Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script
Yes, criminals have job listings too. A Telegram user recruiting callers to work in an apparent Google Security Team voice-phishing scam told applicants that they weren’t allowed to read from scripts – in the same ad that also included the exact script they had to read during these scam calls. This
Threat Actors Use Google Ads To Target Ledger Users
IntroductionIn August 2026, Zscaler ThreatLabz analyzed a phishing campaign that used fraudulent Google ads to target Ledger hardware wallet users. The ads redirected users through Google Cloud Storage and Vercel to a Google Sites page containing a phishing p
Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Asus confirms eShop data breach exposed customer order records and contact details — payment data safe, but firm warns of targeted phishing scams
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Asus confirms eShop data breach exposed customer order records and contact details — payment data safe, but firm warns of targeted phishing scams
If you bought anything on Asus' web store, you should check your inbox. The company has reported that its online shop suffered a data breach, and that contact details and order records "may have been
On Anthropic’s AI Misuse Report
Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully summarized the report into 117 findings. A few of the highlights: AI agents increasingly handled reconnaissance, exploitation, data theft, propaganda production, surveilla
Party Invite Phishing Scams Are the New Missed Connections
This past April, while attending his nephews bar mitzvah on Cape Cod, Eric Umansky woke up to an inbox full of emails from people from his past. They all wanted to know the same thing: Was he actuall
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
Researchers Identify AliExpress Phishing Domains Before Registration
Security researchers have reported flagging 10 web addresses weeks before they were registered, then watching them go live as entry points to an AliExpress-themed phishing site. EfficientIP Research
Scam hotel booking sent family to Wetherspoon pub
Published A theatre-goer fell victim to a "sophisticated phishing attack" after booking a "luxury" London apartment, only to discover the address was a Wetherspoon pub. Paul Dawson, from Loughborough in Leicestershire, paid £73 for a one-night stay for his fa
Unmasking EvilTokens: Getting to the root of device code phishing | Microsoft Security Blog
EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners, Microsoft Digital Crimes Unit (DCU) facilitated a disrupt
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.