Security News

FBI shares massive list of 42,000 LabHost phishing domains
2025-04-30 16:01

The FBI has shared 42,000 phishing domains tied to the LabHost cybercrime platform, one of the largest global phishing-as-a-service (PhaaS) platforms that was dismantled in April 2024. [...]

⚡ Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & More
2025-04-28 12:18

What happens when cybercriminals no longer need deep skills to breach your defenses? Today’s attackers are armed with powerful tools that do the heavy lifting — from AI-powered phishing kits to...

WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors
2025-04-28 08:06

Cybersecurity researchers are warning about a large-scale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor...

Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry
2025-04-25 06:18

Because coding phishing sites from scratch is a real pain in the neck Darcula, a cybercrime outfit that offers a phishing-as-a-service kit to other criminals, this week added AI capabilities to...

Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals
2025-04-24 11:27

The threat actors behind the Darcula phishing-as-a-service (PhaaS) platform have released new updates to their cybercrime suite with generative artificial intelligence (GenAI) capabilities. "This...

DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack
2025-04-23 17:09

Multiple threat activity clusters with ties to North Korea (aka Democratic People's Republic of Korea or DPRK) have been linked to attacks targeting organizations and individuals in the Web3 and...

Phishing detection is broken: Why most attacks feel like a zero day
2025-04-23 14:02

Phishing attacks now evade email filters, proxies, and MFA — making every attack feel like a zero-day. This article from Push Security breaks down why detection is failing and how real-time,...

Who needs phishing when your login's already in the wild?
2025-04-23 13:00

Stolen credentials edge out email tricks for cloud break-ins because they're so easy to get Criminals used stolen credentials more frequently than email phishing to gain access into their victims'...

Three Reasons Why the Browser is Best for Stopping Phishing Attacks
2025-04-23 11:00

Phishing attacks remain a huge challenge for organizations in 2025. In fact, with attackers increasingly leveraging identity-based techniques over software exploits, phishing arguably poses a...

The dark side of YouTube: Malicious links, phishing, and deepfakes
2025-04-23 05:00

With billions of users, YouTube has become a tempting target for cybercriminals. They post malicious links in video descriptions and comments. Some send phishing emails to creators, posing as...