A recently discovered phishing kit provides miscreants with a broad range of capabilities, including an AI assistant and automated domain registration, Varonis reports. Dubbed Bluekit, it has been advertised as offering over 40 website templates, support for two-factor authentication, geolocation… Read More "New Bluekit Phishing Kit Features AI Assistant"
For anyone who fears their ChatGPT and Codex accounts might be targeted by attackers, OpenAI announced on Thursday that it is adding an optional new level of account protection that adds an extra layer of security. Dubbed Advanced Account Security,… Read More "OpenAI Rolls Out ‘Advanced’ Security Mode for At-Risk Accounts"
Investing and trading platform Robinhood has confirmed that cybercriminals exploited a vulnerability in its account creation process to send out legitimate-looking phishing emails. Many Robinhood users reported receiving suspicious emails over the weekend and an analysis revealed that they were… Read More "Robinhood Vulnerability Exploited for Phishing Attacks"
You can no longer recognize a phishing email by simply counting the typos. And you will get caught if you simply respond to a genuine-looking email without thinking. Analysis of almost 800,000 email attacks across more than 4,600 organizations shows… Read More "The Behavioral Shift: Why Trusted Relationships Are the Newest Attack Surface"
Threat actors have migrated to other phishing-as-a-service (PhaaS) platforms after Tycoon 2FA’s disruption and are reusing its tools, cybersecurity firm Barracuda Networks says. Active since at least 2023, Tycoon 2FA allows threat actors to launch phishing attacks, bypass two-factor authentication,… Read More "Tycoon 2FA Loses Phishing Kit Crown Amid Surge in Attacks"
Each type of attacker has different motivations, techniques, and targets; thus, understanding these will enable organizations to effectively implement their strategies in security. This section discusses the different categories of attackers, with real-life examples in order to show methods and… Read More "Types of Attackers in Cybersecurity"
