Credential theft, MFA bypass and social engineering.

Phishing · Jul 29, 2026

Ghost Credentials Expose Cloud Systems to Hidden Identity Risks

Dormant nonhuman identities can create security blind spots, says security researcher Aleksandr Krasnov, who plans to…

Phishing · Jul 28, 2026

Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques

Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial…

Phishing · Jul 24, 2026

Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors

Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a…

Phishing · Jul 24, 2026

ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point

OpenAI’s chatbot tool ChatGPT ranked among the top 10 most impersonated brands in phishing attacks for the first time

Phishing · Jul 21, 2026

FBI Warns of Deepfake Videos Impersonating IC3 Leadership

FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites

Phishing · Jul 21, 2026

Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros

In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to…

Phishing · Jul 16, 2026

Phishing Campaign Hides Lua Loader as TrueType Font File

Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers

Phishing · Jul 16, 2026

SANS Warns of AI Governance Gap as Use by Security Teams Surges

SANS Institute says governance programs are still nascent even as AI failures and threats grow

Phishing · Jul 15, 2026

Phishing Campaign Abuses eCards to Deploy RMM Tools

Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims

Phishing · Jul 13, 2026

Open Directory Exposes Three Evilginx Phishing Operators

Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA

Phishing · Jul 13, 2026

Novel OAuth Client ID Spoofing Technique Targets Cloud Environments

New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into…

Phishing · Jul 13, 2026

Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns

Cybersecurity agencies from 12 countries have warned that Russian state-backed hackers are actively targeting…