UPDATED
The Record by Recorded Future · · Medium severity
Subscribers to newsletters from Trezor, CoinTracking and BitBox received corrupted messages through an email provider that all three companies use.
The Hacker News ·
A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An exposed system stays...
TechRadar · · Medium severity
Beware — these new phishing attacks use a convincing fake Adobe Reader pages to trick victims into installing malware
The Register · · Medium severity
Crypto hardware wallet maker Trezor Trezor says the third-party email service provider it uses to send newsletters has been breached, and customers are now being sent phishing messages. The good news is that the emails appear easy to...
IT Pro ·
Cyber researchers issue warning over 'phishing pages that exist only inside the victim’s browser'
BleepingComputer · · Medium severity
Trezor warned customers on Wednesday that threat actors who breached its third-party email provider are targeting them in phishing attacks.
Help Net Security ·
A phishing campaign routes victims through genuine Microsoft OAuth and Teams infrastructure before showing them a fake login page built entirely inside their own browser, according to researchers at Barracuda. “Instead of delivering a...
AlienVault OTX · · Medium severity
Two sophisticated phishing campaigns employed browser-in-the-browser (BiTB) techniques to deceive victims into installing rogue ScreenConnect remote management tools. Attackers sent phishing messages with malicious links redirecting...
IT Security Guru · · Medium severity
Huntress researchers have uncovered two phishing attacks that combined convincing fake browser windows with legitimate remote management software to establish persistent access to victims’ devices. Both incidents, observed in August,...
darkreading · · Medium severity
A Chinese-language group is compromising government and education sites to create a reverse-proxy network with gambling-themed sites.
SecurityWeek · · Medium severity
Attackers are using trusted Microsoft services and blob URLs to generate stealthy phishing pages that leave defenders with no static website to detect or block. The post New Phishing Attack Creates Malicious Pages Inside the Victim’s...
darkreading · · Medium severity
Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ScreenConnect remote access.
TechRadar ·
Microsoft 365 users hit by two major threat campaigns - fake IT calls and phishing emails target users across the world
The Register ·
A Microsoft 365 phishing operation targeting hundreds of organizations captured thousands of passwords and session cookies, including hundreds of authenticated sessions that could be hijacked to bypass MFA, according to researchers who...
Help Net Security · · High severity
Roughly 67,000 more customers of SatoshiLabs, the maker of hardware crypto-wallet Trezor, are at heightened risk of phishing attacks after their names, email addresses, phone numbers, and shipping addresses were exposed. “The leaked...
Computerworld ·
A phishing-as-a-service operation targeting Microsoft 365 users has harvested thousands of session cookies that could be used to hijack authenticated sessions after victims complete multifactor authentication, CloudSEK said. The...
CSO Online Security ·
A phishing-as-a-service operation targeting Microsoft 365 users has harvested thousands of session cookies that could be used to hijack authenticated sessions after victims complete multifactor authentication, CloudSEK said. The...
AlienVault OTX ·
Cybercriminals are exploiting legitimate Google infrastructure in a sophisticated phishing operation that bypasses email security gateways and enterprise firewalls. The attack chains together six distinct Google properties including...
AlienVault OTX ·
In June 2026, researchers uncovered BigBear 2.0, a rebranded Evilginx2-based phishing-as-a-service framework targeting Microsoft 365 credentials globally. The operation, managed by operator 'General Boss', deployed 42 VPS nodes...
BleepingComputer ·
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials.
TechRadar · · Medium severity
Hackers are using 'invisible' Unicode characters to sneak phishing lures into emails
IT Pro ·
Cyber criminals are adapting ASCII smuggling for mass phishing campaigns
BleepingComputer · · Medium severity
Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters.
The Hacker News ·
Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters. "Instead of using these characters to hide instructions from people while exposing them to AI models, the...
AlienVault OTX ·
Microsoft researchers identified a high-volume phishing campaign utilizing invisible Unicode tag characters (U+E0000 to U+E007F), a technique originally associated with AI prompt injection research known as ASCII Smuggling. The...
Help Net Security ·
Microsoft is preparing a new feature for Teams users that will help them stay safe from QR code phishing. Teams will automatically hide QR codes sent by people outside the organization. Users will need to reveal the image first before...
The Hacker News · · Medium severity
The worst part is how normal these attacks look. A simple request to click “Allow.” Why break in when someone might open the door? That idea runs through this edition.
Microsoft Security Blog ·
In this article What is ASCII smuggling? Writing a practical ASCII-smuggling signature What we observed: ASCII smuggling repurposed for phishing What is known and what is new Is there a detection gap? Mitigation and protection guidance...
Infosecurity Magazine · · Medium severity
Outsider phishing kit generated 700 new pages after a Google-led disruption
The Hacker News ·
An RMM phishing campaign initially associated with Canadian targeting due to its use of Canada Revenue Agency (CRA) tax forms as lures has turned out to be part of a broader campaign spanning 46 countries. Around 45% of observed...
"enterprise IT OR cloud OR cybersecurity Armenia" - Google News ·
How an Armenian startup plans to use a new innovation to tackle the billion-dollar phishing industry TechCrunch
IT Security Guru ·
A newly identified phishing-as-a-service kit is being used to hijack Microsoft 365 accounts by stealing victims’ active login sessions rather than their passwords, according to new research from cybersecurity firm Huntress, a technique...
AlienVault OTX · · Medium severity
Huntress researchers discovered Knight Office, a phishing kit utilizing Adversary-in-the-Middle techniques to steal Microsoft 365 session tokens. The attack chain begins with DocuSign-themed phishing emails containing redirects through...
Help Net Security · · Medium severity
Attackers are targeting prominent individuals, their relatives and personal contacts to gain persistent access to their accounts, including private emails and files, the FBI has warned. The FBI’s Internet Crime Complaint Center (IC3)...
TechRadar ·
Rene Millman is a seasoned technology journalist whose work has appeared in The Guardian, the Financial Times, Computer Weekly, and IT Pro. With over two decades of experience as a reporter and editor, he specializes in making complex...
AlienVault OTX · · Medium severity
Between January and April 2026, a coordinated social engineering operation named Spring Ring leveraged external Microsoft Teams accounts to impersonate IT help desk personnel, targeting over 150 employees across at least 10 companies....
AlienVault OTX · · Medium severity
A sophisticated phishing operation initially appearing to target Canadians with fake Canada Revenue Agency T4 tax documents has evolved into a global campaign spanning 46 countries, with 45% of activity concentrated in the United...
AlienVault OTX · · Medium severity
OX Security identified a campaign distributing fake Cloudflare Captcha pages through 24 malicious npm packages. The threat actors exploit npm mirrors like unpkg, yarn, and npmmirror as free hosting infrastructure for phishing content....
SANS Internet Storm Center · · Medium severity
As I’ve mentioned before in some of my diaries, from time to time, I like to go over phishing messages that get caught in my various spam traps or sent to us here at the Internet Storm Center. After looking at enough phishing messages,...
Palo Alto Unit 42 · · Medium severity
Learn how the Spring Ring campaign abuses Microsoft Teams and voice phishing to deploy malware and target enterprise domain controllers. The post Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams appeared first...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free