Information security
fromTechRepublic
6 hours agoNew Phishing Attack Turns n8n Into On-Demand Malware Machine
Attackers are exploiting n8n workflows to deliver malware while evading detection and blending into normal business activities.
#phishing-and-qr-attacks
#phishing-and-qr-attacks
[ follow ]
#cybersecurity #malware #phishing #social-engineering #cybercrime #credential-theft #generative-ai #google #ai
Deliverability
fromenglish.elpais.com
2 days agoOnly 13% of emails are written by people, and more than half end up in the spam folder: This isn't a technical detail; it's a structural change'
Email is increasingly dominated by automated systems, with 87% of traffic generated by them, leading to declining effectiveness and user engagement.
Artificial intelligence
fromThe Hacker News
1 month agoResearchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes
AI-powered agentic web browsers can be manipulated through their reasoning processes to bypass security measures and fall victim to phishing attacks within minutes.
fromTheregister
1 day agoGit identity spoof fools Claude into giving bad code the nod
In a blog published this week, Manifold Security showed how an AI-powered code reviewer built on Claude accepted changes that appeared to come from a legitimate maintainer. By setting a fake author name and email in Git, the team made a commit appear to originate from a trusted source, then passed it through an automated review flow where the model approved it.
Information security
#phishing
Information security
fromTheregister
1 week agoHundreds compromised daily in Microsoft device code phishes
A Microsoft device-code phishing campaign is compromising hundreds of organizations daily, utilizing AI and automation to steal financial data.
Privacy technologies
fromTechzine Global
1 month agoFake Google Security page hijacks browser as proxy for attackers
Attackers use fake Google security notifications to install malicious Progressive Web Apps that steal one-time passwords, crypto wallet addresses, location data, and intercept SMS codes through social engineering and legitimate browser APIs.
Privacy technologies
fromTechzine Global
1 month agoFake Google Security page hijacks browser as proxy for attackers
Attackers use fake Google security notifications to install malicious Progressive Web Apps that steal one-time passwords, crypto wallet addresses, location data, and intercept SMS codes through social engineering and legitimate browser APIs.
fromFast Company
1 month agoScanning that QR code can leave you vulnerable. Here's how to protect yourself
QR codes are two-dimensional images with glyphs of various sizes that store not just numbers, but text. When scanned, your phone extracts the encoded information and can act on it. For example, QR codes often embed URLs, allowing you to scan, say, a parking meter to launch a webpage where you can pay online.
Privacy technologies
fromArs Technica
2 months agoMillions of people imperiled through sign-in links sent by SMS
The links are sent to people seeking a range of services, including those offering insurance quotes, job listings, and referrals for pet sitters and tutors. To eliminate the hassle of collecting usernames and passwords-and for users to create and enter them-many such services instead require users to provide a cell phone number when signing up for an account. The services then send authentication links or passcodes by SMS when the users want to log in.
Privacy technologies
Information security
fromSecurityWeek
1 month agoSecurity Firm Executive Targeted in Sophisticated Phishing Attack
A C-level executive at Outpost24 was targeted by a sophisticated phishing attack using the Kratos phishing-as-a-service kit that exploited legitimate services like Cisco and Nylas to bypass security defenses.
fromPCWorld
1 month agoPhishing scammers weaponize ICE ragebait
The email seen by at least some customers of the Emma email platform was a phishing scam. Hackers hoped to inspire instant panic with the words, 'As part of our commitment to supporting U.S. Immigration and Customs Enforcement (ICE), we will be adding a Support ICE donation button to the footer of every email sent through our platform.'
Information security
fromTechzine Global
1 month agoHow phishing service Tycoon 2FA went under
Tycoon 2FA, a Phishing-as-a-Service (PhaaS) platform, enabled thousands of cybercriminals to steal login credentials and session tokens. Even accounts secured with MFA could be compromised via a single email. The service had been active since at least 2023 and quickly grew to become one of the most widely used phishing platforms in the world.
Information security
fromZDNET
1 month agoHalf of all cyberattacks start in your browser: 10 essential tips for staying safe
Web browsers are among the top targets for today's cybercriminals, playing a role in nearly half of all security incidents, new research reveals. According to Palo Alto Networks' 2026 Global Incident Response report, an analysis of 750 major cyber incidents recorded last year across 50 countries found that, in total, 48% of cybercrime events involved browser activity. Individuals trying to connect to the web, including business employees, are exposed to cyberthreats on a daily basis.
Information security
[ Load more ]