Phishing · 2h ago
Security Breach at Shipping Partner Compromises Data of 14,000 Trezor Users
Popular hardware cryptocurrency wallet manufacturer Trezor has disclosed a data breach impacting nearly 14,000 of its…
Phishing
30 storiesCredential theft, MFA bypass and social engineering.
Phishing · 1d ago
FBI Warns of Cybercriminals Stealing and Selling Private, Explicit Content via Social Engineering
The Federal Bureau of Investigation has issued a warning regarding a growing cyber threat where hackers employ social…
Phishing · 2d ago
Delta investigates in-flight Wi-Fi spoofing on post-DEF CON flight from Las Vegas
Delta Airlines said Tuesday it’s investigating an incident on a Monday flight where a passenger reportedly used…
Phishing · 2d ago
LiteLLM Attack Shows AI Infrastructure Is Becoming a Strategic Software Supply Chain Target
The March 2026 compromise of LiteLLM was more than a short-lived malicious PyPI upload. It demonstrated how an upstream…
Phishing · 2d ago
ErrTraffic Combines WordPress Hacks, Blockchain C2 and Rotating Malware Domains in One Delivery Network
An active ErrTraffic malware-as-a-service campaign that combines compromised WordPress sites, ClickFix lures, Polygon…
Phishing · 3d ago
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main…
Phishing · 3d ago
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the…
Phishing · 3d ago
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro…
Phishing · 5d ago
ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well…
Phishing · 6d ago
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network…
Phishing · 6d ago
Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails
Cybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs…
Phishing · Aug 5, 2026
Fake Bank of America Phishing Scam Installs Remote Access Malware
Cybercriminals are using a fake Bank of America phishing campaign to trick users into downloading a malicious script…