France’s National Bank Account Database Breached: 1.2 Million Accounts Exposed
Stolen credentials gave hackers access to France's national bank account database, exposing 1.2 million accounts and enabling potential fraud.
How Deepfakes Are Being Used in Cyberattacks (And What to Do About It)
Deepfake attacks use AI to impersonate executives and bypass security. Helpdesks and payment approvals are primary targets for these sophisticated frauds.
ShinyHunters Targets 100+ Organizations Through Okta SSO Vishing Campaign
ShinyHunters breached 100 organizations through voice phishing attacks targeting SSO credentials. The group has already leaked millions of user records online.
Phishing-as-a-Service: Why Training Alone Won’t Stop PhaaS Attacks
Criminals now rent complete phishing platforms that mimic real login pages with precision. The real risk comes from accounts holding unnecessary administrative rights.
PureRAT Malware Campaign Exploits Hotels to Steal Guest Banking Details
Hotels worldwide face PureRAT infections via fake Booking.com emails. The result is stolen credentials and scams against real guests.
Scattered LAPSUS$ Hunters Threatens to Leak 1 Billion Records From 39 Companies
A cybercriminal group targets Salesforce via OAuth abuse and vishing, claiming to have stolen data from 39 major firms, including Qantas and UPS.
Workday Falls Victim to the ShinyHunters Salesforce Attack Spree
Workday confirms a data breach tied to ShinyHunters, with attackers exploiting Salesforce-connected apps in a growing wave of social engineering incidents.
Execs Oversharing? Why Social Media Makes Phishing So Easy
Phishing isn’t always sloppy or random. With your own social content, attackers craft emails that mirror real conversations and current business stress.
SIM Swapping and MFA Bombing: How Attackers Beat Two-Factor Authentication
MFA is effective against automation, but targeted attacks like MFA bombing and SIM swaps are exposing its human-centered weaknesses.
The PDF Trap: How Callback Phishing Attacks Work
PDF phishing is on the rise. Learn how attackers use trusted documents and fake phone numbers to bypass defenses in callback phishing campaigns.
