Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
Microsoft Threat Intelligence says a new ClickFix variant hides a script in the browser cache as a PNG, sidestepping the
Nikkei disclosed a Microsoft 365 account breach that sent 9,000 spoofed emails to contacts, plus a separate cloud intrusion exposing
A phishing campaign dubbed CSuite is hijacking executives’ Microsoft 365 sessions and installing ScreenConnect and Action1 for persistent remote access.
Microsoft says Russian state-backed group Star Blizzard used fake event invitations to install a Windows backdoor at more than 100
Threat actors use sponsored Google search ads for fake ChatGPT tools to run ClickFix attacks that trick victims into installing
Two former US Air Force members received a combined 189-month federal prison sentence for running a multi-year business email compromise
Times Car confirmed a cyberattack compromised approximately 6.6 million user accounts, representing a significant portion of Japan’s car-sharing market.
Security researchers found more than 16,000 misconfigured Supabase databases with publicly readable tables exposing PII, passwords, and tokens.
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.