Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor called GRIMWEDGE. Volexity, which is tracking the threat cluster under the moniker UTA0560, said th
The AI Threat Multiplier: Securing Mobile Apps in the Automated Era - Ryan Lloyd, Jason Cortlund - ASW #400
While agents and LLMs haven't fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-coded secret
HBO Max Reddit account compromised to serve ClickFix attacks
Someone compromised the official HBO Max Reddit account and used it to push more than 100 malicious ads serving up ClickFix attacks targeting both Windows and macOS devices with information-stealing malware. A Reddit user uncovered the infostealer ads on September 6, noting that the ad showed u/hbom
Microsoft Cloud accounts stolen in highly complex impersonation and passkey phishing campaign
Microsoft warns of a sophisticated campaign tricking users into updating passkeys via fake IT callsVictims redirected to adversary‑in‑the‑middle sites mimicking Microsoft login to st
Revolut sent identity data, contact details, and documents to hackers posing as a government agency
Revolut fell for a spoofed government email scam, leaking sensitive customer data to attackersCompromised info includes IDs, selfies, account statements, IBANs, and full transaction
UK.gov begins killing off passwords for 23 million users
Passkeys promise fewer phishing headaches – and £600 a day off Whitehall's SMS bill
UK.gov begins killing off passwords for 23 million users
The UK government is giving more than 23 million people the chance to ditch passwords for passkeys – and could save itself a tidy sum on authentication texts in the process. Passkeys are being rolled out more widely across GOV.UK One Login following a trial involving more than 300,000 users, allowin
Man drove around Singapore with 'SMS blaster' that sent more than 10,000 phishing messages, gets jail
SINGAPORE: A man spent up to 12 hours a day driving around Singapore with a device in his car that sent messages to thousands of nearby mobile phones, believing that he was helping to promote illegal
Webinar: How malicious OAuth apps can lead to Google Workspace breaches
Attackers can combine social engineering with malicious OAuth applications to gain access to Google Workspace data without relying solely on stolen passwords. This webinar examines two attacks to show how these breaches unfold and which security controls can help stop them.
Why are banks taking new security measures? The true story of securing your hard-earned money
Over the past year, cyber threats targeting Sri Lanka's financial system have rapidly increased, primarily through sophisticated AI-driven Phishing attacks and cloned banking portals. To thwart attempts by international fraudulent groups to steal customer acc
Phishing Alert - Beware of Phishing Activities Leading to Unauthorised Credit Card Transactions
HKCERT has noted recent reports involving a large number of Hong Kong residents whose credit cards were allegedly used in unauthorised online purchases of electronic products. According to media reports, the Police received more than 700 related reports w
phishing-url-detector 0.1.0
A required part of this site couldnt load. This may be due to a browser extension, network issues, or browser settings. Please check your connection, disable any ad blockers, or try using a diffe