Phishing Campaigns Exploit Passkeys to Compromise Microsoft Cloud Accounts
Microsoft has reported two significant phishing campaigns targeting cloud accounts, utilizing advanced social engineering techniques and passkey-themed tactics.
Tag phishing
Brevo Login Vulnerability Exposes Trezor Subscribers to Phishing Attacks
A security flaw in Brevo's login system allowed phishing emails to target 347,000 Trezor subscribers, raising concerns about data security across multiple crypto platforms.
Phishing Campaigns Utilize ASCII Smuggling Techniques
A recent Microsoft report reveals that attackers are employing ASCII smuggling, typically associated with AI prompt injections, in phishing emails to evade detection.
High-Volume Phishing Campaign Utilizes Invisible Unicode to Bypass Email Filters
A recent phishing campaign has deployed invisible Unicode characters to evade email security measures, targeting financial keywords and affecting numerous users.
Recent Cybersecurity Threats: Phishing Kits, Account Hacks, and More
A series of cybersecurity threats have emerged, highlighting vulnerabilities in various systems and the tactics employed by threat actors.
Evolving Threats: Real-Time Account Hijacking in Insurance Phishing
Recent research highlights a shift in phishing tactics targeting the insurance sector, moving from credential harvesting to real-time account hijacking.
BlueNoroff’s Phishing Kit Targets Crypto Wallets via Zoom Impersonation
A new phishing kit linked to North Korean threat actors is exploiting Zoom and Microsoft Teams to target cryptocurrency users, utilizing social engineering tactics to deliver malware.
Miinto Reports Data Breach, Warns Customers of Phishing Risks
Danish e-commerce platform Miinto has disclosed a data breach affecting customer order information, prompting warnings about potential phishing attacks.
Recent Cybersecurity Vulnerabilities and Threats: A Weekly Overview
This week’s cybersecurity landscape reveals multiple vulnerabilities affecting various systems, including a significant flaw in Apple's Hide My Email service and a new ransomware phishing campaign targeting small businesses.
EvilTokens Phishing Kit Reveals Advanced Threats to Microsoft 365 Security
The EvilTokens phishing kit has evolved, enabling attackers to bypass multi-factor authentication and gain unauthorized access to Microsoft 365 applications, according to Cisco Talos.
