-
Ocean Security found a phishing campaign, dubbed Phantom Preview, that abused legitimate Frame.io notifications and hidden PDF links…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockchain ClickFix…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An Amazon Prime phishing campaign is using fake payment alerts to steal account logins, personal data and complete credit or debit card details from unsuspecting customers.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Phishing exposure reached 69.9% across five key US industries, with finance and manufacturing facing the highest levels, according to ANY.RUN data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft disrupted EvilTokens after the AI-powered phishing service compromised 12,000 inboxes across 10,000 organisations and enabled complex financial fraud.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and authorization tokens.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
