social engineering

Interlock ransomware has quickly ascended from a little-known name in late 2024 to a top-tier threat that’s been hammering organizations across North America and Europe through 2025. While other ransomware groups have faltered or faded, Interlock actors show a relentless willingness to innovate...

Cybersecurity threats continue to evolve at a dizzying pace, and one of the latest techniques making headlines is the FileFix attack. This sophisticated method leverages the Windows clipboard, a seemingly innocuous and everyday feature, to bypass traditional malware defenses and exploit...

Attackers are upping their game in the world of phishing, combining the power of artificial intelligence and native cloud tools to build attacks that are nearly indistinguishable from legitimate IT workflows. The latest trend, “native phishing,” leverages trusted Microsoft 365 (M365)...

The archetype of the cybercriminal has evolved. Gone are the days when the most dangerous attackers were solitary figures shrouded in dark hoodies, furiously attempting to breach technical defenses. Today’s most insidious threats are casual, even personable—the scammer who reaches you via a...

The evolving threat landscape for enterprises and public institutions is continually shaped by the tactics of advanced cybercriminal groups. Among them, Octo Tempest—also known as Scattered Spider, Muddled Libra, UNC3944, and 0ktapus—has emerged as one of the most adaptive and persistent...

In recent developments, cybersecurity firm East Security has identified a sophisticated phishing campaign that impersonates Microsoft's multi-factor authentication (MFA) processes. This attack leverages QR codes to deceive users into divulging their Microsoft 365 credentials, highlighting the...

In a chilling reminder of the ongoing cat-and-mouse game between AI system developers and security researchers, recent revelations have exposed a new dimension of vulnerability in large language models (LLMs) like ChatGPT—one that hinges not on sophisticated technical exploits, but on the clever...

In the rapidly evolving world of industrial automation, the integrity and security of update management software remain paramount. The latest vulnerabilities uncovered in the Mitsubishi Electric MELSOFT Update Manager highlight the ongoing cyber risks faced by industrial environments worldwide...

In recent years, cybercriminals have increasingly exploited digital calendars to orchestrate sophisticated phishing attacks, particularly targeting Microsoft 365 users. These scams often involve deceptive calendar invitations that appear legitimate but are designed to steal sensitive information...

As email-based threats continue to evolve in both scope and sophistication, organizations leveraging Microsoft’s business productivity suite face a relentless challenge: how to protect their workforce—and their most sensitive data—from increasingly novel attack tactics. One such cybercrime...

A new wave of phishing attacks has cast a harsh spotlight on the security assumptions underlying Microsoft 365, as cybercriminals adapt with alarming speed to exploit lesser-known features. Over the past two months, a sophisticated campaign has targeted more than 70 organizations across critical...

The constantly evolving landscape of email-based cyber threats has long challenged organizations striving to protect sensitive business communications and safeguard end users. With social engineering, phishing, and advanced persistent threats now moving at a pace that strains even the most...

In the ever-evolving world of cyber threats, collaboration and integration between leading technology vendors have increasingly become not just beneficial, but essential. The recently announced strategic alliance between KnowBe4 – globally recognized for its comprehensive human risk management...

In a chilling demonstration of how cybercriminals are evolving their attack strategies, security researchers recently uncovered an advanced and highly orchestrated campaign by the North Korean BlueNoroff hacking group that leverages deepfake technology, social engineering, and custom macOS...

When hackers target popular communication platforms, the repercussions ripple far beyond fleeting inconvenience—malicious campaigns can threaten the digital safety of millions. A recent discovery has thrown Discord, the massively popular chat and voice platform, into the cybersecurity spotlight...

Industrial infrastructures rely on real-time insights, unfettered data flows, and the seamless orchestration of diverse operational technologies. Few platforms are as pivotal in this ecosystem as AVEVA’s PI Web API, a powerful portal that bridges operational data with enterprise applications and...

Organizations across the globe are contending with a staggering rise in highly advanced phishing attacks that specifically target Microsoft 365 and Google accounts. At the heart of this surge is the Adversary-in-the-Middle (AitM) technique—a significant evolution in cybercriminal methodology...

Microsoft has recently released a critical security update addressing a zero-day vulnerability identified as CVE-2025-33053, which is actively being exploited in the wild. This vulnerability affects users of Windows 10, Windows 11, and various Windows Server versions. Given the severity and...

A newly disclosed vulnerability, CVE-2025-47175, has sent ripples through the Windows and cybersecurity communities due to its potential impact on Microsoft PowerPoint—a staple of modern business, education, and government environments. This remote code execution vulnerability, classified as a...

Cross-border law enforcement efforts achieved a notable breakthrough as Microsoft and international authorities joined forces to dismantle a far-reaching transnational scam network targeting older adults. The collaborative operation exemplifies how coordinated interventions, advanced...