Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Phishing Threats Hiding in Calendar Invites
Attackers are exploiting calendar invites as a phishing vector, targeting trusted business tools that many organizations overlook in their security de
Gig Harbor Council Email Locked After Phishing
Gig Harbor locked a council member's email after a phishing attempt. IT is investigating the issue.
EU officials' WhatsApp, Signal targeted by hackers
The EU's cyber-defense service documented attacks on senior officials' messaging accounts, with Russia suspected.
Hackers abuse npm mirrors to host phishing redirect pages
Threat actors use npm and mirrors like UNPKG as free hosting for malicious HTML pages that impersonate Cloudflare CAPTCHAs and redirect visitors to at
Mirage2FA Phishing Hits 4,500 Firms via M365
Mirage2FA phishing-as-a-service targeted 4,500 US/EU companies, abusing Microsoft 365 login flows to bypass 2FA.
24 npm Packages Used in ClickFix Phishing Campaign
Researchers found 24 npm packages hosting fake Cloudflare CAPTCHA pages for ClickFix-style phishing attacks, abusing npm as free infrastructure.
AnonyMousKIT PhaaS uses voice AI to phish iPhone passcodes
AnonyMousKIT PhaaS automates iPhone unlocking by using AI voice agents to phish passcodes, active since 2024 with 506 domains and 168 storefronts.
Mirage2FA hijacks 4,500 Microsoft 365 orgs despite MFA
Mirage2FA phishing-as-a-service compromised 4,532 Microsoft 365 domains from 2024 to 2026, stealing credentials, 2FA codes, and session cookies, with
ZeroTokens Phishing Platform Enables Real-Time Attacks
A new phishing platform called ZeroTokens gives attackers live visibility into victim sessions, allowing them to alter prompts in real time to adapt a
Health systems warn of MyChart phishing scam
Scammers are sending phishing emails disguised as MyChart, Epic's patient portal, to steal personal information from patients at over a dozen U.S.
Hospitals Warn of Phishing Scam Targeting MyChart Portal
Hospitals nationwide warn of a phishing scam targeting elderly patients via fake MyChart emails and texts, aiming to steal personal information.
State-Backed Hackers Hit EU Officials on WhatsApp
EU officials were targeted in state-sponsored spearphishing campaigns on WhatsApp, according to a document.