Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Paperless Post phishing email infection-Click on link, no apparent action
I received an email from a friend in gmail, opened it and saw it was a paperless post invitation. Since I knew this person very well, I clicked on the link without hovering over it to see what it was
Mumbai maritime engineer loses 12,400 USD to phishing fraud
Follow Us On Social Media Bus mix-ups, leaking cabins and hotel shortages: With 17,000 athletes arriving, Asian Games in Aichi-Nagoya face logistical problems and typhoon fearsHuman-caused warming h
Revolut phishing texts appear days after data breach
Only days after Revolut acknowledged that it disclosed sensitive customer records to an unauthorized party, affected customers are receiving phishing texts. However, we don’t know yet if the phishing
A fake ChatGPT billing email is after your OpenAI password
A fake ChatGPT billing email is steering users to a copy of the OpenAI login page that keeps whatever username and password they type. Josh Varden of Cofense’s Phishing Defense Center traced the email’s payment button through a Google redirect to the attacker
T-Mobile rewards points expiry texts are a phishing scam
Since early May 2026, weve been monitoring a large phishing campaign based on T-Mobile rewards points. The messages falsely warn that a customers rewards points are about to expire. They aren’t legi
London property manager breach may have exposed bank details and lockbox codes
EXCLUSIVE London property management biz City Relay has warned customers that intruders may have stolen financial data, passwords, and codes used to access keys after compromising its Metabase Cloud instance. City Relay, marketing itself as "London's most trusted property management company," told l
Cyber Directorate warns: Phishing messages impersonating Booking
The National Cyber Directorate is warning about phishing messages containing a link to a website impersonating Booking and asking users to confirm a hotel reservation.The Directorate recommends not clicking the link and instead checking the reservation direct
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity. From there, a single c
AI agents lied, stole and voted to 'kill' peers in simulated experiment
The results of a simulation called Emergence World 2, purport to show what happens when autonomous agents are confronted with black swan events, including phishing attacks and misinformation campaigns
Iranian spies hit Windows machines with Chosen Brick data-stealing malware
Iranian state cyber actors are targeting individuals using social messaging apps to deploy surveillance and data-stealing malware on their Windows machines, three Western governments warned. In all observed cases, Chosen Brick has infected Windows systems exclusively. Iran has used it since at least
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more mature organizations, this testing happens continu
Almost 8000 organizations hit by fake voicemail transcript emails in credential phishing attack
Check Point spotted phishing emails spoofing voicemail transcript notifications, hitting 7,800+ orgsMalicious SVG attachments auto‑fill victim emails, redirecting to fake login pages