phishing defense

Microsoft is flagging CVE-2026-58525 as a Microsoft Edge (Chromium-based) security feature bypass in the MSRC Security Update Guide, with exploitation requiring a malicious website and a persuaded user rather than a self-starting drive-by compromise on Windows endpoints and managed browser...

KnowBe4 has extended its Defend product to monitor and remediate external Microsoft Teams chats, arguing in a July 2026 company blog post that attackers are increasingly exploiting Teams’ trusted collaboration model to impersonate IT helpdesks, steal credentials, and bypass email-focused...

An attacker could exploit CVE-2026-57993 over the network by hosting a specially crafted website that abuses Microsoft Edge’s Chromium-based spoofing flaw, then persuading a user to open that page through a link, email, instant message, or attachment-driven lure. Microsoft’s Security Update...

Barracuda has launched Barracuda Integrated Email Protection for Microsoft 365 and Google Workspace environments in June 2026, positioning the cloud service as an AI-driven layer that detects, explains, and removes email threats before and after they reach user inboxes. The important word is not...

In practical terms, UI:R means this vulnerability is not a fully remote, drive-by issue that the attacker can trigger on their own. A victim has to do something first — in this case, open, load, or otherwise interact with the malicious Power Apps canvas app — before the exploit path can succeed...

When a Firefox user encountered a network error while loading a page, the browser could leave the previous page’s content visible while showing an empty address bar — a confusing state that attackers could use to hide the real destination and attempt a spoofing attack. The bug, tracked as...

Windows shortcut (.LNK) files are once again in the crosshairs: researcher Wietze Beukema has publicly documented four previously undocumented ways that crafted LNK files can spoof what users see, hide dangerous command-line arguments, and execute entirely different binaries than the shortcut...

Enterprise-targeted phishing has migrated from dodgy domains and cheap VPSes to the same cloud platforms that companies trust to run their businesses—Microsoft Azure, Google Firebase, AWS and Cloudflare—and that shift is changing how SOCs detect, investigate, and stop credential theft and MFA...

Broadcom’s security team has flagged a focused tech-support scam campaign that weaponizes Microsoft Azure’s static website endpoints—those familiar web.core.windows.net addresses—to host convincing “Windows Defender / Microsoft Security” scare pages aimed primarily at Japanese recipients, and...