Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Coinbase traced $1.1 million crypto trail behind AI phishing service EvilTokens
EvilTokens abused Microsoft’s real device-login flow to authorize attacker sessions, then used AI to identify payment authorities inside captured mailboxes.
UK small businesses are facing greater AI security threats than ever — and are sadly woefully unprepapred
ESET finds nearly half (49%) of UK SMBs have experienced an incident in the past yearPhishing, unpatched vulnerabilities, weak passwords, and alack of monitoring often to blame
Microsoft disrupts EvilTokens phishing service that gave criminals access to 12,000 inboxes
The EvilTokens phishing service, which compromised more than 12,000 inboxes at over 10,000 organizations, has been disrupted by a coalition of law enforcement and private-sector partners led by Microsoft. With authorization from the US District Court for the
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
Attackers spoofed LastPass on GitHub, used a Microsoft-signed driver to disable 145 security products, then deployed an infostealer. Someone impersonated LastPass on GitHub, got users to download a fake authenticator, and ended up killing 145 different antivi
Microsoft Helps Take Down Massive Automated, AI-Powered Phishing-as-a-Service Platform
Microsoft's security blog describes the fight against a new "AI-powered cybercrime platform" offering phishing-as-a-service, with AI-tailored lures and analyses of compromised inboxes (to identify high-value targets). The site compromised more than 12,000 inb
UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites
"Probably the best operating system in the world is the [operating system] made for the PDP-11 by Bell Laboratories." - Ted Nelson, October 1977
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts - Ars Technica
Microsoft disrupts AI-assisted platform that compromised 12,000 accountsArs Technica Unmasking EvilTokens: Getting to the root of device code phishingMicrosoft Microsoft and Coinbase probe leads to arrest of crooks behind 'EvilTokens', a DIY phishing network
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the e
Social media security: 2026 risks, tips, and tools
Social media security is harder with AI phishing and deepfakes. Get a 2026 checklist: passkeys, role access, monitoring, audits, and more.
Microsoft Disrupts EvilTokens Device Code Phishing Service
Microsoft seized 50 websites and disabled more than 150 domains as part of a coordinated disruption effort against a phishing-as-a-service platform targeting Microsoft 365 accounts.
UK Cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites
A coalition of law enforcement and private-sector tech companies led by Microsoft have disrupted the EvilTokens phishing service, arresting suspected website admins, taking down more than 50 websites, and notifying victims of compromised email accounts. EvilTokens is a notorious Microsoft device-cod
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to full technical details published today by Viettel Cyber Security researcher Dinh Ho Anh Khoa. The flaw, CVE-