EvilTokens Campaign Unveils New Email Security Vulnerabilities A recent series of attacks by the EvilTokens campaign has spotlighted a significant blind spot in email security protocols, primarily affecting businesses across the United States and Europe. This tactic, sometimes referred to as “ghost phishing,” cleverly obscures malicious webpages until they are…
Security Flaw Discovered in iOS Camera App Allows Redirects to Malicious Websites A serious vulnerability has been identified in the iOS Camera App that could potentially allow attackers to reroute users to harmful websites without their consent. This flaw specifically impacts Apple’s latest iOS 11 operating system used on iPhones,…
You’ve received a World Cup ticket. The email contained a QR code, impressive branding, and looked authentic. However, it’s a counterfeit. In recent years, identifying scams was often straightforward. Red flags like unusual email addresses, poor grammar, and typographical errors frequently signaled deception. However, during the 2026 FIFA World Cup,…
Silent Ransom Group Targets Law Firms with Evasive Tactics Resecurity, a threat intelligence organization, has released findings on the illicit activities of the Silent Ransom Group (SRG), a cyber extortion network operational since 2022. This group is notable for its sophisticated schemes aimed at retaining their data leak websites and…
Unpatched URL Spoofing Vulnerability Discovered in UC Browser and UC Browser Mini A recently uncovered security flaw poses a significant threat to users of UC Browser and UC Browser Mini, widely used mobile applications developed by Alibaba-owned UCWeb. This vulnerability, which remains unpatched, allows attackers to manipulate the address bar,…
A recently uncovered campaign attributed to the China-based cybercrime group known as Silver Fox—also referred to as Monarch, SwimSnake, The Great Thief of Valley, UTG-Q-1000, and Void Arachne—has targeted organizations in Russia and India with new malware identified as ABCDoor. The operation has prominently involved the use of phishing emails…
Microsoft has revealed a comprehensive credential theft operation that exploited themes related to code of conduct, utilizing legitimate email services to redirect users to domains controlled by attackers and extract authentication tokens. This multi-faceted campaign occurred between April 14 and April 16, 2026, affecting over 35,000 users from more than…
The American educational technology company Instructure, known for its Canvas platform, has reported a breach involving a decentralized cybercriminal group. This group threatened to leak sensitive data stolen from thousands of educational institutions following a successful infiltration of Instructure’s network. In an update released on Monday, the Utah-based firm announced…
Each year, countless smartphones fall victim to theft. Among them, a significant number are iPhones that are illegally shipped to various regions, particularly China, where they are dismantled for parts. However, there exists a lucrative market in which these stolen devices can be unlocked and reset, offering criminals a chance…
