phishing

April 9, 2026

Linux Foundation Leader Impersonated in Slack Attack on Open Source Developers

A social engineering campaign is actively targeting open source developers through Slack. The warning was shared through the OpenSSF Siren…
Read More »
April 8, 2026

EvilTokens Uses Stolen Microsoft 365 Tokens, AI to Supercharge BEC

EvilTokens is a new Phishing-as-a-Service (PhaaS) platform that turns stolen Microsoft 365 tokens and AI into an end‑to‑end factory for…
Read More »
April 8, 2026

IBM Security Verify Access Flaws Let Remote Attackers Access Sensitive Data

IBM has issued an urgent security bulletin addressing a slew of vulnerabilities impacting IBM Verify Identity Access and IBM Security…
Read More »
April 8, 2026

Cybercriminals Use Fake Zoom, Teams Calls to Deliver Malware

Hackers are increasinglyusing fake Zoom and Microsoft Teams meetings to trick victims into infecting their own systems with malware. SEAL…
Read More »
April 8, 2026

Russian State-Sponsored Hackers Targeting Global Router Networks

Russian military-linked hackers are actively compromising poorly secured home and small-office routers to hijack internet traffic and conduct espionage on…
Read More »
April 7, 2026

Threat Actors Exploit LogMeIn Resolve, ScreenConnect in Phishing Campaigns

Cybercriminals are exploiting legitimate remote monitoring and management (RMM) tools LogMeIn Resolve and ScreenConnect in a multi-stage phishing operation that…
Read More »
April 6, 2026

North Korea’s Modular Malware Strategy Hides Attribution, Defies Takedowns

North Korea’s cyber operations have evolved from a monolithic structure to a modular, portfolio-style ecosystem. This design ensures resilience, making…
Read More »
April 4, 2026

Hackers Launch Social Engineering Offensive Against Key Node.js Maintainers

Following the high-profile supply chain compromise of the widely used Axios package, a highly coordinated social engineering campaign has been…
Read More »
April 4, 2026

Top 10 Best Identity And Access Management (IAM) Companies 2026

In the rapidly evolving digital landscape of 2026, Identity and Access Management (IAM) has transcended its traditional role to become…
Read More »
March 31, 2026

Windows Tools Abused to Kill AV Ahead of Ransomware Attacks

Hackers are increasingly turning legitimate Windows administration tools into stealthy weapons to disable antivirus and EDR before launching ransomware, making…
Read More »
March 31, 2026

EvilTokens Launches New Phishing Service Targeting Microsoft Accounts

EvilTokens is a new Phishing-as-a-Service (PhaaS) platform that industrialises Microsoft account takeover by abusing the OAuth device code flow rather…
Read More »
March 30, 2026

Russian Hackers Deploy “CTRL” for RDP Hijacking

Russian hackers are employing a new remote access toolkit named “CTRL” to stealthily hijack Remote Desktop Protocol (RDP) sessions through…
Read More »
March 30, 2026

ClickFix Evades PowerShell Detection via Rundll32 and WebDAV

A new ClickFix attack variant has been identified that evades detection by shifting execution away from PowerShell and mshta towards…
Read More »
March 30, 2026

TA446 Uses DarkSword Exploit Kit to Target iPhone Users

Russia-linked espionage group TA446 has initiated a new phishing campaign using the DarkSword exploit kit to compromise iOS devices, leveraging…
Read More »
March 30, 2026

New Homoglyph Tricks Let Cybercriminals Mimic Trusted Domains

New homoglyph attack techniques exploit subtle visual similarities in text to spoof trusted domains, steal credentials, and bypass Unicode handling…
Read More »
March 27, 2026

Phishing ZIP Files Used to Deploy PXA Stealer Targeting Financial Firms

A significant surge in PXA Stealer campaigns targeting global financial institutions during Q1 2026. This marks a notable shift in…
Read More »
March 27, 2026

Silver Fox Cyberattack Targets Japanese Businesses with Tax-Themed Phishing Scams

A threat actor known as Silver Fox is targeting Japanese organizations with a new wave of spearphishing attacks timed to…
Read More »
March 26, 2026

Fake Screenshot Lures Target Web3 Support Staff with Multi-Stage Malware Attack

A campaign attributed to APT-Q-27 (GoldenEyeDog), a Chinese group targeting Web3, is leveraging deceptive fake screenshot links delivered through support…
Read More »
March 24, 2026

Tycoon2FA Operators Resume Cloud Account Phishing Following Infrastructure Disruption

Tycoon 2FAoperators have restarted large-scale cloud account phishing just days after law enforcement and industry partners disrupted the platform’s core…
Read More »
March 23, 2026

Oblivion RAT Masquerades as Play Store Update to Spy on Android Users

A newly discovered Android remote access trojan (RAT) called Oblivion RAT is raising concerns across the mobile threat landscape. Marketed…
Read More »

Previous page Next page