A new phishing kit called GhostCode is targeting Microsoft 365 users by abusing the device-code authentication process....
phishing
Phishing attacks are changing. Attackers are no longer focused only on stealing usernames and passwords. They are...
Cybercriminals are using legitimate Google services to make phishing campaigns look more trustworthy. The campaign is designed...
Security researchers have uncovered a campaign involving 24 malicious npm packages that use legitimate package-mirroring services to...
A new phishing operation is showing why MFA alone cannot stop every modern account takeover. Security researchers...