Fake recruiter scams have been targeting corporate credentials on mobile devices, using full-screen login pages and pre-qualification checks to reject personal email addresses and focus on enterprise accounts. Researchers at Zimperium’s zLabs analyzed the activity and identified 46 previously unpublished… Read More "Fake Recruiter Scams Target Corporate Credentials on Mobile"
As phishing-as-a-service goes industrial, Microsoft takes down a marketplace behind 1 billion messages
Microsoft says it has dismantled a criminal marketplace responsible for 1 billion malicious messages. Working with international authorities and several tech and cybersecurity companies in a nearly year-long investigation, Redmond identified and took down Yam Store, a coordinated underground network… Read More "As phishing-as-a-service goes industrial, Microsoft takes down a marketplace behind 1 billion messages"
ZeroTokens Phishing Platform Steers Attacks in Real Time
A phishing platform dubbed ZeroTokens allows attackers live visibility into victim sessions and the ability to change subsequent prompts in real time, allowing attacks to adapt in real time while targeting credentials and financial information. The platform allowed an operator… Read More "ZeroTokens Phishing Platform Steers Attacks in Real Time"
DDoS Attack Hits Norwegian Government Services
A major DDoS attack on the Norwegian government’s digitalization agency has disrupted key services since Monday. The agency, known as Digitaliseringsdirektoratet (Digdir), explained in an update on August 25 that the attack began on Monday night at 3.38am local time.… Read More "DDoS Attack Hits Norwegian Government Services"
Linux Foundation Introduces TRACE Standard for AI Runtime Evidence
One major security challenge with generative AI, and particularly AI agents, is making these systems prove what they really did. The Linux Foundation aims to address this challenge through a new open standard for AI runtime evidence that helps make… Read More "Linux Foundation Introduces TRACE Standard for AI Runtime Evidence"
Average Cyber Insurance Losses Increase Despite Fewer Claims
The average cost of cybersecurity insurance claims made by large and middle-market companies surged in 2025, despite a significant drop in the volume of claims, according to Chubb’s 2026 Cyber Claims Report. The insurer said the growing severity of claims… Read More "Average Cyber Insurance Losses Increase Despite Fewer Claims"
Four in Five AI Tools Run with No IT Oversight, Research Finds
Security researchers have warned that major gaps in IT oversight, surging numbers of published vulnerabilities, and MCP security risks are making the AI agent ecosystem increasingly risky. AI security vendor Reco analyzed anonymized platform telemetry from large enterprises, publicly available Model… Read More "Four in Five AI Tools Run with No IT Oversight, Research Finds"
Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects
Interpol has identified 263 suspects and secured 58 arrests in an eight-month operation targeting West African organized crime groups involved in cyber-enabled financial fraud and other crimes. Operation Jackal IV ran from November 2025 to June 2026 across 22 countries… Read More "Interpol Operation Jackal IV Identifies 263 Cybercrime Suspects"
Tortoiseshell Expands Toolset With New Backdoor, SSH Tunnel
An Iranian-linked threat actor has expanded its malware toolset with a backdoor and reverse SSH tunneling utility, while newly identified infrastructure points to potential targeting across Europe and the Middle East. Group-IB Threat Intelligence began investigating Tortoiseshell after Kaspersky published… Read More "Tortoiseshell Expands Toolset With New Backdoor, SSH Tunnel"
OFAC Sanctions Chinese Scam Platform Xinbi Guarantee
The US government has followed the UK in sanctioning a notorious Chinese-language marketplace used to support fraud, money laundering and other criminal activity. Xinbi Guarantee connects scam center operators in Southeast Asia and elsewhere, as well as other transnational crime… Read More "OFAC Sanctions Chinese Scam Platform Xinbi Guarantee"