Inside an EvilTokens affiliate panel targeting Microsoft 365
Cisco Talos identified a fully-featured phishing-as-a-service (PhaaS) operator panel, branded “ARToken,” that shares infrastructure, API...
Security
Adding some Automation to the favicon.ico method of Host Recon
I’m in the throes of target host recon for another pentest, and thought I’d share...
Armored Likho’s new weapon: BusySnake Stealer
Introduction During our routine threat monitoring, we uncovered a new phishing campaign tied to a...
the road to resilience starts here
Your business may be small, but its attack surface is anything but. Readiness is the...
Launch of UK’s National Cyber Action Plan delayed amid Labour leadership crisis
Britain’s National Cyber Action Plan, the government’s forthcoming strategy for defending the wider economy against...
Japan Cyberattacks Expose Hidden Risks Beyond Headquarters
Four major Japan cyberattacks reported within two weeks point to a common trend, with attackers...
AI-Powered Phishing Attacks Surge 1,380% as Criminal Platforms Render MFA Obsolete
Imagine completing a two-factor authentication check on a real Microsoft login page and still handing...
Europe Confirms Record €4.1B Penalty Against Google for Android Practices
Europe Confirms Record €4.1B Penalty Against Google for Android Practices Pierluigi Paganini July 02, 2026...
Threat Brief: Mitigating Large-Scale Credential Attacks
Unit 42 is aware of a large-scale password spraying and credential theft campaign (“FortiBleed”) against...