UPDATED
IT Pro ·
Ross Kelly is ITPro's News & Analysis Editor, with a keen interest in cyber security, business leadership and emerging technologies. He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro...
Help Net Security · · Medium severity
An employee gets an email dressed as a password reset. She clicks the link, types her credentials into a page built to copy her company’s login screen, and moves on with her morning. Across 13.9 million simulated phishing messages, one...
SiliconANGLE · · Medium severity
Email security startup AegisAI Inc. today said it has raised $36 million in new funding to counter a fast-growing class of artificial intelligence-generated email attacks that no amount of employee training can reliably stop. The San...
TechCrunch · · Medium severity
The Series A was led by Battery Ventures, bringing AegisAI total funding to $49 million.
Cybersecurity Dive - Latest News · · Critical severity
The threat actor exploited a zero-day flaw in Zimbra to exfiltrate months of emails and other sensitive information.
AlienVault OTX ·
Device code phishing exploits the OAuth 2.0 device authorization grant, a legitimate authentication feature designed for input-limited devices like smart TVs. Attackers initiate a device-code request with Microsoft, receive a valid...
All CISA Advisories ·
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite Executive summary A group of Russian state-supported cyber actors has been targeting and compromising various Western...
TechTrends Africa ·
New Brand Phishing Report reveals cybercriminals are concentrating attacks around the world’s most trusted digital, social, and have now added... The post Microsoft Leads Q2 2026 Brand Phishing as ChatGPT Emerges as a New Phishing...
Help Net Security ·
German and US law enforcement have dismantled the infrastructure behind Kratos, a notorious phishing-as-a-service (PhaaS) platform. Its alleged developer and administrator was arrested in Indonesia by local police. Seizure banner...
AlienVault OTX · · Medium severity
A sophisticated adversary-in-the-middle phishing campaign is targeting universities, enterprises, and multinational institutions including EU and UN agencies. Active since May 2026, the operation leverages compromised organizational...
AlienVault OTX · · Medium severity
An active Lampion malware campaign has been identified targeting Portuguese users through phishing emails that impersonate financial and administrative communications. Lampion, a Brazilian banking malware derived from the ChePro...
The Hacker News ·
German and US law enforcement have taken down the core infrastructure of Kratos, described by German investigators as one of the world's most widely used criminal phishing kits, and Indonesian authorities arrested the man they say...
BleepingComputer ·
Authorities in Germany and the U.S. dismantled the central infrastructure of Kratos, a phishing-as-a-service (PhaaS) platform with global reach, and its developer was arrested in Indonesia.
The Register ·
German authorities say they have neutralized the main infrastructure supporting the Kratos phishing-as-a-service (PhaaS) kit following an operation supported by the US and Indonesia. Officers from Frankfurt am Main's Central Office for...
darkreading ·
"The TFF Trap" uses fileless techniques and loaders with low detection rates to deploy various RATs and stealers, including Agent Tesla, Remcos, XWorm, and Best Private Logger.
The Hacker News · · Medium severity
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains. One...
TNW ·
Scammers are sending phishing emails that are near-exact replicas of X’s legitimate login notifications, warning recipients of a login “from a new device” in a location they have never been. The emails include X’s logo, correct...
Digital Trends ·
A phishing email mimicking X's real login alerts is making the rounds, and it's designed to steal your password instead of protecting your account. Here's how to spot the fake and what to do if you clicked.
AlienVault OTX · · Medium severity
A sophisticated phishing campaign targeting Indian businesses and taxpayers leverages GST-related themes to distribute Remcos RAT through a multi-stage .NET framework. Threat actors impersonate Government of India GST communications...
HackRead · · Medium severity
An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows…
Seqrite Blog · · Medium severity
Introduction Seqrite Labs recently identified a malware distribution campaign that abused the credibility of government institutions to increase infection success rates. The threat actors impersonated legitimate government departments...
CSO Online Security · · Medium severity
Threat actors are now abusing an ordinary font file to deliver low-detection malware capable of stealing credentials and establishing persistence on compromised Windows systems. According to a new research from Fortinet’s FortiGuard...
Help Net Security ·
The call comes in at 4:40 on a Friday. The voice belongs to a senior manager, or sounds close enough, and she needs a password reset before a flight. She is polite, she is in a hurry, and she has the last four of the badge number.
Infosecurity Magazine · · Medium severity
Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers
Help Net Security · · Medium severity
Finance departments process a constant stream of invoices, contracts, payment notices, and procurement emails, making email one of the most common initial access vectors for threat actors. According to Cofense, attackers exploit those...
TechRepublic ·
New Jalisco and OmegaLord phishing kits target Microsoft 365 accounts by abusing device code flows, OAuth tokens, and MFA prompts to maintain access. The post Jalisco, OmegaLord Phishing Kits Target Microsoft 365 Accounts appeared first...
The Hacker News · · Medium severity
A malware framework called OkoBot has been running on Windows machines since April 2025, and one of its modules is built to con hardware wallet owners out of their recovery phrase. On an infected PC, the request comes from inside the...
TechRadar ·
New phishing campaign hits LastPass, Bitwarden users - password manager customers warned not to fall for this scam
Infosecurity Magazine · · Medium severity
Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims
AlienVault OTX · · Medium severity
Phishing attacks have surged in 2026 as AI-powered phishing-as-a-service kits enable threat actors to bypass multi-factor authentication and harvest OAuth tokens at scale. Two phishing tools were identified in active campaigns: Jalisco,...
AlienVault OTX · · High severity
On May 15, 2026, Huntress agents detected an intrusion where threat actors compromised a terminal server to stage a massive phishing campaign rather than deploy ransomware. The attacker used legitimate bulk email software (Gammadyne...
AlienVault OTX · · Medium severity
A sophisticated Python-based RAT targeting Korean users through spear phishing emails disguised as Microsoft security alerts. The attack chain employs LNK files embedded in ZIP archives, BAT-based obfuscation, and multi-stage loaders...
IT Security Guru · · Medium severity
KnowBe4’s latest benchmarking report, based on 42 million phishing simulations worldwide, reveals the sectors most vulnerable to phishing attacks across the UK and Ireland, while highlighting the impact of continuous security awareness...
IT Security Guru · · Medium severity
New research from Forescout has uncovered a sophisticated phishing campaign that uses fake seasonal eCard invitations to trick victims into installing legitimate remote management software, giving attackers long-term access to...
BleepingComputer ·
Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using techniques that defeat multi-factor authentication (MFA).
CSO Online Security · · Medium severity
A newly documented phishing-as-a-service platform distributed through Telegram is lowering the technical barrier to Microsoft 365 account takeovers by giving less-skilled attackers automated tools to evade some authentication controls...
Infosecurity Magazine ·
Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA
AlienVault OTX · · Medium severity
A misconfigured Python HTTP server on a Budapest VPS exposed the complete operational infrastructure of three distinct phishing operators. The investigation uncovered codemado, an Egyptian threat actor operating since 2018, running a...
The Hacker News ·
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory listing switched on. The command that did it: python3 -m http.server 8080, was still sitting in the readable...
TechRadar ·
Devious phishing campaign hijacks a genuine Meta business feature to send scam emails — as they really do come from Meta's own address
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free