Advertisement
Bypassing Identity Verification: Mitigating Phishing & MFA Fatigue
Attackers exploit weak identity verification through phishing, MFA fatigue, and social engineering. Learn best practices to secure access.
NSO Group's WhatsApp Phishing Blocked: Meta Files Contempt Order
Meta detected and blocked new spear-phishing attacks by NSO Group targeting WhatsApp users, leading to a federal court contempt order filing.
Excel VBA Macro Obfuscation: How to Detect Hidden Payloads
Learn how to analyze and detect obfuscated VBA macros in Excel files using oledump.py. Technical guide on character substitution and string reversal techniques.
2026 Verizon DBIR Analysis: Securing the Browser Against Phishing
The 2026 Verizon DBIR identifies browser-layer security gaps as a primary threat vector, highlighting risks from phishing, shadow AI, and malicious extensions.
MSI-Branded Image Steganography: Analysis of WeTransfer Phishing
Analysis of a recurring phishing campaign using steganography in MSI-branded images to deliver malicious payloads via WeTransfer links and bypass security.
FIFA World Cup 2026 Phishing: Fake Domains and Banking Malware
The FBI and security researchers warn of FIFA World Cup 2026 scams involving thousands of lookalike domains and banking malware in pirate streaming apps.
Advertisement
TA4922 Expands Global Cybercrime: Analysis of Diverse TTPs
Runtime Rebel analyzes TA4922's expanding global cybercrime operations, detailing diverse TTPs and providing actionable mitigation strategies for security professionals.
TA4922 Expands Phishing Campaigns to Europe and South Africa
China-linked TA4922 threat actor expands targeting to the UK, Germany, Italy, and South Africa using ValleyRAT and Atlas RAT malware in high-tempo attacks.
VS Code Zero-Day Exploit: Stealing GitHub Tokens via URI Handlers
Security researcher mthcht reveals a VS Code zero-day vulnerability allowing GitHub token theft via URI handlers. Learn how to defend against this exploit.
New Phishing Campaign Exploits SVG Attachments to Evade Filters
Security researchers report a wave of phishing emails using malicious SVG attachments to deliver scripts and bypass email security gateways. Learn how to defend.
Quishing Evasion: Malicious QR Codes Bypassing Security Filters
A technical analysis of how malicious QR codes (quishing) bypass email security filters and actionable mitigation steps for security operations centers.
ChatGPT Share Link Abuse: Fake Outages Deliver Malware
Threat actors leverage ChatGPT share links to host deceptive outage pages, prompting users to download malware disguised as an official desktop app.
ChatGPT ChatGPhish Vulnerability: Web Summaries Lead to Phishing
A newly disclosed ChatGPhish vulnerability allows attackers to leverage ChatGPT's Markdown trust for prompt injections and sophisticated phishing campaigns.
Trump Mobile Data Breach and 2026 FIFA World Cup Phishing Risks
Analysis of the Trump Mobile data breach, upcoming 2026 FIFA World Cup phishing campaigns, and CISA's strategic response to recent supply chain attacks.
FBI Warning: Fake FIFA World Cup Sites Target Fans with Fraud
FBI warns of fraudulent websites impersonating FIFA for the 2026 World Cup, engaging in data theft, fake ticket sales, and hospitality scams.
BTMOB Android Malware: Analyzing Phishing-Driven Full Device Takeover
BTMOB malware targets Android users via phishing, utilizing VNC and accessibility services to facilitate financial theft and total remote device control.
ACR Stealer Distributed via Fake Claude AI Desktop Site
Threat actors are distributing ACR Stealer malware through a fraudulent Claude AI desktop application site, targeting browser credentials and crypto wallets.
Analyzing Microsoft Access VBA Macros for Malware Detection
Learn how threat actors use Microsoft Access .accdb files to execute malicious VBA code and how to analyze these OLE streams for incident response.
Ghostwriter Targets Ukraine Government with Prometheus Phishing
Belarus-aligned Ghostwriter (UAC-0057) targets Ukrainian government entities with Prometheus-themed phishing emails to deploy sophisticated malware.
Ocean Launches Agentic AI Email Security Platform with $28M Funding
Ocean emerges from stealth with $28M to deploy specialized AI agents that simulate human reasoning to detect sophisticated phishing and BEC threats.
Interpol Operation Ramz: Strengthening MENA Region Cyber Defense
Interpol's Operation Ramz highlights increased law enforcement collaboration in the Middle East to dismantle phishing and ransomware infrastructure.
SHub Reaper Stealer Backdoors macOS via Spoofed Apps
SHub Reaper stealer targets macOS, using fake Google, Microsoft, Apple, WeChat, and Miro installers for Apple script-based execution and backdooring.
Abuse of MSHTA in Stealthy Malware Delivery Chains
Attackers are abusing the legacy Windows MSHTA utility to deliver malware silently via phishing and fake downloads, bypassing EDR through LOLBIN techniques.
SHub macOS Infostealer Spoofs Apple Security Updates, Installs Backdoor
A new SHub macOS infostealer variant employs fake Apple security update prompts via AppleScript to install a backdoor, threatening user data and system integrity.