Cyber CrimeFBI Ties Chinese Firm to Email Theft Portal
A joint advisory says hackers linked to Integrity Technology Group stole email and ran a web app giving third parties access to it.
> Search
30 results for “email”
Cyber Crime
Cyber CrimeArizona Courts Breach Hits 1.3 Million
A phishing email led to the theft of personal data for 1.3 million people from Arizona's court system, officials say.
Cyber CrimeBackdoors Hide Behind Email Security Brands
Rapid7 says Linux implants in South Korea and Taiwan impersonate SpamSniper and ShareTech to slip past defenders.
SecurityOutlook Adds Two More Blocked File Types
Microsoft will block .msix and .msixbundle attachments in New Outlook for Windows and Outlook on the Web starting in November 2026.
Cyber CrimeNikkei Email Breaches Expose 1,646 People
Nikkei says attackers hit a Google Workspace account in July and a Microsoft 365 account in September, later sending 9,000 phishing emails.
SecurityExchange Flaw Opens Mailboxes to Insiders
Microsoft pushed out-of-band fixes for CVE-2026-96940, a high-severity Exchange Server authorization flaw rated 8.8.
Cyber CrimeDIVD breach linked to agentic AI attack
Dutch bug-hunting nonprofit says AI agents exploited Zammad zero-days, stealing researcher emails in seconds.
Cyber CrimeScammers Hijack University Emails for Fraud
Proofpoint says Nigerian scammers are using stolen .edu accounts to trick students with fake job offers and gift card schemes.
Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
Cyber CrimeDual RMM Phishing Attack Evades Defenses
Microsoft says phishing emails hid a legitimate MSP360 installer behind meeting and PDF lures, then used it to install ScreenConnect as a redundant remote-access channel.
Cyber CrimeCisco Email Gateway Flaw Under Attack
Cisco warns CVE-2026-76461, a CVSS 9.8 flaw in Secure Email Gateway, is being exploited to run commands as root, with a federal patch deadline of September 17.
Cyber CrimeRevolut breach spotlights ID verification gaps
A fintech breach via fake government emails exposes sensitive customer data, raising questions about verification controls.
Cyber CrimePasskey phishing opens M365 data theft playbook
Microsoft ties passkey-themed social engineering to extortion gangs that blend into Microsoft 365 traffic to steal files and email.
Cyber CrimeKnowBe4 Flags M365 Direct Send Phishing
A KnowBe4 report details a phishing campaign that abused Microsoft 365's Direct Send feature, with volume following US Eastern business hours.
Cyber CrimeTrezor Brevo Breach Exposes 347,000 Emails
Trezor says phishing after a Brevo email provider breach hit 347,000 addresses and 2,500 users who clicked a malicious link.
Cyber CrimePhishing expands ASCII smuggling beyond AI
Microsoft finds invisible Unicode tags used to hide financial-lure words in a massive email phishing campaign.
Cyber CrimeUnicode Trick Fuels Million-Email Phishing Surge
A campaign hides 'funding' lure words with invisible Unicode tags, splitting keywords to slip past filters.
Cyber CrimeFreelancer phishing campaign nets 80,000 infections
US indicts Russian national accused of using phishing emails to spread TVRAT and DarkVNC malware to freelancers.
SecuritySVG Smuggling Drives Two-Month Voicemail Phishing Wave
Emails disguised as voicemail used SVG files to hide JavaScript, bypassing native filters in thousands of orgs.
Tech NewsBrave's Email Aliases Plug a Privacy Gap
Brave 1.94 lets users generate disposable email addresses to evade tracking and reduce spam.
SecurityHidden HTML Hijacks AI Email Summarizers
Forcepoint shows invisible text can silently change what an AI assistant reads in your email.
SecurityZimbra attacks breach 270+ servers
Threat actors compromised over 270 Zimbra instances in ongoing RCE attacks, prompting CISA to order urgent patching.
SecurityFramework data breach exposes customer details
A zero-day in Metabase exposed Framework customer names, emails, and addresses; payment data was safe.
Cyber CrimeIEH breach exposes defense supplier risks
IEH Corporation disclosed a phishing attack compromising employee emails, potentially exposing sensitive defense-related data.
Cyber CrimeRingCentral Spoof Hijacks M365 Accounts
Phishing service Greatness uses spoofed RingCentral emails to bypass MFA and compromise Microsoft 365 accounts.
SecurityAuth.js Email Normalizer Bypass Flaw
A critical vulnerability in Auth.js and NextAuth allows attackers to intercept magic-link sign-in flows by exploiting improper Unicode normalization.
SecurityBudibase OIDC SSO Flaw Allows Account Takeover
A critical vulnerability in Budibase allows attackers to hijack existing user accounts by exploiting improper email validation in the OIDC login process.
SecurityAI Spam Filters Falter Against Salting
Modern LLM-powered email security is struggling to identify phishing attempts that use decades-old text-hiding techniques.
SecurityHCL Aftermarket EPC Flaw Risks Data Loss
A critical business logic vulnerability in HCL Aftermarket EPC allows unauthorized users to intercept passwords via email redirection.
SecurityGovernment Domains Weaponized by Malware
Researchers have discovered a campaign using hijacked Brazilian government websites and authenticated emails to distribute malware.