Cyber CrimeNewLidl Breach Highlights Perils of Third-Party Data Dependencies
A breach at a third-party IT vendor has exposed personal data of Lidl customers, forcing a security alert across multiple countries.
> Search
19 results for “phishing”
Cyber CrimeNew
Cyber CrimeNewForg365 and the Industrialization of Account Takeover Tactics
A Telegram-based phishing service is lowering barriers to entry for M365 attacks by automating complex bypass and exfiltration workflows.
Cyber CrimeUS Targets Russian Hacking Groups With Massive $10 Million Bounty
Federal authorities are hunting two state-linked cyber groups behind a persistent, large-scale campaign targeting Signal and WhatsApp.
Cyber CrimeTravel Sector Under Siege as TA558 Pivots Toward Stealthy Payloads
Threat actors are weaponizing reservation-themed emails with container files to bypass modern Microsoft Office security protections.
Cyber CrimeLidl Breach Highlights Supply Chain Vulnerability in Retail Sector
A third-party security failure exposed customer data, forcing the retail giant to warn users about the heightened risk of phishing attacks.
Cyber CrimeStudent Loan Data Exposure Risk Amplified by Forgiveness Scams
A breach at Nelnet Servicing has compromised the personal information of millions, creating a prime target for future phishing.
SecurityThe Hidden Dangers Lurking Within Everyday QR Code Scams
Quishing attacks are weaponizing QR codes to bypass traditional security, creating a sophisticated new pathway for account hijacking.
Cyber CrimeThe Massive Scale of the 0ktapus Phishing Campaign Revealed
Researchers identify over 130 firms compromised in a sprawling campaign that successfully bypassed traditional MFA protections.
Cyber CrimeForg365 PhaaS Escalates Microsoft 365 Account Takeover Risks
A new subscription-based phishing service leverages device code theft and AI to bypass traditional security defenses.
Cyber CrimeLidl Breach Highlights Risks of Third-Party Data Management
A security incident at an IT service provider has resulted in the exposure of personal data for Lidl online shoppers across three countries.
SecurityScanBox Attacks: The Persistent Threat of Stealthy Browser Recon
A sophisticated China-based actor is leveraging watering hole tactics and keylogging to compromise targets across the maritime sector.
Cyber CrimeA Misconfigured Server Unlocks Three-Actor Phishing Ecosystem
A single exposed directory reveals how multiple threat actors leverage AiTM tools and OAuth abuse to compromise corporate accounts.
Cyber CrimeFashion Retailer Miinto Exposes Customer Data Vulnerabilities
A recent security breach at the Miinto platform has left shoppers facing an increased risk of targeted phishing attacks.
SecurityThe MFA Illusion: How One Open Server Exposed Next-Gen Phishing
A simple configuration blunder by an attacker unraveled three sophisticated, bypass-capable phishing campaigns targeting Microsoft 365.
Cyber CrimeWhen Teen Hackers Fall: Inside the Dismantling of Scattered Spider
Two British teenagers plead guilty, exposing the massive operational and financial toll of the notorious Scattered Spider hacking syndicate.
SecurityHow Social Engineering Pierced the Defenses of a Dutch Telecom Giant
As police narrow in on domestic suspects behind the Odido data breach, the incident highlights the devastating efficacy of voice phishing.
SecuritySummer's Quiet Threat: How Reduced IT Staffing Amplifies Cyber Risk
Reduced summer IT staffing creates critical security gaps, which cybercriminals exploit through slower responses and diminished oversight, escalating risks.
Cyber CrimeAI-Powered Phishing Toolkit Lowers Barrier for Sophisticated Cyberattacks
Forg365, a sophisticated phishing-as-a-service platform, now combines AI-assisted lure generation with advanced AiTM and device code methods to compromise Microsoft 365 accounts and maintain persistent access.
Cyber CrimeVishing to Data Heist: Helix Group Elevates SharePoint Extortion Threat
A sophisticated new group named Helix leverages identity-based phishing and MFA abuse to infiltrate corporate SharePoint environments, exfiltrating sensitive data for extortion or sale.