A routine missive from a familiar service has long since ceased to be a hallmark of security. Specialists from Cisco Talos have identified a nascent surge in cyber offensives wherein adversaries exploit the legitimate...
Since mid-January, a global surge of erratic electronic correspondence has provoked widespread consternation among users. The catalyst for this deluge was a vulnerability within the Zendesk customer support infrastructure, which malevolent actors subverted into...
Cyber adversaries have conceived an ingenious method to circumvent the security protocols utilized by email services to intercept malicious QR codes. Rather than employing conventional image files, they have begun disseminating QR codes constructed...
A newly uncovered phishing campaign, identified by researchers at the Internet Storm Center, showcases a remarkably unconventional method of evading email filters—by embedding invisible characters within message headers. Specifically, the attackers employ soft hyphen...
The 2025 At-Bay InsurSec Rankings report recorded a sharp surge in cyberattacks linked to email and remote access—two channels responsible for nearly 90% of all incidents among the company’s clients. Analysts highlight that generative...
In September 2025, Microsoft began gradually discontinuing support for embedded SVG images in Outlook for the web and the new Outlook client for Windows. The company explained this decision as part of its enhanced...
Researchers at Varonis have reported the emergence of a new toolkit named MatrixPDF, which enables attackers to transform ordinary PDF files into interactive phishing lures. These maliciously crafted documents can bypass email security filters...
A new tool called SpamGPT has emerged on underground forums and quickly become a focal point of discussion within the cybersecurity community. The platform combines the capabilities of generative AI with a fully fledged...
An attack on Google Classroom has escalated into one of the largest phishing campaigns in recent months. According to Check Point, between August 6 and 12, attackers launched five coordinated waves of distribution, sending...
Email protection mechanisms, originally conceived as a bulwark against malicious links, have ironically become unwitting allies to cybercriminals. Researchers have uncovered a troubling trend: threat actors are increasingly exploiting “link wrappers” provided by platforms...
Cybercriminals are mastering increasingly sophisticated methods of delivering malicious code, leveraging unconventional file formats to evade security defenses. A recent case documented by researchers illustrates how a seemingly innocuous audio message in WAV format...
The Gemini AI assistant, integrated into Google Workspace, has unexpectedly proven vulnerable to a novel form of social engineering. By exploiting a particular method of structuring content within emails, malicious actors can deceive the...
