#phishing
#phishing
[ follow ]
#cybersecurity #malware #cybercrime #data-breach #social-engineering #credential-theft #ai #email-security
#cybersecurity
Information security
fromFortune
2 days agoExclusive: Index Ventures backs Frame's $50 million bet that employees are still cybersecurity's weakest link | Fortune
AI-enabled phishing makes employees a primary attack surface, driving demand for realistic, company-specific human risk security training.
Information security
fromEntrepreneur
1 week agoWhy Trained Employees Are Still Falling for Phishing Attacks
AI-generated phishing messages are increasingly sophisticated, making them harder to detect and leading employees to fall for them despite training.
fromSecurityWeek
3 weeks agoBritish Scattered Spider Hacker Pleads Guilty in the US
Buchanan admitted to conducting SMS phishing attacks, bombarding a victim company's employees with hundreds of messages linking to phishing sites designed to harvest credentials and personally identifiable information (PII).
Privacy professionals
#ai-security
Information security
fromTechRepublic
1 month agoResearchers Uncover New Phishing Risk Hidden Inside Microsoft Copilot
Attacker-controlled text in emails can manipulate Microsoft Copilot summaries through cross-prompt injection attacks, inserting deceptive alerts into trusted AI interfaces that users find more convincing than suspicious emails.
Information security
fromThe Hacker News
2 months agoAPT28-Linked Campaign Deploys BadPaw Loader and MeowMeow Backdoor in Ukraine
Russian state-sponsored APT28 deployed two new malware families, BadPaw and MeowMeow, targeting Ukrainian entities through phishing emails with Ukrainian-language lures about border crossing appeals.
fromThe Hacker News
2 months agoStarkiller Phishing Suite Uses AitM Reverse Proxy to Bypass Multi-Factor Authentication
It launches a headless Chrome instance - a browser that operates without a visible window - inside a Docker container, loads the brand's real website, and acts as a reverse proxy between the target and the legitimate site. Recipients are served genuine page content directly through the attacker's infrastructure, ensuring the phishing page is never out of date.
Information security
Privacy technologies
fromTechzine Global
2 months agoFake Google Security page hijacks browser as proxy for attackers
Attackers use fake Google security notifications to install malicious Progressive Web Apps that steal one-time passwords, crypto wallet addresses, location data, and intercept SMS codes through social engineering and legitimate browser APIs.
[ Load more ]