From Deception to Defense: Understanding and Combating Phishing
Phishing is a cyberattack where attackers attempt to trick victims into an activity that is against their best interests and...
Phishing
New Smish: New York Department of Revenue
As I was visiting SmishTank to report the most recent SMish that I had received (an iMessage from a +27 South...
Microsoft Sniffs Out AI-Based Phishing Campaign Using Its AI-Based Tools
Microsoft’s threat researchers recently detected and blocked a phishing campaign that appeared to use a large language model (LLM) to...
Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security
Microsoft is calling attention to a new phishing campaign primarily aimed at U.S.-based organizations that has likely utilized code generated...
The Security Maginot Line: Fighting Tomorrow’s Cyber Attacks With Yesterday’s Tech
We live in a world where today’s headlines scream of breaches that feel like they’re pulled straight from a cyber-thriller...
SMS Pools and what the US Secret Service Really Found Around New York
Last week the United Nations General Assembly kicked off in New York City. On the first day, a strange US...
Proofpoint Exec: ‘Phishing is the Leading Cause of Breaches Globally’
Slide about AI’s impact on phishing during an email security roundtable event at this week’s Proofpoint Protect 2025 conference in...
Microsoft DCU’s Takedown of RaccoonO365
When I saw the name of the Microsoft Digital Crime Unit’s latest target, “RaccoonO365” I probably reacted to it...
ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks
Organizations in Belarus, Kazakhstan, and Russia have emerged as the target of a phishing campaign undertaken by a previously undocumented...
What We Know About the NPM Supply Chain Attack
Key takeaways Attackers reportedly launched a targeted phishing campaign to compromise Node Package Manager (NPM) maintainer accounts and inject malicious...
K-12 schools face cybersecurity risks inside and outside of the classroom
Phishing was the most common access vector for ransomware infections at lower education institutions over the past year As schools...
Smashing Security podcast #435: Lights! Camera! Hacktion!
When “bad actors” stop being hackers and start being… actual actors. This week, Graham and special guest Jenny Radcliffe play...
Microsoft and Cloudflare teamed up to dismantle the RaccoonO365 phishing service
Microsoft and Cloudflare teamed up to dismantle the RaccoonO365 phishing service Pierluigi Paganini September 17, 2025 Microsoft and Cloudflare disrupted...
Microsoft’s ‘Gross Cybersecurity Negligence Threatens National Security’
Roasting Redmond for Kerberoasting: “Like an arsonist selling firefighting services,” quips this 76-year-old. The post Microsoft’s ‘Gross Cybersecurity Negligence Threatens...
The AI Fix #67: Will Smith’s AI crowd scandal, and gullible agents fall for scams
In episode 67 of The AI Fix, Graham talks to an AI with a fax machine, Bill Gates says there’s...
