A forthcoming consultation paper could split India's AI rules into two tracks, with the most powerful models facing tests before launch India may soon ask the builders of its most powerful AI systems to prove those systems are safe before…
Sansec counted 953 online stores carrying a JavaScript loader that has been running since July 2025. Most of them run Magento. The detail that makes this campaign different from the usual card-skimming injection is what the loader does before it decides to…
The research was published on October 26, 2026. The attackers often contacted several victims within a short window, which the researchers read as automation. Arctic Wolf did not identify the operators, but noted that external Teams chat as an initial access route…
Link inspection assumes a URL has one answer. Either it serves a credential page or it does not. A platform that serves a benign article to a scanner and a fake login page to a target breaks that assumption, and…
Main bombing sis getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang. Threat actors are abusing Microsoft Teams' external chat functionality at scale, using IT-support impersonation and email…
TL;DR what: Attackers are flooding employee inboxes with junk mail, then messaging them... Tagged with cybersecurity, infosec, security. - what: Attackers are flooding employee inboxes with junk mail, then messaging them on Microsoft Teams as fake internal IT support from…
Press play to start listening Cybersecurity researchers from Arctic Wolf Labs have uncovered a widespread campaign involving the abuse of Microsoft Teams’ default external chat settings to gain initial access to corporate networks. Researchers reviewed more than 400 incidents involving this…
On October 1, Maryland’s identity fraud law caught up with a new reality: seeing or hearing someone is no longer necessarily enough to verify their identity. The definition is broad, such that deepfake fraud does not require an elaborate fabricated video.
Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf has found. The security company documented more than 400 incidents in which the external…
Disclosure: I co-founded Mitosis Labs, which runs Private SuperIntelligence. This is an adaptation of the original guide, written for family offices. If you build or secure anything that moves money, here is a definition worth reading closely. The FBI's Internet…
Pretexts, deepfakes and the human exploit.
An article joins this feed when it matches these terms. Each one is also a search of its own.