New research found that no industry was immune from risk. The findings come as phishing attacks become increasingly more ...
Crooks are deploying cheeky browser-in-the-browser techniques to trick victims into downloading RMM tools.
Microsoft details a million-email CEO fraud campaign and passkey-themed attacks that compromised cloud accounts and enabled ...
Federal investigators have detailed a phishing technique that keeps working even after a victim does the one thing security teams almost always recommend: changing a compromised password. The approach ...
Learn how exposed email addresses enable phishing, credential stuffing and account takeover, plus practical ways to protect ...
Brevo email platform flaw exposed 347,000 Trezor newsletter subscribers to phishing attacks. BitBox and CoinTracking also ...
Cybercriminals have many ways to try to trick people into revealing or granting them access to sensitive information, and their methods—and tools—are always evolving. Businesses and organizations of ...
A phishing campaign abuses Microsoft OAuth and Teams to redirect victims to fake login pages generated inside their browsers.
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations ...
Solana Mobile warned users of phishing risks after Brevo's SAML SSO breach exposed 138 accounts and sent phishing emails to ...
KnowBe4 researchers observed a new phishing campaign leveraging Microsoft 365’s Direct Send to send malicious emails ...
Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single ...