ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

At the 2026 Zscaler Public Sector Summit in Washington, D.C., Idaho National Laboratory’s cybersecurity chief shared a candid account of the threats federal agencies face today — and the lessons his ...

Abstract: Phishing attacks remain a critical threat in the digital era, exploiting social engineering tactics to compromise user trust and sensitive information, often resulting in financial loss and ...

Since fraud unfolds in real time, even the smallest delays in batch-based review cycles can cause risk teams to miss the threat. Consider a mid-sized digital bank that discovers a coordinated ATO ...

A wave of phishing emails sent to Booking.com partner accommodations in Japan in May led to blockchain-hosted malware ...

Researchers from Tokyo Metropolitan University have created a new paradigm for identifying online phishing campaigns. Their new system, PhishLumos, is triggered when links show signs of concealing ...

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...

Businesses and individual email users now face a phishing threat that has grown faster than most security teams anticipated.

CYBER AFFAIRS: One cybersecurity company, KELA Group, referred to the World Cup, which is ongoing in the US, Mexico, and Canada, as the “largest digital battlefield in history.” ...

Cyberattacks on civil society organizations — journalists, human rights defenders, and nonprofits — reached a rate more than seven times higher than those targeting other websites over the past year, ...

Security researchers at Cybernews discovered on June 12 what they describe as one of the largest credential databases ever left exposed online — a publicly accessible Elasticsearch cluster holding 24 ...