2+ day, 17+ hour ago   (975+ words) An employee at your company receives an email from [email protected]. The domain matches. There is no warning banner. The message asks them to review a payment approval document. They click. That email was never sent by your HR team. An…...

4+ day, 12+ hour ago   (154+ words) Researchers at ZeroBEC are tracking a phishing platform called “Greatness” that’s been significantly upgraded since it surfaced in 2023. “Since its initial discovery, the platform has evolved significantly,” the researchers write. “It now supports adversary-in-the-middle (AiTM) credential and token theft, device…...

1+ week, 4+ day ago   (1657+ words) [New Report] Phishing Is Still the No. 1 Initial Threat Access Vector Phishing is still the top initial access vector, accounting for more than half of cyberattacks observed during Q2 2026, according to a new report from Cisco Talos. "Phishing was the primary…...

2+ week, 4+ day ago   (1654+ words) Microsoft Observed 7.6 Billion Phishing Emails in Q2 2026 Researchers at Microsoft warn that phishing emails are still the top initial access vector, with more than two billion phishing threats detected each month during the second quarter of 2026. "Notable campaigns observed during the…...

2+ week, 4+ day ago   (152+ words) Phishing is still the top initial access vector, accounting for more than half of cyberattacks observed during Q2 2026, according to a new report from Cisco Talos. Talos highlights a sophisticated QR code phishing campaign that’s targeting Australians in order to steal…...

3+ week, 1+ day ago   (335+ words) I have observed a proactive shift toward onboarding various agencies to a unified security framework. However, as we embrace the next era of training, moving from human-centric to AI-integrated defense, Guam’s organizations must benchmark themselves against the broader APJ landscape…...

3+ week, 2+ day ago   (1347+ words) Lead Analysts: Prabhakaran Ravichandhiran and Jeewan Singh Jalal Phishing is a form of social engineering that has evolved beyond simple lures into complex, multi-stage attacks exploiting trusted software, cloud identities and business platforms to bypass traditional security. Attackers leverage these…...

3+ week, 2+ day ago   (1079+ words) For years, cybersecurity has had a familiar villain: the external attacker. The hacker breaking through the firewall, stealing credentials or exploiting an unpatched vulnerability. It is the scenario we have trained for, built defenses around and spent decades trying to…...