Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
YouTubers targeted with fake sponsorships and “channel verification” phishing
Scammers are going after YouTube creators’ Google accounts by posing as a brand looking for sponsorship partners. By sending out personalized emails that reference a creator’s own videos and directing targeted creators to a convincing fake collaboration platf
AegisAI launches Proteus, the first foundational model for email security that investigates every email like a security analyst, before it reaches the inbox
AI-generated attacks now change faster than rule-based and behavioral systems can update. Catching them takes purpose-built AI that investigates every message without relying on known patterns. In a benchmark of 3,020 real phishing attacks, Proteus caught mor
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
Cisco Talos identified an APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and impersonated reputable academic and policy institutions.
ASOS links data breach to social engineering attack, credential theft
ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data.
Attackers hijacked top-level domains, minted fake security certs for Google and other orgs
Imagine going to a Google website at its correct URL, only to be redirected to a crim's illegitimate copy. Attackers hijacked top-level domains, allowing them to alter DNS records and mint fraudulent HTTPS certificates for several Google domains, and those belonging to other organizations. Google sa
Browser-in-browser attacks use fake Meta Muse Ad lure to steal credentials
A phishing campaign targeting advertising managers by impersonating Gemini, Claude, ChatGPT, Perplexity, and Manus to steal credentials and multi-factor authentication (MFA) codes has added a fake Muse Ads product to its lure lineup – just eight days after Me
Browser-in-browser attacks use fake Meta Muse Ad lure to steal credentials
A phishing campaign targeting advertising managers by impersonating Gemini, Claude, ChatGPT, Perplexity, and Manus to steal credentials and multi-factor authentication (MFA) codes has added a fake Mu
Arizona court system hack leads to theft of personal data belonging to 1.3 million Americans
A successful phishing attack at the Arizona Supreme Court led to data compromiseMore than a million people are now thought to be affectedThe court's operations were not disr
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. "The cam
EFPO shares security advisory: Here's how to safeguard your account, in simple steps
The EPFO issued a security advisory urging members to protect personal and financial information. It warned against sharing sensitive data and warned of phishing attempts, emphasizing the use of official portals only while remaining vigilant about suspicious
EmDash uses Clef to moderate the plugin registry
Every plugin listing in the EmDash registry is now screened by Cloudflare's Clef decision model. Here's how one fast, multimodal model helps us catch phishing, impersonation, offensive content, and other abuse before a plugin appears in the catalog.
ChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
Fake AI marketing tools impersonate ChatGPT, Gemini, Claude, and others to steal business accountsAttackers use realistic browser-in-the-browser phishing and live operators to captur