Thought Leadership
Spying campaign
Phishing attack on Signal: Who is behind the attacks on politicians and journalists? The trail leads to Russia, but officially the German federal government remains reserved.
A growing trend?
A phishing incident, a compromised mailbox, and suddenly two completely independent attackers with different objectives. What sounds like an exceptional case could be a growing trend: multi-actor intrusion attacks.
Misuse of legitimate Apple notifications
Cybercriminals are exploiting Apple’s automated security notification system to send fraudulent purchase alerts that bypass virtually every spam filter in existence.
115,000 e-mails
Security researchers from Check Point have discovered an active phishing campaign that uses Google Classroom as a gateway. Within a week, the attackers sent over 115,000 fraudulent emails.
Study
Researchers have tested the effectiveness of various phishing training courses in a study involving 19,000 test subjects. The result: training courses help less than expected.
New attack technique discovered
Passkeys and FIDO authentication are designed to provide robust protection against phishing attacks. However, researchers have now discovered a critical loophole that can undermine even strong passkey authentication. Attackers can exploit a targeted downgrade technique to force users into using insecure login methods. This risk grows as FIDO adoption
Misuse of the link wrapping function
Cyber criminals are currently using a sophisticated trick to carry out targeted phishing attacks. The method abuses Proofpoint’s link wrapping system and leads unsuspecting users to manipulated Microsoft 365 pages.
Incident response plan necessary
ClickFix is already being used by a number of nation-state actors such as APT 28 and Kimsuky. The distribution of stealer malware such as Lumma Stealer via the social engineering campaign is particularly popular.
Cybersecurity Alert
Cybercriminals are becoming more sophisticated, and one of the most dangerous tactics they use against businesses is spear phishing. Unlike traditional phishing, which involves sending mass emails to random recipients, spear phishing is highly targeted.
Employee accounts hijacked
General Dynamics, one of the largest defense and aerospace companies in the USA, has fallen victim to a targeted phishing campaign. Attackers managed to gain access to the social security accounts of several dozen employees.
Most Read Articles
7. May 2026
4. May 2026