Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Scammers Love That You're Using a Free VPN. Here's Why
Hiding your IP address doesn’t matter if your VPN service is secretly logging your activity and harvesting full device permissions. It's easy to see the appeal of a free VPN: instant protection and effortless location-spoofing without opening your wallet. But
These social media posts promise big online discounts on Lego, Calvin Klein and more — but really they're just phishing scams
Milk Dragon uses fake ecommerce sites and social media deals to steal payment dataMalware captures credentials and MFA codes in real time, even before form submissionCampaig
Fake brand discounts on social media prey on shoppers’ fear of missing out
Cybercriminals are using fake discounts posted on Facebook and TikTok to lure shoppers to phishing sites that steal their payment card details and one-time passwords, Group-IB has warned. The phishing kit called Milk Dragon (also known as NaiLong) has been ac
Show HN: Tip Tool – dodge spam and phishing
Your own private disposable-email service. One catch-all mailbox, unlimited throwaway addresses, no third party reading your mail. Junk lands on a throwaway address instead of your real inbox. Left:
SHAP-guided adaptive feature weighting for phishing URL detection with a federated learning extension
Machine-learning phishing URL detectors routinely report accuracies above 97%, yet four weaknesses undermine these results: absent statistical testing, unfair latency benchmarking, uninterpretable pr
China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector organizations. The campaigns have impersonated prominent economists and AI
‘They call every week’: the phishing attacks targeting past victims
Scammers reuse personal details harvested from fake Esta websites – and texts and calls can keep arriving for months When the British actor Lisa Riley was preparing to travel to the US last year, she applied online for an Esta so she would not need a visa. Af
langchain-verdix added to PyPI
A LangChain tool that screens an EVM address on Base before your agent sends it funds, and answers safe, caution or danger with reasons. It checks OFAC sanctions, scam, phishing and exploit lists, l
In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 Digital Defense Report, AI finds 24 Android app flaws.
AI agents hacked the hackers, stealing email addresses from security research org
AI agents hacked the hackers - the Dutch Institute for Vulnerability Disclosure (DIVD) - via two zero-day bugs in its Zammad support platform, abusing the flaws to hijack sessions, run code remotely as the local zammad user, and escalate privileges to root. The chained exploits took just seconds to
Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing
A suspected Chinese espionage group impersonated AI policy figures, including a senior Anthropic employee and a former White House official, in phishing campaigns targeting AI policy experts at US universities, think tanks, and law firms, security researchers say. The bulk of these campaigns occurre
Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing
A suspected Chinese espionage group impersonated AI policy figures, including a senior Anthropic employee and a former White House official, in phishing campaigns targeting AI policy experts at US universities, think tanks, and law firms, security researchers