UPDATED
CERT Polska ·
Recently, we have been observing attacks by the UNC1151/Ghostwriter group on Gmail. This group has been regularly attacking the mailboxes of Polish citizens for several years, but these attacks have targeted other mail providers in the...
BleepingComputer · · Medium severity
Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users' order histories to trick them into providing sensitive data or installing remote access software.
BleepingComputer · · Medium severity
The Bluekit phishing-as-a-service platform continues to evolve with nearly 70 new hostnames identified over the past week and by adding browser-in-the-middle capabilities for improved data theft.
News – MeriTalk · · Medium severity
Cyberattackers are using phishing to target government networks more than ever, with the government sector logging a 50% increase in phishing attacks in 2025, according to a new report from the cybersecurity platform provider Zscaler....
IT Security Guru · · Medium severity
Imagine completing a two-factor authentication check on a real Microsoft login page and still handing a criminal full access to your email account. According to new research published this week by cybersecurity company Huntress , it...
Help Net Security · · Medium severity
Healthcare technology company Xsolis confirmed that a phishing attack resulted in unauthorized access to its network. The company develops AI-powered software for hospitals, health systems, and health plans and serves more than 600...
TechRadar ·
IT Pro ·
https://cdn.mos.cms.futurecdn.net/Y5vrV2V98Np6jHAGmAtCd3.jpg
Help Net Security ·
Attackers are abusing Outlook Groups and Microsoft 365 collaboration features to make phishing campaigns appear routine, according to Fortra. “The technique shifts malicious intent away from a single phishing email into a trusted...
BleepingComputer · · Medium severity
An ongoing malware campaign is targeting WhatsApp users in multiple countries with deceptive messages that push VBScript files, leading to remote system access.
TechRadar ·
An email symbol inside a red square warning sign, surrounded by red triangles with exclamation marks inside them, superimposed on someone typing on a laptop
The Register ·
A Canadian healthcare organization has apologized after its IT team carried out a phishing test falsely offering staff an additional paid day off work. Newfoundland and Labrador Health Services said the phishing test was sent to...
The Hacker News · · High severity
A new report from INTERPOL has revealed a "dramatic increase" in cybercrime in Asia and the South Pacific, fueled by rapid digitalization, internet penetration, new technologies, organized criminal networks, and a disparity in...
SANS Internet Storm Center ·
I detected an interesting phishing email this morning. It targets a major Belgian bank: The phishing in itself is a classic one, not relevant but the malicious link is interesting: hxxp://[::ffff:5511:74be]/kWC5PHA1 The technique used...
The Hacker News · · Medium severity
The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons.
Infosecurity Magazine ·
GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials
HackRead · · Medium severity
The Security Ledger · · Medium severity
Austin, TX, USA, 17th June 2026, CyberNewswire The post SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies appeared first on The Security Ledger with Paul F.
Help Net Security · · Medium severity
Norton 360 Deluxe combines device security, scam detection, web protection, and VPN privacy in a single subscription that covers up to five devices. It is available for Windows, macOS, Android, and iOS. Setup and first impressions After...
TechRadar · · Medium severity
ESET WeLiveSecurity · · Medium severity
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages
Malwarebytes Labs · · Medium severity
During our recent threat hunting activities, we found EtherRAT malware being distributed by a website with a strange homepage. This homepage allowed us to discover a vast malicious infrastructure distributing malware, malicious...
TechRadar · · Medium severity
A fish hook is lying across a computer keyboard, representing a phishing attack on a computer system
BleepingComputer ·
Modern phishing, BEC, and account takeover attacks increasingly bypass traditional email defenses and create operational strain for security teams. This webinar explores how behavioral AI can help automate detection, investigation, and...
Help Net Security · · Medium severity
Phishing remains one of the most stubbornly persistent threats in cybersecurity: humans are tired, distracted, trusting, and susceptible to urgency and authority in ways that no amount of awareness training can completely overcome. The...
SecurityWeek ·
The platform used more than 9,000 phishing sites, stealing nearly 4 million credit cards and causing roughly $1.9 billion in losses. The post FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service appeared first on SecurityWeek .
Fast Company Tech · · Medium severity
The security measure millions rely on to protect their accounts may not be as foolproof as they think. The Federal Bureau of Investigation is warning the public about a fast-spreading scam targeting users of popular Microsoft 365...
BleepingComputer ·
In a coordinated effort, the FBI, working with Google and Black Lotus Labs, has dismantled a massive Chinese phishing-as-a-service operation called Outsider Enterprise with thousands of phishing websites used to steal credit card data...
Digital Trends ·
A Chinese scam network used Google's Gemini AI to flood millions of phones with fake texts and build over 9,000 phishing websites, prompting a landmark Google lawsuit.
Help Net Security ·
Phishing activity declined by roughly 20% in both 2024 and 2025, according to research from Zscaler’s ThreatLabz team. The drop followed years of growth that pushed phishing activity above 2 billion hits in 2023. “Phishing volume...
HackRead · · Medium severity
Group-IB, INTERPOL and Algerian Police dismantle decade-old SniperDZ phishing network used to steal credentials, with its alleged developer arrested.
Infosecurity Magazine · · Medium severity
Meta’s WhatsApp demands contempt ruling after users report NSO Group-linked phishing
Infosecurity Magazine · · Medium severity
Menlo Security research warns that as enterprise applications become increasingly browser based, traditional cybersecurity tools leave them vulnerable to cyber threats
Infosecurity Magazine · · Medium severity
New revelations by Group-IB expose the full scale of the decade-old SniperDz phishing operation
CSO Online Security · · Medium severity
AI agents given access to corporate email and business applications could become a new phishing target for attackers, according to cybersecurity researchers, after a test agent built on OpenClaw was tricked into sharing cloud...
CSO Online Security ·
I’ve spent the past two years working on incident response and threat intelligence, and the pattern I’m about to describe is one I keep seeing show up in cases that should have been caught at the email gateway. The constant is that...
The Hacker News ·
An INTERPOL-led operation last month resulted in the disruption of Sniper Dz, a decade-long phishing-as-a-service (PhaaS) platform, Group-IB said Thursday. The effort, codenamed Operation Ramz, took place between October 2025 and...
The Hacker News ·
Google on Friday said it's pursuing legal action against a Chinese cybercrime network, accusing it of using its Gemini artificial intelligence (AI) agent to send phishing text messages targeting Americans. The network is said to be...
The Hacker News · · Medium severity
A new China-linked cybercrime group known as TA4922 has expanded its targeting focus to target European organizations in the U.K., Germany, Italy, and South Africa. These efforts have been complemented by a "rapid operational tempo" and...
Malwarebytes Labs · · Medium severity
Slowly but surely, cybercriminals are turning to infostealers instead. Traditional phishing hasn’t gone away. But many attackers are no longer focused solely on tricking victims into entering usernames and passwords on fake login pages.
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free