Tag: Phishing
Britain nudges 23 million One Login users toward passkeys
GOV.UK One Login is opening passkeys to more than 23 million users, letting them sign in without a password.
Brevo SSO flaw let attackers phish 347,000 Trezor customers
A flaw in Brevo's single sign-on handling let an attacker blast phishing mail to 347,000 Trezor customers.
BigBear 2.0 phishing panel reveals thousands of stolen Microsoft sessions
CloudSEK says it reached the admin panel of a phishing service holding thousands of session cookies stolen from Microsoft 365…
Conde Nast user trove from 32.8 million accounts goes for $15,000
A Russian-language forum seller is offering what analysts call a genuine 32.8 million-account Conde Nast database tied to December's WIRED…
Invisible Unicode tags hide phishing lures from email filters
Microsoft tracks a phishing wave that splits lure words with invisible tag characters to dodge email filters.
Fake tax and shipping lures push RMM installs across 46 countries
A 46-country phishing wave leans on fake tax and shipping forms to push legitimate RMM tools, with the US the…
FBI flags OAuth consent phishing that survives password resets
The FBI warns OAuth consent phishing has been seizing prominent people's accounts since late 2025, and password resets do not…
Vishing crews pose as IT help desk inside Microsoft Teams
Unit 42 maps a campaign that hit 150 employees and pushed toward domain controllers.