Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
30 Health Systems Warn of MyChart Phishing Emails
At least 30 U.S. health systems are warning patients about phishing emails impersonating the MyChart portal, offering free Medicare kits.
Fake Recruiter Scams Target Corporate Credentials
Scammers use full-screen login pages and pre-qualification checks to steal corporate credentials via fake recruiter scams on mobile.
TikTok Phishing: Spot Fake Login Pages
TikTok phishing attacks use convincing fake login and verification pages to steal credentials. Learn to spot them.
SHAP vs LIME for Phishing URL Detection
A study compares SHAP and LIME for interpreting boosting models in phishing URL detection, finding SHAP more stable and accurate.
North Dakota HHS Phishing Breach Hits Disability Services
A phishing attack on North Dakota's health department may have exposed health data of people receiving developmental disability services.
phish-signals 0.2.1: Heuristic Phishing Detection Engine
phish-signals 0.2.1 is a heuristic phishing-detection engine with typosquat checks, email authentication analysis, and IOC handling.
Raj Police Issue Cyber Fraud Advisory Ahead of Local Polls
Rajasthan police warn of cyber fraud risks during local body elections, urging voters to stay alert against scams.
Notion Abused in Token-Harvesting Campaign
A financially motivated threat actor abuses free Notion accounts, malicious PDFs, and device code phishing to steal authentication tokens from targete
Why Passkeys Are Phishing Resistant
Passkeys prevent phishing because they are cryptographically bound to the website's origin, so they cannot be used on fake sites.
AI scammers target widows via obituaries, one loses $7,000
Scammers use AI to mine obituaries and target widows with tax-evasion scams, costing one victim $7,000.
iAuthFlow v2 Phishing Kit Survives Password Resets
iAuthFlow v2 phishing toolkit uses a phished Google session to enroll an attacker-controlled passkey that survives password resets.
Chameleon SEO Poisoning Evades Scanners
Fortra discovered Chameleon SEO Poisoning, a phishing method using cloaked fake bank sites to steal credentials and evade security scanners.