Category Archives: Threat Alerts
Passkey Enrollment Exploited: New Pink Vishing Campaign Targets Entra Users
A sophisticated Pink vishing campaign is weaponizing Microsoft Entra passkey enrollment to perform account takeovers and data extortion. Learn how to defend your enterprise. Continue reading
Sophisticated Phishing Campaign Targets Marketers via Fake Job Offers
A highly sophisticated phishing campaign is impersonating major brands to harvest Google credentials from marketing professionals using legitimate platform abuse. Continue reading
Avalon Malware Framework: CrownX Ransomware Analysis & Defense
Discover how the sophisticated Avalon malware framework bypasses enterprise security to deploy the destructive CrownX ransomware in targeted network attacks. Continue reading
Social Engineering Attacks Surge: ClickFix and ConsentFix Threats
Discover how new social engineering attacks like ClickFix and ConsentFix are bypassing macOS security and Microsoft 365 MFA protocols in 2026. Continue reading
New macOS Infostealer Campaign Exploits X Sponsored Ads
A dangerous new macOS infostealer campaign is spreading via malicious sponsored ads on X, tricking users into executing harmful code through clever social engineering. Continue reading
Custom Ransomware Campaign Impersonates Interpol to Target SMBs
A new phishing campaign targeting SMBs delivers custom ransomware disguised as Interpol evidence; security researchers have discovered a fatal flaw for decryption. Continue reading
JADEPUFFER: The First Documented Case of Agentic Ransomware
Sysdig researchers uncover JADEPUFFER, the first verified instance of agentic ransomware leveraging LLMs to autonomously execute a destructive cyberattack. Continue reading
Phishing Campaigns Are Now Using Advanced Device Fingerprinting
Modern phishing campaigns are evolving to dynamically adapt to a victim’s device and operating system, making attacks more personalized and difficult to detect. Continue reading
CVE-2026-48558: SimpleHelp Vulnerability Exploited to Deploy Djinn Stealer
Discover how attackers are leveraging the critical CVE-2026-48558 vulnerability in SimpleHelp to bypass authentication and deploy TaskWeaver and Djinn Stealer malware. Continue reading