social engineering

In a chilling reminder of the ongoing cat-and-mouse game between AI system developers and security researchers, recent revelations have exposed a new dimension of vulnerability in large language models (LLMs) like ChatGPT—one that hinges not on sophisticated technical exploits, but on the clever...

In the rapidly evolving world of industrial automation, the integrity and security of update management software remain paramount. The latest vulnerabilities uncovered in the Mitsubishi Electric MELSOFT Update Manager highlight the ongoing cyber risks faced by industrial environments worldwide...

In recent years, cybercriminals have increasingly exploited digital calendars to orchestrate sophisticated phishing attacks, particularly targeting Microsoft 365 users. These scams often involve deceptive calendar invitations that appear legitimate but are designed to steal sensitive information...

As email-based threats continue to evolve in both scope and sophistication, organizations leveraging Microsoft’s business productivity suite face a relentless challenge: how to protect their workforce—and their most sensitive data—from increasingly novel attack tactics. One such cybercrime...

A new wave of phishing attacks has cast a harsh spotlight on the security assumptions underlying Microsoft 365, as cybercriminals adapt with alarming speed to exploit lesser-known features. Over the past two months, a sophisticated campaign has targeted more than 70 organizations across critical...

The constantly evolving landscape of email-based cyber threats has long challenged organizations striving to protect sensitive business communications and safeguard end users. With social engineering, phishing, and advanced persistent threats now moving at a pace that strains even the most...

In the ever-evolving world of cyber threats, collaboration and integration between leading technology vendors have increasingly become not just beneficial, but essential. The recently announced strategic alliance between KnowBe4 – globally recognized for its comprehensive human risk management...

In a chilling demonstration of how cybercriminals are evolving their attack strategies, security researchers recently uncovered an advanced and highly orchestrated campaign by the North Korean BlueNoroff hacking group that leverages deepfake technology, social engineering, and custom macOS...

When hackers target popular communication platforms, the repercussions ripple far beyond fleeting inconvenience—malicious campaigns can threaten the digital safety of millions. A recent discovery has thrown Discord, the massively popular chat and voice platform, into the cybersecurity spotlight...

Industrial infrastructures rely on real-time insights, unfettered data flows, and the seamless orchestration of diverse operational technologies. Few platforms are as pivotal in this ecosystem as AVEVA’s PI Web API, a powerful portal that bridges operational data with enterprise applications and...

Organizations across the globe are contending with a staggering rise in highly advanced phishing attacks that specifically target Microsoft 365 and Google accounts. At the heart of this surge is the Adversary-in-the-Middle (AitM) technique—a significant evolution in cybercriminal methodology...

Microsoft has recently released a critical security update addressing a zero-day vulnerability identified as CVE-2025-33053, which is actively being exploited in the wild. This vulnerability affects users of Windows 10, Windows 11, and various Windows Server versions. Given the severity and...

A newly disclosed vulnerability, CVE-2025-47175, has sent ripples through the Windows and cybersecurity communities due to its potential impact on Microsoft PowerPoint—a staple of modern business, education, and government environments. This remote code execution vulnerability, classified as a...

Cross-border law enforcement efforts achieved a notable breakthrough as Microsoft and international authorities joined forces to dismantle a far-reaching transnational scam network targeting older adults. The collaborative operation exemplifies how coordinated interventions, advanced...

Phishing attacks continue to evolve, leveraging not only increasingly sophisticated social engineering techniques but also the legitimate tools and platforms users trust every day. The most recent wave of attacks, as publicized by cybersecurity researchers and industry reports, reveals that...

Phishing attacks are evolving at a rapid pace, becoming increasingly sophisticated, and exploiting trusted platforms in ways that challenge even tech-savvy users. Recently, cybersecurity researchers uncovered a troubling new scam leveraging Google Apps Script—a legitimate Google service—to...

As cyber threats targeting Microsoft 365 continue to evolve, organizations must remain vigilant to protect their critical productivity tools. Recent analyses have identified several pressing security challenges that demand immediate attention. 1. Privilege Escalation Attackers often exploit...

Microsoft 365 is now entrenched as the digital backbone for businesses worldwide, with over a million organizations depending daily on its cloud platforms, productivity tools, and collaborative features. Yet this very ubiquity—integrating everything from Exchange Online and SharePoint to Teams...

Ransomware remains one of the most destructive cyber threats to organizations worldwide, and protecting Windows servers from its multifaceted attack vectors is more urgent than ever. As threat actors become increasingly sophisticated, Windows administrators face daunting challenges—but also have...

In the ever-changing landscape of cybersecurity, enterprises face an adaptable and relentless adversary: the identity-focused attacker. As organizations increasingly move to the cloud, adopt modern authentication, and enforce multifactor authentication (MFA), the techniques used by...