SecurityIoT Botnets and Water Systems Top ThreatsDay
A weekly roundup: 296K-device botnet, 100+ water systems targeted, and a SharePoint RCE chain.
> Search
30 results for “phishing”
Security
Cyber CrimeUK Airport Group Data Breach Hits Pre-Holiday Travelers
MAG says customer data was stolen from its systems, warning of phishing risks ahead of peak travel.
Cyber CrimePhishing kit targets iPhone Lock screen
AnonyMousKIT uses AI calls to trick iPhone owners into giving up passcodes.
Cyber Crimenpm Mirrors Turned into Phishing Hosts
Attackers abuse npm mirrors to host HTML phishing pages, bypassing security filters by serving from legitimate domains.
SecurityReal-time phishing platform steers attacks
A phishing platform gives attackers live control over victim sessions, adapting prompts as credentials are harvested.
Cyber CrimeSession Theft Threat Escalates as 4,532 Firms Targeted
Mirage2FA campaign hit 4,532 companies, bypassing MFA and stealing sessions.
SecurityLimited Breach: ReliaQuest Confirms Hack
ReliaQuest says ShinyHunters accessed an identity dashboard briefly but no customer data was compromised.
Cyber CrimeTeams Helpdesk Scam Spreads SynkLoader Backdoor
Cybercriminals are using fake IT helpdesk messages on Microsoft Teams to deliver a new backdoor malware, researchers warn.
Cyber CrimeNotion, PDFs, and PaaS: Token Theft's New Shape
Threat actor Doubloon Dredger exploits Notion and device codes to steal authentication tokens, researchers say.
SecurityFacial recognition vault exposed 9M images
An open database from ClarityCheck exposed 9M+ facial images, risking identity theft and phishing.
SecuritySafePal Breach Data Stolen from 39,798 Customers
SafePal warns of phishing risk after order data for nearly 40,000 customers is exposed in a breach.
SecuritySafePal Breach Exposes 40K Customer Records
SafePal reports a breach affecting 39,798 customers, exposing personal data through a plugin flaw.
SecurityLazarus zero-day fools Google in Dream Job wave
New Lazarus campaign abuses Windows zero-day and fake job lures to breach defense firms, fooling Google's filters.
Cyber CrimeKimsuky's Offline AI Stack Signals Smarter Phishing
North Korea's Kimsuky group is building offline AI tools to automate malware and phishing, a Genians report says.
Cyber CrimeIEH breach exposes defense supplier risks
IEH Corporation disclosed a phishing attack compromising employee emails, potentially exposing sensitive defense-related data.
Cyber CrimeH1 2026 Attack Chains Bypass Trust
Recent investigations reveal how attackers leverage legitimate accounts and blockchain data to execute sophisticated financial fraud.
Cyber CrimeAitM Phishing Targets Financial Data
A sophisticated phishing campaign uses adversary-in-the-middle tactics to compromise Microsoft 365 accounts for financial espionage.
Cyber CrimeAnalyzing the BlackFile to Redact Pivot
Google Threat Intelligence Group links the retired BlackFile extortion brand to the active Redact group through shared infrastructure.
Cyber CrimeRingCentral Spoof Hijacks M365 Accounts
Phishing service Greatness uses spoofed RingCentral emails to bypass MFA and compromise Microsoft 365 accounts.
Cyber CrimeFake Bank Alerts Facilitate RMM Access
Researchers identify a sophisticated phishing campaign using brand impersonation to deploy remote access malware on Windows.
Cyber CrimeCloud and SaaS Now Primary Attack Targets
A new report identifies a strategic shift among threat actors, moving away from simple malware toward identity and trust-based exploits.
Cyber CrimeAI Integration Reshapes Malicious Tactics
Researchers report a rise in AI-driven malware and evolving social engineering, marking a shift in how attackers scale operations.
SecurityLaw Firms Under Pressure From AiTM Attacks
New data from eSentire indicates that adversary-in-the-middle phishing has bypassed standard authentication protocols at law firms.
SecurityWhat Is An AitM (Adversary-in-the-Middle) Attack? How to stay safe.
An overview of how interception attacks bypass traditional authentication and what defenders can do to protect their data integrity.
Cyber CrimeBlueNoroff’s Sophisticated Phishing Kit
North Korean threat actors are leveraging AI-driven lures and Telegram account hijacks to target cryptocurrency and finance professionals.
SecurityMalware Campaign Targets Claude Users
A malicious Claude Artifact led users to download a remote access trojan, compromising at least 29 organizations in a recent campaign.
Cyber CrimeSnapchat Hacker Receives Six-Year Term
An Illinois man was sentenced to 76 months in federal prison for orchestrating a campaign to compromise 750 social media accounts.
Cyber CrimeInsurance Phishing Pivots to Real-Time
New research details how threat actors are ditching delayed credential harvesting for live, session-based account hijacking.
Cyber CrimeVatican-Endorsed App Leaks User Profiles
A critical IDOR vulnerability in the Pope's official prayer app has left the personal data of over 700,000 users exposed for months.
Cyber CrimeHotel Wi-Fi DNS Hijacks Target M365
Researchers report that compromised hotel network gateways are redirecting business travelers to sophisticated phishing portals.