Credential theft, MFA bypass and social engineering.

Phishing · Aug 5, 2026

Smoke#Screen RMM Takeover Gambit Exposes Threat Actor Playbook

The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote…

Phishing · Aug 4, 2026

Device Code Phishing Up 1,500% in 2026; Vishing Doubles

Newer social engineering techniques help attackers ignore entrenched security controls and limit the evidence they…

Phishing · Jul 30, 2026

AiTM Phishing Becomes Top Initial Access Threat to Law Firms

AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats

Phishing · Jul 30, 2026

Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages

Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor…

Phishing · Jul 29, 2026

LogoKit Phishing Kit Screenshots Victim Sites in Real Time

LogoKit now builds per-victim phishing pages using live screenshots of the target's real website

Phishing · Jul 29, 2026

Ghost Credentials Expose Cloud Systems to Hidden Identity Risks

Dormant nonhuman identities can create security blind spots, says security researcher Aleksandr Krasnov, who plans to…

Phishing · Jul 28, 2026

Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques

Analysis of real-life incident response cases by Cisco Talos warns that phishing remains a powerful method of initial…

Phishing · Jul 24, 2026

Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors

Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a…

Phishing · Jul 24, 2026

ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point

OpenAI’s chatbot tool ChatGPT ranked among the top 10 most impersonated brands in phishing attacks for the first time

Phishing · Jul 21, 2026

FBI Warns of Deepfake Videos Impersonating IC3 Leadership

FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites

Phishing · Jul 21, 2026

Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros

In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to…

Phishing · Jul 16, 2026

Phishing Campaign Hides Lua Loader as TrueType Font File

Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers