phishing
-

Warning issued as surge in OAuth device code phishing leads to M365 account takeovers
News Successful attacks enable full M365 account access, opening the door to data theft, lateral movement, and persistent compromise
By Emma Woollacott Published
News -

Complacent Gen Z and Millennial workers are more likely to be duped by social engineering attacks
News Overconfidence and a lack of security training are putting organizations at risk
By Emma Woollacott Published
News -

The Scattered Lapsus$ Hunters group is targeting Zendesk customers
News The group appears to be infecting support and help-desk personnel with remote access trojans and other forms of malware
By Emma Woollacott Published
News -

Google wants to take hackers to court
News You don't have a package waiting for you, it's a scam – and Google is fighting back
By Nicole Kobie Published
News -

77% of security leaders say they'd fire staff who fall for phishing scams, even though they've done the same thing
News A new report uncovers worrying complacency amongst IT and security leaders
By Emma Woollacott Published
News -

This new phishing scam is duping tech workers looking for a career change
News A new Google Careers phishing scam is targeting tech workers looking for a change of scenery – here's how to stay safe
By Emma Woollacott Published
News -

Hackers are using a new phishing kit to steal Microsoft 365 credentials and MFA tokens
News Whisper 2FA is now the third most common Phishing as a Service tool worldwide
By Emma Woollacott Published
News -

Microsoft and Cloudflare just took down a major phishing operation
News RaccoonO365’s phishing as a service platform has risen to prominence via Telegram
By Rory Bathgate Published
News -

Varonis snaps up AI email security specialist SlashNext
News The vendor will integrate SlashNext’s phishing and social engineering detection capabilities into its Data Security Platform
By Daniel Todd Published
News -

Hackers are abusing ConnectWise ScreenConnect, again
News A new spear phishing campaign has targeted more than 900 organizations with fake invitations from platforms like Zoom and Microsoft Teams.
By Emma Woollacott Published
News -

Malicious URLs overtake email attachments as the biggest malware threat
News With malware threats surging, research from Proofpoint highlights the increasing use of off-the-shelf 'phish kits' like CoGUI and Darcula
By Emma Woollacott Published
News -

Why new hires are your weakest link when it comes to phishing attacks
News Research from Keepnet shows new hires are far more likely to fall for phishing attacks – here's how you can improve security awareness during onboarding processes.
By Ross Kelly Published
News