4+ day, 5+ min ago   (707+ words) Hackers are using passkey-themed phishing to take control of Microsoft 365 accounts and collect cloud data. It can defeat MFA protections. The campaign starts with calls and texts to employees. Attackers pose as IT support, claim a passkey, MFA, or single…...

4+ day, 2+ hour ago   (557+ words) A phishing campaign that moves the credential-harvesting page out of attacker-controlled web infrastructure and into the victim’s browser. Unlike ordinary phishing kits, which host cloned login portals on domains that can eventually be detected and disrupted, this campaign delivers malicious…...

4+ day, 5+ hour ago   (417+ words) The activity, observed since May 2026, relies heavily on social engineering. Victims may receive a phone call, SMS message, or Microsoft Teams message from someone impersonating the organization’s IT helpdesk. The attacker claims that the user must urgently update a passkey,…...

4+ day, 2+ hour ago   (399+ words) Instead of sending victims to a hosted credential-harvesting page, the attackers generate the phishing page directly inside the victim’s browser using a blob URL. This technique makes detection harder because the phishing page does not exist as a normal internet-accessible…...

4+ day, 7+ hour ago   (151+ words) Japanese operator Sakura Internet has completed its investigation into an unauthorised access incident affecting its rental server service and a separate attack on its customer management system, identifying 1,360,563 accounts whose stored information may have been viewed or obtained by a…...

4+ day, 8+ hour ago   (607+ words) A phishing campaign is generating fake login pages directly inside victims’ browsers rather than hosting them on external web servers, making the attacks difficult for conventional security tools to detect or block. Researchers at Barracuda have published an analysis of…...

4+ day, 7+ hour ago   (352+ words) A phishing campaign routes victims through genuine Microsoft OAuth and Teams infrastructure before showing them a fake login page built entirely inside their own browser, according to researchers at Barracuda. “Instead of delivering a phishing page from a web server,…...

4+ day, 22+ hour ago   (454+ words) A team of researchers at Calif, a cybersecurity startup based in Palo Alto, California, has built a tool capable of hacking Android and iOS phones via a simple incoming call. The hacking tool, dubbed WeWorm, relies on the exploitation of…...

4+ day, 22+ hour ago   (642+ words) Lillian Castro, Senior Editor Lillian Castro brings more than 30 years of editing and journalism experience to our team. She has written and edited for major news organizations, including The Atlanta Journal-Constitution and the New York Times, and she previously served…...

4+ day, 18+ hour ago   (883+ words) Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to…...