Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Apple's iOS 27 found to break NordVPN's scam and phishing protection — and it isn't the only privacy tool impacted
Apple's latest iOS update has been found to undermine NordVPN's anti-phishing toolThe feature that causes the issue, Connectivity Assist, is turned on by default as part of the updat
Microsoft and Coinbase probe leads to arrest of crooks behind ‘EvilTokens’, a DIY phishing network powered by AI
We’ve all seen the emails: A spoofed message from your company’s CFO or a vendor asking you to pay an outstanding invoice. These phishing messages lead to millions of dollars of fraudulent payments every year, and are becoming more realistic all the time. The
Microsoft dismantles AI-powered phishing platform EvilTokens
The dismantling of EvilTokens highlights the critical need for collaborative cybersecurity efforts to combat sophisticated phishing threats globally.
Unmasking EvilTokens: Getting to the root of device code phishing
EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners, Microsoft Digital Crimes Unit (DCU) facilitated a disrupt
Microsoft and Coinbase probe leads to arrest of crooks behind ‘EvilTokens’, a DIY phishing network powered by AI
Weve all seen the emails: A spoofed message from your companys CFO or a vendor asking you to pay an outstanding invoice. These phishing messages lead to millions of dollars of fraudulent payments eve
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. "SideCopy campaign operations typically initiate through spear-phishing campaigns that leverage the abuse of mshta.ex
The latest deepfake numbers give CISOs plenty to worry about
AI is letting cybercriminals reach deeper into organizations than a phishing email ever could. 41% of CISOs reported at least one social engineering incident involving a deepfake during an employee audio call in the past 12 months, according to Gartner. 36% r
The next intellectual property thief may sound like your CEO
Impersonation, phishing and domain-name abuse are the most concerning types of online intellectual property infringement, according to CSC’s The State of Online IP Risk 2026 report. Internet and branded content, online marketplaces and paid search were the ch
Apple @ Work Podcast: Phishing simulations for the AI era
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional-grade platform all the solutions necessary to seamlessly and automatically deploy, manage & protect App
Webinar tomorrow: Inside real-world Google Workspace breaches
Tomorrow's webinar examines real Google Workspace breaches involving social engineering and malicious OAuth applications, from initial access through the critical first hours of incident response. Learn which security controls and response decisions can make the greatest difference.
oakpost added to PyPI
# oakpost Email header triage for phishing analysis, by gatemoss. This is a placeholder release to reserve the name. The tool is in active development.
Microsoft reminds admins to migrate Entra ID users to passkeys
Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in disruptions after it retires SMS first-factor sign-in starting in February 2027.