Phishing
The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages AitM.
Hi, what are you looking for?
SecurityWeek
Cybercrime
The decentralized prediction market said hackers targeted some of its users through a compromise of a third-party vendor.
Phishing
The platform used more than 9,000 phishing sites, stealing nearly 4 million credit cards and causing roughly $1.9 billion in losses.
Phishing
MokN's platform deploys realistic decoy access points to lure attackers into revealing compromised credentials, enabling organizations to respond before abuse occurs.
Phishing
Victims span across the aviation, critical infrastructure, energy, logistics, public administration, and technology sectors.
Phishing
Still under development, Bluekit provides users with automated domain registration and an AI Assistant.
Phishing
Legitimate-looking emails coming from Robinhood systems lured recipients to phishing websites.
Email Security
New analysis from Abnormal AI reveals how attackers have abandoned technical exploits to weaponize routine workflows and internal trust.
Phishing
Threat actors are reusing Tycoon 2FA tools across other phishing kits following the platform’s disruption.
Phishing
Attack volumes are back to pre-disruption levels, and the adversary tactics have remained unchanged.
Malware & Threats
Insufficient sanitization of CSS content within HTML emails leads to inline script execution when the message is opened in a browser.
Phishing
The attackers used a DKIM-signed phishing email, trusted redirect infrastructure, compromised servers, and Cloudflare-protected phishing pages, but the attack was unsuccessful.
Data Breaches
Starbucks said the incident involved phishing attacks targeting an employee portal, affecting hundreds.
Phishing
Abusing DNS record management controls, the threat actor hides the location of malicious content via Cloudflare.
Phishing
The attackers are sending out fake alerts claiming unauthorized access or master password changes.
Cybercrime
Domains set up by the threat actor suggest attacks aimed at Atlassian, Canva, Epic Games, HubSpot, Moderna, ZoomInfo, and WeWork.
Malware & Threats
Priced $2,000 - $6,000 on a cybercrime forum, the MaaS toolkit promises publication on the Chrome Web Store.
Phishing
Threat actors are leveraging the file-sharing service for payload delivery in AitM phishing and BEC attacks.
Cybercrime
Threat actors may have wanted to take advantage of the holiday weekend in the United States to increase their chances of success.
Email Security
Threat actors spoof legitimate domains to make their phishing emails appear to have been sent internally.
Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.
RegisterThis year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.
RegisterExpert Insights
From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype.
(Joshua Goldfarb)
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
(Danelle Au)
From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI.
(Etay Maor)
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.
(Torsten George)
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
(Tod Beardsley)