Credential theft, MFA bypass and social engineering.

Phishing · Aug 10, 2026

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main…

Phishing · Aug 10, 2026

New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the…

Phishing · Aug 10, 2026

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro…

Phishing · Aug 7, 2026

ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well…

Phishing · Aug 7, 2026

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network…

Phishing · Aug 7, 2026

Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

Cybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs…

Phishing · Aug 5, 2026

Fake Bank of America Phishing Scam Installs Remote Access Malware

Cybercriminals are using a fake Bank of America phishing campaign to trick users into downloading a malicious script…

Phishing · Aug 5, 2026

Smoke#Screen RMM Takeover Gambit Exposes Threat Actor Playbook

The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote…

Phishing · Aug 4, 2026

Device Code Phishing Up 1,500% in 2026; Vishing Doubles

Newer social engineering techniques help attackers ignore entrenched security controls and limit the evidence they…

Phishing · Jul 30, 2026

AiTM Phishing Becomes Top Initial Access Threat to Law Firms

AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats

Phishing · Jul 30, 2026

Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages

Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor…

Phishing · Jul 29, 2026

LogoKit Phishing Kit Screenshots Victim Sites in Real Time

LogoKit now builds per-victim phishing pages using live screenshots of the target's real website