phishing

Threat actors used legitimate remote access software to maliciously target federal employees

With its ability to synthesise speech from short audio clips, Microsoft's VALL-E poses a worrying development in the realm of deepfakes

The latest fallout from the password manager's August security nightmare will probably see attackers deploying sophisticated methods to acquire decryp…

The botnet that refuses to die returns again and is equipped with new payloads and tactics to evade detection

Not all phishing attacks rely on links or attachments, which means you’ll have to be extra careful

The attackers carried out a phishing attack and gained employee login credentials to CircleCI, which they then used to access GitHub

SafeBreach researchers identified the backdoor, which they say went undetected on all major antivirus programs

Security experts have said the company has no way of knowing whether the emails were accessed

The debate around the importance of phishing tests in cyber security rages on but businesses need to be careful if they decide to embrace them, the UK…

The attack revolves around counterfeit CircleCI notifications urging users to accept updated terms of use and privacy policy

The lure in the scam is a legitimate-looking pending shipment order from Slovakian Postal Service

The scams are aimed at stealing federal employees' Microsoft 365 credentials

The self-taught hacker impersonated an IT worker to gain an Uber employee's password, obtaining broad access to internal systems and posting taunting …

Read the full transcript for this episode of the IT Pro Podcast

We discuss whether simulated email attacks are a worthwhile way to improve security

Senator Grace Poe also called for the revival of the Philippines’ SIM Card Registration Act vetoed by former President Rodrigo Duterte

The security incident follows a phishing attack that compromised a third-party vendor’s computer network

The news comes after "fairly convincing" phishing emails from a Mailchimp account swindled developers into revealing credentials

A thorough investigation revealed sophisticated methods coupled with relatively unsophisticated tooling

Threat actors are using fake login forms to trick users into changing their payment details

Last week's phishing attack on Twilio has exposed phone numbers exposed and compromised user accounts