Security News

Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks
2025-03-31 18:49

A phishing-as-a-service (PhaaS) platform named 'Lucid' has been targeting 169 entities in 88 countries using well-crafted messages sent on iMessage (iOS) and RCS (Android). [...]

Phishing-as-a-service operation uses DNS-over-HTTPS for evasion
2025-03-28 16:33

A newly discovered phishing-as-a-service (PhaaS) operation that researchers call Morphing Meerkat, has been using the DNS over HTTPS (DoH) protocol to evade detection. [...]

New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims’ DNS Email Records
2025-03-27 16:58

Cybersecurity researchers have shed light on a new phishing-as-a-service (PhaaS) platform that leverages the Domain Name System (DNS) mail exchange (MX) records to serve fake login pages that...

If you think you’re immune to phishing attempts, you’re wrong!
2025-03-26 14:11

Security consultant Troy Hunt, the creator of the Have I Been Pwned (HIBP) service, has revealed that he got tricked by a clever phishing email, and that the attacker gained access to his...

After Detecting 30B Phishing Attempts, Microsoft Adds Even More AI to Its Security Copilot
2025-03-25 21:04

Microsoft is partnering with top firms to launch new AI security tools, boosting breach analysis, threat detection, and AI model protection across cloud platforms.

Microsoft’s new AI agents take on phishing, patching, alert fatigue
2025-03-25 15:51

Microsoft is rolling out a new generation of AI agents in Security Copilot, built to help with some of the most time-consuming security challenges, such as phishing, data protection, and identity...

Ukrainian military targeted in new Signal spear-phishing attacks
2025-03-19 20:30

Ukraine's Computer Emergency Response Team (CERT-UA) is warning about highly targeted attacks employing compromised Signal accounts to send malware to employees of defense industry firms and...

Why it's time for phishing prevention to move beyond email
2025-03-19 14:03

While phishing has evolved, email security hasn't kept up. Attackers now bypass MFA & detection tools with advanced phishing kits, making credential theft harder to prevent. Learn how Push...

New Ad Fraud Campaign Exploits 331 Apps with 60M+ Downloads for Phishing and Intrusive Ads
2025-03-18 13:11

Cybersecurity researchers have warned about a large-scale ad fraud campaign that has leveraged hundreds of malicious apps published on the Google Play Store to serve full-screen ads and conduct...

Coinbase phishing email tricks users with fake wallet migration
2025-03-14 22:35

A large-scale Coinbase phishing attack poses as a mandatory wallet migration, tricking recipients into setting up a new wallet with a pre-generated recovery phrase controlled by attackers. [...]