Social Engineering

Aged-domain acquisition: The tradecraft phishing operators are using to bypass your mail filter's reputation score

When a domain has nine years of clean certificate transparency history, your mail filter trusts it. That's the problem.

Autonomous AI agents duped into leaking sensitive data in phishing test

Security researchers show email-enabled agents shared AWS keys and CRM exports despite built-in safety prompts.

Security shifts to the human layer as AI scams surge

Separate advisories suggest familiar scams are evolving alongside enterprise AI adoption, expanding the focus from software vulnerabilities to user behavior.

Employees are unknowingly inviting tech support impersonators into firms, says FBI

The warning is a sign to CSOs that training on physical as well IT security awareness is vital to protect enterprises from data theft.

New Dirty Tricks and the Latest Insights on Phishing

FBI warns of Kali Oauth stealers

A new phishing attack platform endangers Microsoft environments.

FlowerStorm phishing gang adopts virtual-machine obfuscation to evade email defenses

Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.