Patch Tuesday, May 2026 Edition
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good...
Social
Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks
Ravie LakshmananMay 01, 2026Malware / Social Engineering Cybersecurity researchers are warning of two cybercrime groups that are carrying out "rapid,...
Toxic Combinations: When Cross-App Permissions Stack into Risk
On January 31, 2026, researchers disclosed that Moltbook, a social network built for AI agents, had left its database wide...
Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks
Ravie LakshmananApr 16, 2026Application Security / Threat Intelligence A "novel" social engineering campaign has been observed abusing Obsidian, a cross-platform...
Social Security Scam Emails and a Healthcare Data Breach: This Week in Scams
Emails claiming to be from Social Security are making the rounds right now. They look official. They sound official. And they’re designed...
Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
While the immediate threat is the social engineering campaign delivering Vidar, the leaked source code itself presents a distinct and...
DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials
Ravie LakshmananMar 30, 2026Threat Intelligence / Browser Security A new campaign has leveraged the ClickFix social engineering tactic as a...
Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR
Ravie LakshmananMar 24, 2026Endpoint Security / Social Engineering A large-scale malvertising campaign active since January 2026 has been observed targeting...
LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader
The ransomware operation known as LeakNet has adopted the ClickFix social engineering tactic delivered through compromised websites as an initial...
Hackers Pose as IT Staff in Microsoft Teams to Install Malware
Image: sapannpix/Adobe Microsoft Teams impersonation and social engineering tactics are being used in an ongoing campaign to deliver a stealthy...
Twitter suspended 800 million accounts last year – so why does manipulation remain so rampant?
X, Elon Musk's social media site that many people (me included) still prefer to call Twitter, has told British MPs...
DoJ Seizes $61 Million in Tether Linked to Pig Butchering Crypto Scams
Ravie LakshmananFeb 27, 2026Financial Crime / Social Engineering The U.S. Department of Justice (DoJ) this week announced the seizure of...
Is Poshmark safe? How to buy and sell without getting scammed
Like any other marketplace, the social commerce platform has its share of red flags. It pays to know what to...
AI Agents Are Quietly Redefining Enterprise Security Risk
Image: GoldenDayz/Envato A new social network called Moltbook launched in late January with a premise that should unsettle every CISO...
Moltbook is Dangerous, but Scale Doesn’t Match the Hype: Zenity
Moltbook, the highly popular Reddit-style social network designed exclusively to enable AI agents to communicate, launched in late January...
