Experts at Microsoft Threat Intelligence have documented an attack in which adversaries, for the first time, employed artificial intelligence to disguise phishing code, with the aim of stealing corporate credentials from U.S.-based companies. The...
GitLab published a report detailing a fresh wave of attacks in which researcher Oliver Smith analyzed a shift in tactics by a North Korean cyber group employing the BeaverTail and InvisibleFerret malware families. The...
Researchers at Check Point have uncovered a prolonged and targeted campaign by the group Nimbus Manticore (also tracked as UNC1549 and Smoke Sandstorm), which since early 2025 has been directing operations against defence contractors,...
Cybercriminals have launched a large-scale campaign against macOS users, disguising malware as popular applications. The alert comes from LastPass, which reported that its own product was among those impersonated. Distribution is carried out through...
Artificial intelligence has made web development accessible to the masses: today, even those without programming skills can build a website or application using AI-powered services. These platforms enable projects to launch with remarkable speed...
Automotive giant Stellantis has disclosed a breach of customer data following an attack on an external contractor servicing its North American support center. According to the company, the attackers gained access only to names...
A phishing campaign targeting figures in the cryptocurrency industry has come to light after researcher José A. Gómez Ledesma of the Quetzal team reported a string of attacks masquerading as invitations to appear on...
Cybercriminals have discovered a way to bypass mobile operators’ filters and launch large-scale waves of fraudulent text messages. Whereas past attacks relied on databases of phone numbers and automated distribution through conventional networks, attackers...
Proofpoint has published an analysis detailing a series of targeted phishing campaigns attributed to a group linked to Chinese state interests, tracked as TA415. The report describes carefully crafted espionage attempts against U.S. government...
Acronis researchers have reported a fresh campaign that employs a modified FileFix technique to deliver the StealC data stealer. The attackers staged a convincing, multilingual phishing operation that forges pages for various services —...
Cybercriminal groups have begun exploiting a new phishing service, VoidProxy, on a massive scale, enabling them to steal credentials, multi-factor authentication codes, and session tokens from Microsoft and Google accounts in real time. According...
A new tool called SpamGPT has emerged on underground forums and quickly become a focal point of discussion within the cybersecurity community. The platform combines the capabilities of generative AI with a fully fledged...
