Widespread Data Theft and Extortion Threat Targets Microsoft 365 Users Cybersecurity threat hunters have unveiled significant details regarding a large-scale data theft and extortion operation that is currently targeting Microsoft 365 and various software-as-a-service (SaaS) platforms. This operation is characterized by tactics such as vishing—voice phishing that dupes users into…
AT&T Customers Exposed to Phishing Threats Due to Text Message Vulnerabilities AT&T customers are increasingly vulnerable to phishing scams due to a security flaw in the company’s text messaging protocols. Cybercriminals have discovered that the methods AT&T employs to send customer alerts via text are easily exploited, allowing scammers to…
EvilTokens Campaign Unveils New Email Security Vulnerabilities A recent series of attacks by the EvilTokens campaign has spotlighted a significant blind spot in email security protocols, primarily affecting businesses across the United States and Europe. This tactic, sometimes referred to as “ghost phishing,” cleverly obscures malicious webpages until they are…
Security Flaw Discovered in iOS Camera App Allows Redirects to Malicious Websites A serious vulnerability has been identified in the iOS Camera App that could potentially allow attackers to reroute users to harmful websites without their consent. This flaw specifically impacts Apple’s latest iOS 11 operating system used on iPhones,…
You’ve received a World Cup ticket. The email contained a QR code, impressive branding, and looked authentic. However, it’s a counterfeit. In recent years, identifying scams was often straightforward. Red flags like unusual email addresses, poor grammar, and typographical errors frequently signaled deception. However, during the 2026 FIFA World Cup,…
Silent Ransom Group Targets Law Firms with Evasive Tactics Resecurity, a threat intelligence organization, has released findings on the illicit activities of the Silent Ransom Group (SRG), a cyber extortion network operational since 2022. This group is notable for its sophisticated schemes aimed at retaining their data leak websites and…
Unpatched URL Spoofing Vulnerability Discovered in UC Browser and UC Browser Mini A recently uncovered security flaw poses a significant threat to users of UC Browser and UC Browser Mini, widely used mobile applications developed by Alibaba-owned UCWeb. This vulnerability, which remains unpatched, allows attackers to manipulate the address bar,…
A recently uncovered campaign attributed to the China-based cybercrime group known as Silver Fox—also referred to as Monarch, SwimSnake, The Great Thief of Valley, UTG-Q-1000, and Void Arachne—has targeted organizations in Russia and India with new malware identified as ABCDoor. The operation has prominently involved the use of phishing emails…
Microsoft has revealed a comprehensive credential theft operation that exploited themes related to code of conduct, utilizing legitimate email services to redirect users to domains controlled by attackers and extract authentication tokens. This multi-faceted campaign occurred between April 14 and April 16, 2026, affecting over 35,000 users from more than…
