Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Device Code Phishing Emerges as a Rapidly Growing OAuth 2.0
Attackers are increasingly abusing the OAuth 2.0 device authorization grant flow to steal access tokens, evolving from a niche technique into an indus
Nine-Year Fraud Campaign Uses Cloned Russian Corporate
Researchers at F6 identified a long-running fraud campaign where attackers created lookalike websites of major Russian petrochemical and fertilizer fi
Democratic National Committee loses $29,000 in business
The Democratic National Committee (DNC) was defrauded of $29,000 after an attacker impersonated DNC chair Ken Martin via email.
Okta identifies 'Work Panel' SaaS platform used by vishing
Okta's Threat Intelligence team has analyzed 'Work Panel,' a turnkey SaaS platform designed to provide cybercriminals with the tools necessary to cond
Attackers Increasingly Bypass MFA via Session and Token
Cyberattackers are shifting tactics from traditional password theft to stealing session tokens, allowing them to bypass multifactor authentication (MF
Operation BlueDash Uses Fake Microsoft Teams Updates to
A phishing campaign dubbed Operation BlueDash uses counterfeit Microsoft Store pages to trick users into installing legitimate Level RMM and ScreenCon
Insurance Phishing Campaigns Shift to Real-Time Account
CTM360 research indicates that insurance-focused phishing has evolved from credential harvesting to real-time account hijacking, enabling immediate un
Scammers use leaked ShinyHunters data to fuel $2,000
Threat actors are leveraging email addresses from previous ShinyHunters data breaches to send fraudulent sextortion emails demanding $2,000 in Bitcoin
BlueNoroff Uses Zoom Phishing Kits to Profile Crypto
North Korean threat actor BlueNoroff is using typosquatted Zoom and Microsoft Teams domains in a phishing campaign to profile crypto wallets before de
Laundry Bear Exploits Zimbra Zero-Day via Phishing Attacks
The state-sponsored group Laundry Bear is targeting US and Ukrainian entities using a Zimbra zero-day vulnerability.
Identity theft highlights critical reliance on email
A victim suffered identity theft after inadvertently sharing a two-factor authentication code with a scammer.
AI-Driven Phishing and Credential Abuse Threaten Modern
The rise of AI-powered phishing and session hijacking techniques is outpacing current defensive response capabilities, leading to an increase in crede