Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
Ravie LakshmananAug 11, 2026Social Engineering / Malware The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a...
engineering
The $5 million threat: AI Is supercharging phishing attacks
According to the newly-published study, phishing and social engineering are becoming more expensive to recover from, trickier to detect, and...
Email threats changed after the Tycoon2FA take-down
The adaptation came in the form of using Microsoft Teams as a social engineering channel. Attackers established conversations to build...
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
Ravie LakshmananJul 17, 2026Social Engineering / Malware North Korean threat actors linked to the Contagious Interview campaign have been observed...
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
Ravie LakshmananJul 17, 2026Social Engineering / Malware North Korean threat actors linked to the Contagious Interview campaign have been observed...
AI-Driven Identity Attacks Are Surging, PwC Warns
Identity and social engineering scams have been a time-honored way to gain unauthorized access to systems. Cybercriminals typically use email...
Anthropic’s Claude Tag aims to turn workplace AI from a personal assistant into a teammate
“For engineering teams, Claude Tag will help reduce time spent on debugging through fragmented Slack discussions, summarizing long incident threads,...
Patch Tuesday, May 2026 Edition
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good...
[un]prompted 2026 – Detection & Deception Engineering In The Matrix
The post prompted 2026 – Detection & Deception Engineering In The Matrix appeared first on Infosecurity.US. Author, Creator & Presenter:...
Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks
Ravie LakshmananApr 16, 2026Application Security / Threat Intelligence A "novel" social engineering campaign has been observed abusing Obsidian, a cross-platform...
Privacy-Preserving Data Analytics: Stop Collecting What You Do Not Need
There is an almost reflexive habit in data engineering: whenever you instrument an event, you attach a user ID. It...
North Korea’s APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware
Ravie LakshmananApr 13, 2026Social Engineering / Threat Intelligence The North Korean hacking group tracked as APT37 (aka ScarCruft) has been attributed...
Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
While the immediate threat is the social engineering campaign delivering Vidar, the leaked source code itself presents a distinct and...
Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass
Ravie LakshmananApr 01, 2026Social Engineering / Malware Microsoft is calling attention to a new campaign that has leveraged WhatsApp messages...
Kubernetes Upgrades Are Eating Engineering Time: How to Get It Back
Kubernetes powers your products, but it quietly hijacks your engineering organization. Every year, you pay senior engineers to wrestle...
