Phishing

Employees are unknowingly inviting tech support impersonators into firms, says FBI

The warning is a sign to CSOs that training on physical as well IT security awareness is vital to protect enterprises from data theft.

FBI warns of Kali Oauth stealers

A new phishing attack platform endangers Microsoft environments.

FlowerStorm phishing gang adopts virtual-machine obfuscation to evade email defenses

Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.

Scattered Spider co-conspirator pleads guilty

Another one down, but other members of phishing gang are still active.

A booming business: The rise of cybergangs

7 biggest healthcare security threats

Healthcare organizations can expect ransomware, botnets, cloud misconfigurations, web application attacks, phishing, AI usage, and smart devices to be their top risks.

EvilTokens abuses Microsoft device code flow for account takeovers

The phishing-as-a-service toolkit leverages legitimate authentication to capture tokens and access Microsoft 365 services.