2+ day, 17+ hour ago   (1591+ words) [Text Alert] Don't Reply to a "Wrong Number." You Will Become a Scam Target Attackers are using "wrong-number" texts to identify potential targets for scams, according to researchers at Malwarebytes. These texts appear to be harmless messages meant for another…...

3+ day, 1+ hour ago   (975+ words) An employee at your company receives an email from [email protected]. The domain matches. There is no warning banner. The message asks them to review a payment approval document. They click. That email was never sent by your HR team. An…...

4+ day, 20+ hour ago   (154+ words) Researchers at ZeroBEC are tracking a phishing platform called “Greatness” that’s been significantly upgraded since it surfaced in 2023. “Since its initial discovery, the platform has evolved significantly,” the researchers write. “It now supports adversary-in-the-middle (AiTM) credential and token theft, device…...

1+ week, 1+ day ago   (838+ words) In addition to everyday users, Google's infrastructure is trusted by email security gateways, enterprise firewalls and automated URL detonation platforms. Threat actors know this. The result is a campaign that looks legitimate at every layer a defender is likely to…...

1+ week, 3+ day ago   (146+ words) A new phishing kit is using generative AI to fully automate voice phishing (vishing) attacks, according to researchers at Group-IB. The phishing platform, called “Balonx,” includes a module dubbed “CallFlow” that the researchers say “represents a fundamental evolution” in the…...

1+ week, 4+ day ago   (1657+ words) [New Report] Phishing Is Still the No. 1 Initial Threat Access Vector Phishing is still the top initial access vector, accounting for more than half of cyberattacks observed during Q2 2026, according to a new report from Cisco Talos. "Phishing was the primary…...

1+ week, 5+ day ago   (119+ words) Threat actors’ abuse of enterprise collaboration tools increased fourfold over the past twelve months, according to researchers at Palo Alto Networks’ Unit 42. Nearly all of this malicious activity begins with a traditional phishing attack. Once the attackers have access to…...

2+ week, 4+ day ago   (1654+ words) Microsoft Observed 7.6 Billion Phishing Emails in Q2 2026 Researchers at Microsoft warn that phishing emails are still the top initial access vector, with more than two billion phishing threats detected each month during the second quarter of 2026. "Notable campaigns observed during the…...

2+ week, 4+ day ago   (152+ words) Phishing is still the top initial access vector, accounting for more than half of cyberattacks observed during Q2 2026, according to a new report from Cisco Talos. Talos highlights a sophisticated QR code phishing campaign that’s targeting Australians in order to steal…...

3+ week, 2+ day ago   (1347+ words) Lead Analysts: Prabhakaran Ravichandhiran and Jeewan Singh Jalal Phishing is a form of social engineering that has evolved beyond simple lures into complex, multi-stage attacks exploiting trusted software, cloud identities and business platforms to bypass traditional security. Attackers leverage these…...