Tag Archives: Phishing attacks
Password Manager Phishing Alert: LastPass and Bitwarden Users Targeted
A new password manager phishing campaign is targeting LastPass and Bitwarden users with fake security alerts. Learn how to protect your master credentials. Continue reading
Microsoft Entra Passkey Exploitation: How Hackers Hijack Enterprise Accounts
A sophisticated vishing campaign is exploiting Microsoft Entra passkey enrollment to bypass enterprise security. Learn how attackers hijack accounts and persist in your network. Continue reading
Passkey Enrollment Exploited: New Pink Vishing Campaign Targets Entra Users
A sophisticated Pink vishing campaign is weaponizing Microsoft Entra passkey enrollment to perform account takeovers and data extortion. Learn how to defend your enterprise. Continue reading
DEBULL Tool Abuses Microsoft Device-Code Flow to Target M365 Accounts
Security researchers have uncovered the DEBULL tool, a new phishing framework that exploits the Microsoft device-code flow to bypass M365 2FA protocols. Continue reading
Social Engineering Attacks Surge: ClickFix and ConsentFix Threats
Discover how new social engineering attacks like ClickFix and ConsentFix are bypassing macOS security and Microsoft 365 MFA protocols in 2026. Continue reading
TonRAT Malware: New Hospitality Phishing Campaign Uses Authentication Laundering
Discover how the stealthy TonRAT malware targets hospitality staff using sophisticated authentication laundering and malicious Node.js payloads to bypass security filters. Continue reading
Massive Phishing Campaign Impersonates Boots via Hijacked Terminal Server
A massive phishing campaign targeting nine million UK consumers has been linked to Romanian actors using a hijacked terminal server to impersonate the retailer Boots. Continue reading
SVG Phishing Attacks: How to Stop New Email Security Threats
SANS warns of a surge in SVG phishing campaigns that bypass email security. Learn how these malicious XML files work and how to protect your organization. Continue reading
Signal Phishing Campaign Targets Secure Backup Recovery Keys
A dangerous new Signal phishing campaign is tricking users into revealing their backup recovery keys. Learn how this social engineering attack works and how to protect your encrypted messages. Continue reading