Cloud Security
Cloud security researcher warns that stolen Microsoft signing key was more powerful and not limited to Outlook.com and Exchange Online.
Hi, what are you looking for?
SecurityWeek
Email Security
Russia-linked APT28 has been exploiting mail server vulnerabilities against government and defense entities since September 2023.
Artificial Intelligence
Combined with AI, polymorphic phishing emails have become highly sophisticated, creating more personalized and evasive messages that result in higher attack success rates.
Email Security
A sophisticated phishing campaign abuses weakness in Google Sites to spoof Google no-reply addresses and bypass protections.
Artificial Intelligence
Agentic AI has improved spear phishing effectiveness by 55% since 2023, research shows.
Email Security
The Office of the Comptroller of the Currency (OCC) has disclosed an email security incident in which 100 accounts were compromised for over a...
Email Security
‘PoisonSeed’ phishing campaign targets CRM and bulk email providers to distribute “crypto seed phrase” messages.
Email Security
Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 17,...
Email Security
Microsoft says a Chinese cyberespionage group tracked as Storm-0558 has used forged authentication tokens to access government emails.
Email Security
Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 3,...
Email Security
A Russian hacking group has been caught hacking into Roundcube servers to spy on government institutions and military entities in Ukraine.
Cybercrime
A credential phishing campaign using the legitimate SuperMailer newsletter distribution app has doubled in size each month since January 2023.
Email Security
BEC scammers use residential IP addresses in attacks to make them seem locally generated and evade detection.
Email Security
Google this week made client-side encryption for Gmail and Calendar available for Workspace customers.
Cloud Security
Microsoft and Proofpoint are warning organizations that use cloud services about a recent consent phishing attack that abused Microsoft’s ‘verified publisher’ status.
Email Security
Microsoft is urging customers to install the latest Exchange Server updates and harden their environments to prevent malicious attacks.
Application Security
Electric car maker Tesla is using the annual Pwn2Own hacker contest to incentivize security researchers to showcase complex exploit chains that can lead to...
Application Security
Hack The Box Raises $55 Million in Funding Round Led by Carlyle
Incident Response
The 15th edition of NATO’s Locked Shields cyber defense exercise brought together 4,000 experts from 41 countries.
Vulnerabilities
Vulnerabilities
Malware & Threats
Management & Strategy
Artificial Intelligence