Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
phishing-url-detector 0.1.0
A required part of this site couldnt load. This may be due to a browser extension, network issues, or browser settings. Please check your connection, disable any ad blockers, or try using a diffe
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. The first campaign, per the tech giant, involved sending ove
Revolut customers’ sensitive data exposed in phishing attack that fooled email security checks
This incident highlights vulnerabilities in email authentication protocols, posing significant risks to fintech firms' regulatory compliance and trust.
Solana Mobile warns users of phishing risks after Brevo breach
The Brevo breach underscores the critical need for robust third-party vendor security assessments to mitigate phishing risks in the crypto sector.
Trezor phishing emails came from Trezor's own sending address
About 347,000 Trezor newsletter subscribers received a warning about a fake hardware defect, sent from the real address [email protected]. It passed every authentication check because the newsletter provider Brevo had been breached. BitBox and CoinTracking we
Phishing Research Challenges Conventional Security Awareness Testing
Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks.
Nearly 1 in 3 Tech Workers Fell for a Phishing Test. The Biggest Predictor Was 1 Habit
New research found that no industry was immune from risk. The findings come as phishing attacks become increasingly more convincing. This story appeared on inc.com, 2026-09-11 15:20:21.
In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review
Noteworthy stories that might have slipped under the radar: Invisible Unicode slips past phishing filters, US puts $10 million bounty on Iranian cyber official, military ties of Chinese hacking group QTFY.
Show HN: TriageBox – AI checker for Gmail that flags phishing and clutter
Chrome extension that scans Gmail for phishing/suspicious mail and helps clear inbox clutter. Free. Open to feedback. Comments URL: https://news.ycombinator.com/item?id=49658470 Points: 2 # Comments: 0
Hackers Favor US Eastern Business Hours in M365 Phishing Campaign
A phishing campaign abusing Microsoft 365s Direct Send feature was observed to follow US Eastern business hours. The campaign was uncovered by the KnowBe4 Threat Lab team, who observed 29,785 confir
Passkey-themed phishing attacks lead to Microsoft 365 data theft
Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts and steal data from Microsoft 365 services.
Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack
Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking.