Attackers Use Fake Passkey Updates to Hijack Microsoft 365 Accounts
Microsoft has warned about an active social engineering campaign where attackers impersonate corporate IT help desks to steal credentials, session tokens, and more.
Read MorePhishing
Legitimate Apple Emails Are Being Abused In Callback Phishing
Scammers are delivering phishing content inside legitimate emails sent from Apple’s own infrastructure.
Read MoreFake AI CAPTCHA Pages Used to Bypass Phishing Defenses
Researchers warn that fake CAPTCHA pages generated on AI-native platforms are helping phishing sites evade scanners and trick users into surrendering credentials.
Read MoreHidden Prompt-Injection Exploits Gmail’s AI Summaries
Invisible HTML and CSS could be used to trick Google Gemini email summaries into displaying fake “security alerts”. No in-the-wild abuse has been seen.
Read MoreChrome Utilizes AI Against Tech Support Scams in New Update
Chrome 137 will implement and use Gemini Nano to spot tech-support scam sites in real time for users who enable Enhanced Protection.
Read MoreMost Phishing Campaigns Evade Traditional Filters
Reliance on known IoCs makes many phishing attempts appear “zero-day,” giving attackers a window to bypass defenses before they are flagged.
Read MoreHackers Exploit Google Search Ads to Hijack Google Ads Accounts
Cybercriminals are using malicious Google search ads to steal login credentials and take over Google Ads accounts.
Read MoreHackers Exploit California Wildfire Relief Efforts to Launch Phishing Scams
Cybercriminals are exploiting California wildfire relief efforts to launch phishing attacks targeting individuals seeking to donate funds to these relief efforts.
Read MoreNew “2SP” Phishing Attacks Leverage SVG and Visio Files to Evade Detection
Cybersecurity researchers are warning of a new wave of “2SP” (Two-Step Phishing) attacks that use SVG (Scalable Vector Graphics) file attachments to bypass traditional email security filters.
Read MoreHackers Exploit Snail Mail to Distribute Malicious QR Codes
Cybercriminals are now using traditional mail to carry out cyberattacks, sending malicious QR codes directly to victims’ homes.
Read More