UPDATED
Microsoft Security Blog ·
In this article Uncovering the shadow world of a phishing kit ecosystem Storm-3119: YAM Store, the power broker Storm-2990: The Iron Man System phishing kit Downstream activity from Storm-2990 phishing kits Mitigation and protection...
The Record by Recorded Future ·
The tech giant worked with Japan’s National Police Agency and healthcare cybersecurity organization Health-ISAC to obtain a U.S. court order seizing and redirecting domains that were part of the infrastructure underlying YAM Store,...
BleepingComputer ·
A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizations across 150 countries has been disrupted by law enforcement agencies and partners worldwide.
SecurityWeek · · Medium severity
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man. The post Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages appeared first on SecurityWeek .
HackRead · · Medium severity
Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockchain ClickFix…
TechRadar · · Medium severity
Hackers hide behind Microsoft's own websites to get past email filters and launch phishing campaigns
Malwarebytes Labs ·
You ignored the suspicious email. You didn’t open the attachment, click the link, or reply to the sender. Then you asked your AI assistant to summarize your inbox.
IT Pro · · Medium severity
US seizes vulnerability scanning and spear phishing tools used by China-sponsored hackers
IT News Africa ·
The SARS filing deadline for most salaried taxpayers is Friday, 23 October 2026. Scammers know this date too. Fake SARS emails, SMSes and eFiling pages are circulating as the deadline nears. This guide shows you how to file safely and...
IT Security Guru · · High severity
Organisations worldwide faced an average of 2,803 cyber attacks per week in September 2026, up 16% on August and 48% on the same month last year, according to new data from Check Point Research. The figures point to sustained growth...
Help Net Security · · Medium severity
Scammers are going after YouTube creators’ Google accounts by posing as a brand looking for sponsorship partners. By sending out personalized emails that reference a creator’s own videos and directing targeted creators to a convincing...
CSO Online Security · · Medium severity
From registering a domain to having it delegated, certificated and serving a live credential-harvesting page took under 24 minutes, and 12 of those were spent waiting on nameservers. I keep coming back to that number, because it quietly...
AlienVault OTX · · Medium severity
Multiple Remote Monitoring and Management (RMM) tools are being distributed through phishing campaigns involving video files and email attachments. Threat actors exploit legitimate RMM solutions like ScreenConnect, FleetDeck, Datto,...
AlienVault OTX ·
In September, a phishing campaign exploited legitimate Microsoft Power BI domains to distribute rogue ScreenConnect remote monitoring tools. Attackers sent phishing emails with embedded links redirecting victims to fake reference...
Cybersecurity Dive - Latest News ·
The company presented new data about the prevalence of different forms of social-engineering attacks, saying identity fundamentals still matter in the AI era.
IT Security Guru · · Medium severity
Attackers are abusing Microsoft Power BI to host phishing lures that slip past email security, before dropping multiple rogue ScreenConnect clients on victims’ machines to secure persistent remote access, according to new research from...
Help Net Security ·
Hoxhunt has announced expanded capabilities for Hoxhunt Respond, its email incident response automation platform for security operations teams. Respond can reduce phishing tickets requiring analyst attention by up to 99% and remediate...
Infosecurity Magazine ·
Barracuda finds phishing emails designed to manipulate both human users and AI assistants
TechRadar · · Medium severity
Efosa has been writing about technology for over 7 years, initially driven by curiosity but now fueled by a strong passion for the field. He holds both a Master's and a PhD in sciences, which provided him with a solid foundation in...
TechRadar ·
These social media posts promise big online discounts on Lego, Calvin Klein and more — but really they're just phishing scams
HackRead · · Medium severity
Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to deliver the CosmicPulse backdoor.
The Hacker News ·
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector...
Malwarebytes Labs · · High severity
Free Mobile, one of France’s main cellular providers, was fined €27 million by France’s data protection regulator, the CNIL, in January over failures to protect customer data. The October 2024 breach allowed an unauthorized party to...
AlienVault OTX ·
A China-aligned espionage group designated TA419 conducted credential phishing campaigns targeting AI policy experts at US universities, think tanks, and law firms. The attackers impersonated prominent figures including a senior...
Cybersecurity Dive - Latest News ·
The China-linked espionage attacks were designed to gain insight into the country’s strategy and regulatory environment.
The Register ·
A suspected Chinese espionage group impersonated AI policy figures, including a senior Anthropic employee and a former White House official, in phishing campaigns targeting AI policy experts at US universities, think tanks, and law...
PYMNTS.com · · Medium severity
A new report says Chinese hackers are impersonating American AI professionals to steal emails from other artificial intelligence (AI) experts. That report , issued Thursday (Oct. 1) by cybersecurity firm Proofpoint , said that a hacking...
AlienVault OTX · · Medium severity
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing campaigns, the use of accounts on compromised websites, and a novel malware...
AlienVault OTX · · Medium severity
In July 2026, phishing campaigns targeted organizations across multiple industries by distributing a masqueraded MSP360 Remote Monitoring and Management installer through meeting invitations, PDF-themed lures, and software update...
The Hacker News · · Medium severity
Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other...
darkreading · · Medium severity
The APT actor is using a new tactic, dubbed "RedFlick," against Ukrainian-linked targets such as NGOs, think tanks, and journalists to deploy its CosmicPulse backdoor.
The Record by Recorded Future · · Medium severity
The Russian state-backed hacking group Star Blizzard has expanded its phishing operations this year, using a new technique that makes it easier to infect victims with malware.
The Hacker News · · Medium severity
ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest...
HackRead · · Medium severity
An Amazon Prime phishing campaign is using fake payment alerts to steal account logins, personal data and complete credit or debit card details from unsuspecting customers.
Microsoft Security Blog ·
In this article Attack chain overview Mitigation and protection guidance Learn More In July 2026, Microsoft Defender Experts observed phishing campaigns targeting organizations across multiple industries that distributed a masqueraded...
AlienVault OTX · · Medium severity
ASEC identified a phishing campaign targeting organizations in Korea through emails impersonating company employees. The emails contain malicious XLS files disguised as project material purchase request forms. When opened, the documents...
Microsoft Security Blog · · Medium severity
In this article Star Blizzard TTPs observed in 2026 Defending against Star Blizzard and RedFlick-related activity Microsoft Defender detections Hunting queries Indicators of compromise Since January 2026, Microsoft has observed Russian...
HackRead · · Medium severity
Phishing exposure reached 69.9% across five key US industries, with finance and manufacturing facing the highest levels, according to ANY.RUN data.
Tahawul Tech ·
In recent months experts have seen many examples of sophisticated scam and phishing mailings, but that doesn’t mean that traditional, simple tactics have gone away. During the early weeks of the post-holiday season, Kaspersky ’s team...
The Register · · Medium severity
Yes, criminals have job listings too. A Telegram user recruiting callers to work in an apparent Google Security Team voice-phishing scam told applicants that they weren’t allowed to read from scripts – in the same ad that also included...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free