Tag Archives: phishing

Vaultjacking Phishing Attack: How Hackers Steal Google Password Manager Vaults

Discover how the dangerous Vaultjacking phishing technique bypasses Google security to steal credential vaults and how you can protect your accounts. Continue reading

Posted in Data Protection, Security & Privacy | Tagged , , , | Leave a comment

FIFA Phishing Scams: FBI Warns of Fake World Cup Ticket Websites

The FBI has issued an urgent warning regarding widespread FIFA phishing scams and spoofed websites targeting fans ahead of the 2026 World Cup. Continue reading

Posted in Security & Privacy, Threat Alerts | Tagged , , , | Leave a comment

Kali365 Phishing: FBI Warns of Microsoft 365 Token Hijacking

The FBI has issued an alert regarding the Kali365 phishing toolkit, which bypasses MFA by hijacking Microsoft 365 tokens via legitimate device code flows. Continue reading

Posted in Security & Privacy, Threat Alerts | Tagged , , , | Leave a comment

Tycoon 2FA Phishing: New OAuth Tactics Target Microsoft 365

The evolved Tycoon 2FA phishing kit has returned with sophisticated OAuth-based exploits specifically engineered to bypass Microsoft 365 security protocols. Continue reading

Posted in Data Protection, Security & Privacy | Tagged , , , | Leave a comment

CalPhishing Campaign: Hijacking M365 via Outlook Calendar Invites

Security researchers have identified the CalPhishing campaign, a new threat using Outlook calendar invites and the EvilTokens kit to bypass MFA and hijack accounts. Continue reading

Posted in Security & Privacy, Threat Alerts | Tagged , , , | Leave a comment

Canvas LMS Attacks: ShinyHunters Escalates Campaign with Personalized Phishing

New reports reveal that Canvas LMS attacks have escalated to include sophisticated phishing and portal defacements, targeting students and faculty through stolen institutional data. Continue reading

Posted in Security & Privacy, Threat Alerts | Tagged , , , | Leave a comment

AiTM Phishing Campaign: Microsoft Warns of Global Code of Conduct Scams

Microsoft has alerted over 13,000 organizations about a sophisticated AiTM Phishing Campaign that uses ‘Code of Conduct’ lures to bypass MFA and steal session tokens. Continue reading

Posted in Security & Privacy, Threat Alerts | Tagged , , , | Leave a comment

QR code phishing surges 146% in Microsoft Q1 2026 Threat Report

The Microsoft Q1 2026 Threat Report highlights a massive 146% increase in QR code phishing, alongside a sophisticated rise in CAPTCHA-gated sites targeting cloud credentials. Continue reading

Posted in Security & Privacy, Threat Alerts | Tagged , , , | Leave a comment