we've got a mix this
week.
Some wins, some warnings, andsome genuinely creative
extortion tactics.
SPEAKER_00 (00:21):
Let's start with the win.
G2 just dropped their fall 2026reports, and Powbox had a pretty
big showing.
SPEAKER_01 (00:29):
Pretty big is underselling it.
Highest rated solution for bothemail encryption and HIPAA
compliant messaging.
Featured in 127 reports.
120 badges.
Number one position in 49 ofthem.
That's a lot of badges.
It's a lot of badges.
And look, we work here, so takethis with appropriate salt.
(00:49):
But G2 rankings come from actualuser reviews.
That's not marketing fluff.
That's customers saying thisworks.
So thank you.
Genuinely.
SPEAKER_00 (01:00):
Moving on.
SPEAKER_01 (01:01):
MyCart is dealing with a phishing surge.
Scammers using the MyChart name,the logo, fake emails about
medical results, Medicare kits,the whole playbook.
SPEAKER_00 (01:11):
And one version actually told users to bypass a
Windows security warning todownload a file.
SPEAKER_01 (01:17):
Which is bold.
Ignore that thing designed toprotect you is really a trust
exercise.
The goal is credential theft,right?
Fake sign-in pages?
Exactly.
You click, you land on somethingthat looks like my chart, you
enter your password, and nowsomeone else has it.
Classic.
SPEAKER_00 (01:36):
The takeaway here: if a message asks you to bypass
security or download somethingunexpected, stop.
Go directly to your patientportal.
Don't click the link.
SPEAKER_01 (01:48):
Assume every link is lying until proven innocent.
SPEAKER_00 (01:50):
On a lighter note, Powbox Forms has a new feature.
SPEAKER_01 (01:54):
The reply to field is now customizable.
When someone fills out the emailfield on your form, their
address can automaticallypopulate as the reply to.
SPEAKER_00 (02:03):
Which sounds small, but it's actually a workflow
saver.
You hit reply and you'reresponding to the right person.
No copying, no pasting.
SPEAKER_01 (02:12):
And PalBox Forms is free for any paid customer
account.
So if you're already a customerand not using it, why?
SPEAKER_00 (02:20):
Now, less fun news.
A Chicago cardiology practicedisclosed a breach from 2024.
SPEAKER_01 (02:26):
An employee's email account was compromised for 10
weeks.
They only found it whileinvestigating a separate
incident in January of thisyear.
10 weeks is a long time.
It is.
And here's the thing (02:37):
mailbox compromises are some of the
hardest to detect without activemonitoring.
There's no ransomware note, noencrypted files, just someone
quietly reading your mail.
SPEAKER_00 (02:49):
And healthcare email accounts accumulate a lot.
Patient records, insurance info,scheduling details.
SPEAKER_01 (02:56):
It's a gold mine sitting in an inbox.
The fix, mailbox monitoring,access logging, and maybe, just
maybe, not keeping sensitivedata in email longer than you
need to.
SPEAKER_00 (03:08):
And finally, this one's a new twist.
SPEAKER_01 (03:11):
Ransomware groups are now sending victims
AI-generated legal risk reports,personalized analyses that say,
here's what data we stole,here's the regulatory penalties
you're facing, here's yourliability.
That's almost professional.
It's psychological warfare witha business casual tone.
And it lands while your forensicteam is still figuring out what
(03:32):
happened, before you even knowthe scope.
SPEAKER_00 (03:34):
One victim called it a real scare tactic in terms of
the information they provided.
SPEAKER_01 (03:40):
Because it is.
It's designed to panic you intopaying before you've had time to
think.
The takeaway (03:44):
don't let attackers control the narrative.
Get your own legal and forensicteams working before you respond
to anything.
SPEAKER_00 (03:52):
So, phishing scams impersonating trusted brands.
Email compromises sittingundetected for months.
Ransomware groups using AI tomanipulate victims.
SPEAKER_01 (04:04):
And on the other side, tools that actually help.
Recognition that says customerstrust what we're building.
Small features that make securecommunication easier.
SPEAKER_00 (04:14):
The theme isn't bad luck.
It's bad configurations, blindspots, gaps that don't have to
stay open.
Most of this is fixable.
That's the frustrating part.
And the hopeful part.
Thanks for listening, everyone.
Stay safe out there.
SPEAKER_01 (04:30):
And check your reply to settings.
It's the little things.
SPEAKER_00 (04:33):
See you next week.
Popular Podcasts
Stuff You Should Know
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
Dateline NBC
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com
The Breakfast Club
The World's Most Dangerous Morning Show, The Breakfast Club, With DJ Envy, Jess Hilarious, And Charlamagne Tha God!