Best of the Worst: Five Attacks That Looked Broken (and Worked)
The post Best of the Worst: Five Attacks That Looked Broken (and Worked) appeared first on Blog. I skipped last...
Phishing
Fake Google Antigravity Installer Can Steal Accounts in Minutes
Image generated from Gemini Nano Banana A fake Google Antigravity download is exposing user accounts to compromise within minutes. What...
New Apple Phishing Scam Uses Fake $899 iPhone Purchase Alert
Image: akportfolio24/Envato One fake Apple alert is all it takes to send someone into a tailspin. A new phishing scam...
Two MDO field reports every IT security lead should read
The post Two MDO field reports every IT security lead should read appeared first on Blog. Tyler Swinehart, Director of...
Phishing LNK files and GitHub C2 power new DPRK cyber attacks
Phishing LNK files and GitHub C2 power new DPRK cyber attacks Pierluigi Paganini April 06, 2026 DPRK-linked hackers use GitHub...
Threat actor UAC-0255 impersonate CERT-UA to spread AGEWHEEZE malware via phishing
Threat actor UAC-0255 impersonate CERT-UA to spread AGEWHEEZE malware via phishing Pierluigi Paganini April 02, 2026 Threat actors impersonated CERT-UA...
Gmail’s New Rename Feature Could Add Spam and Phishing to Your Inbox
As of March 31st, Google is allowing users to change their primary Gmail address username. Although a nice feature...
Shut the Front Door on Email Attacks: How to Scale Security Services Without Increasing Workload
Email remains the primary entry point for cyberattacks, driven largely by phishing and account compromise. For attackers, it is...
Casbaneiro Phishing Targets Latin America and Europe Using Dynamic PDF Lures
Ravie LakshmananApr 01, 2026Malware / Windows Security A multi-pronged phishing campaign is targeting Spanish-speaking users in organizations across Latin America...
Incident responders, s’il vous plait: Invites lead to odd malware events
Sophos’ Managed Detection and Response (MDR) teams reported on a phishing campaign late last year that attempted to trick users...
Russia-linked APT TA446 uses DarkSword exploit to target iPhone users in phishing wave
Russia-linked APT TA446 uses DarkSword exploit to target iPhone users in phishing wave Pierluigi Paganini March 30, 2026 Russia-linked TA446...
New AITM phishing wave hijacks TikTok Business accounts
New AITM phishing wave hijacks TikTok Business accounts Pierluigi Paganini March 27, 2026 A new AITM phishing campaign targets TikTok...
AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion
Ravie LakshmananMar 27, 2026Ransomware / Malware Threat actors are using adversary-in-the-middle (AitM) phishing pages to seize control of TikTok for...
SEC Rules – Crypto IS A Security – Sometimes
There’s a classic Saturday Night Live sketch where Chevy Chase and Gilda Radner pitch “Shimmer”—a product that’s both a...
Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse
Cybersecurity researchers are calling attention to an active device code phishing campaign that's targeting Microsoft 365 identities across more than...
