Law enforcement agencies in the UK, US and Canada have teamed up in an ambitious initiative which has already identified more than 20,000 victims of so-called “approval phishing.” Approval phishing is a technique whereby victims are tricked into providing full… Read More "Operation Atlantic Seizes $12m in Crypto Losses"
Cisco on Monday warned customers about yet another SD-WAN product zero-day exploited in attacks. The flaw, tracked as CVE-2026-20262, has been described as a medium-severity arbitrary file write issue affecting Catalyst SD-WAN Manager. An attacker can send specially crafted HTTP… Read More "Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks"
Ravie LakshmananJun 16, 2026Vulnerability / Network Security Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-20262, carries a CVSS score of… Read More "Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw"
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages 15 Jun 2026 • , 5 min. read Much has been written about how the days of phishing emails… Read More "A phishing attack that doesn’t steal your password"
The UK’s professional body for the cybersecurity sector has launched a new title designed to support more people at the start of their careers in the industry. UK Cyber Security Council said that the Associate Cyber Security Professional title is… Read More "UK Cyber Security Council Launches Associate Cyber Security Profession"
US and Indonesian law enforcement authorities have taken down a large-scale phishing network that has plotted over $20 million in fraud. Spearheaded by the FBI Atlanta field office, the operation targeted W3LL, a phishing kit which enables cybercriminals to impersonate… Read More "FBI Dismantles $20m Phishing Operation W3LL"
A newly identified Android banking trojan, known as Mirax, is spreading across Europe and combines remote access features with residential proxy capabilities to broaden its impact. According to an advisory published by Cleafy, the malware has been observed targeting Spanish-speaking users,… Read More "Mirax Android Trojan Turns Devices Into Residential Proxy Nodes"
Security researchers have identified a surge in the misuse of mailbox rules within Microsoft 365 environments, with attackers increasingly relying on native email features to maintain access, exfiltrate data and manipulate communications after account compromise. The Proofpoint findings, published earlier… Read More "Mailbox Rule Abuse Emerges as Stealthy Post-Compromise Threat"
Malicious npm packages have been identified distributing malware that steals credentials and attempts to spread across developer ecosystems. According to new research from Socket, the activity mirrors earlier worm-style supply chain attacks that used blockchain-hosted infrastructure, including Internet Computer Protocol… Read More "Npm Supply Chain Attack Uses Worm-Like Propagation"
The rush to adopt AI in enterprise environments is not only creating new security vulnerabilities, but is also reviving old security failures, a top Mandiant executive has warned. Speaking to Infosecurity during Google Cloud Next 26, Jurgen Kutscher, VP of… Read More "AI Rush is Reviving Old Cybersecurity Mistakes, Mandiant VP Warns"
