Inside an EvilTokens affiliate panel targeting Microsoft 365
Cisco Talos identified a fully-featured phishing-as-a-service (PhaaS) operator panel, branded “ARToken,” that shares infrastructure, API contracts, and operational patterns with […]
Security
Adding some Automation to the favicon.ico method of Host Recon
I’m in the throes of target host recon for another pentest, and thought I’d share some workflow / automation stuff.
Security
Armored Likho’s new weapon: BusySnake Stealer
Introduction During our routine threat monitoring, we uncovered a new phishing campaign tied to a previously unknown APT group that
the road to resilience starts here
Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience. 26
Launch of UK’s National Cyber Action Plan delayed amid Labour leadership crisis
Britain’s National Cyber Action Plan, the government’s forthcoming strategy for defending the wider economy against state-backed and criminal hacking, has
Japan Cyberattacks Expose Hidden Risks Beyond Headquarters
Four major Japan cyberattacks reported within two weeks point to a common trend, with attackers gaining access through subsidiaries and
AI-Powered Phishing Attacks Surge 1,380% as Criminal Platforms Render MFA Obsolete
Imagine completing a two-factor authentication check on a real Microsoft login page and still handing a criminal full access to
Europe Confirms Record €4.1B Penalty Against Google for Android Practices
Europe Confirms Record €4.1B Penalty Against Google for Android Practices Pierluigi Paganini July 02, 2026 EU’s top court upheld a
Threat Brief: Mitigating Large-Scale Credential Attacks
Unit 42 is aware of a large-scale password spraying and credential theft campaign (“FortiBleed”) against Fortinet devices. We observed attempts