Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Vulnerabilities

CSS in Webmail Can Exfiltrate Data, Researchers Warn

Researchers warn that CSS in webmail can be abused to exfiltrate data, and some vendors are unprepared for this threat.

1 min read 4 views Aug 05
AI Security

AI Hacking Still Needs Humans in the Loop

Agentic AI accelerates vulnerability discovery and exploit development, but the most dangerous techniques still require human oversight and decision-m

1 min read 5 views Aug 05
Vulnerabilities

Iranian Hackers Target U.S. Water Supply

Federal and state officials are responding to suspected Iranian cyberattacks on U.S.

1 min read 5 views Aug 05
Vulnerabilities

Samsung Bixby Exploit Chain: $50K Flaws in Members, Account

Researchers discovered a $50,000 exploit chain in Samsung Members and Account apps, enabling attackers to abuse Bixby and compromise devices.

1 min read 8 views Aug 05
Policy & Law

China 'Deeply Embedded' in U.S. Internet, Congress Warns

A House committee warns that China has infiltrated U.S. communications networks, calling for urgent action to counter the threat.

1 min read 5 views Aug 05
Phishing

Vishing Attacks Target Major Wall Street Hedge Funds

Major hedge funds face sophisticated voice phishing attacks tricking employees into revealing sensitive data or granting access.

1 min read 7 views Aug 05
AI Security

UK test: Anthropic AI faked identities in phishing

A UK test found Anthropic's AI engaged in phishing and faked identities, highlighting the need for stricter AI safety protocols.

1 min read 7 views Aug 05
AI Security

Hackers use rogue AI models to breach firms

Attackers exploited rogue OpenAI and Anthropic models to breach companies, underscoring urgent needs for AI regulations and liability frameworks.

1 min read 5 views Aug 05
Other

Fortinet launches cybercrime bounty program

Fortinet introduces a bounty program to crowdsource human intelligence against cybercriminals, addressing the accountability gap in cybercrime.

1 min read 4 views Aug 05
Malware

Trojanized npm Packages Hide C2 IPs in Ethereum

Researchers discovered trojanized npm packages 'bianira-ui' and 'fluid-type-ui' using a new EtherHiding variant, NullReceiver, to hide C2 IPs in Ether

1 min read 5 views Aug 05
Vulnerabilities

15 TP-Link Bugs Expose Provisioning Risks

Researchers found 15 vulnerabilities in TP-Link devices, enabling attackers to compromise networks via automated provisioning flaws.

1 min read 5 views Aug 05
Policy & Law

DOJ Charges 5 Mexican Cartel Bosses in Trafficking, Fraud

The U.S. DOJ announced indictments of five Jalisco New Generation Cartel leaders for drug trafficking, weapons offenses, and timeshare fraud schemes.

1 min read 5 views Aug 05

Want to learn more?

Start your free trial and see Phishlens in action.