Search: “evasion”

656 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 994 Ransomware 518 Threat actor 229 Vulnerability 204 Phishing & fraud 134 Exploit / PoC 126 Policy & legal 93 Data breach 72 AI safety & security 33 Industry 29 Research 8 Tools 7 Advisory 6 Model release 3

SeverityAll critical 730 high 916 medium 657 low 121 info 41

Some Facts About Advanced Evasion Techniques

Cisco TalosOct 22, 21:06 UTC · Oct 22, 2010Exploit / PoC

BSI issues guidelines to counter evasion attacks targeting LLMs

Security AffairsNov 14, 09:32 UTC · Nov 14, 2025AI safety & security

Phishing campaigns thrive as evasive tactics outsmart conventional detection

Help Net SecurityJun 1, 00:00 UTC · Jun 1, 2023Threat actor

How to protect yourself from the hidden threat of evasive scripts

Help Net SecuritySep 7, 00:00 UTC · Sep 7, 2020Vulnerability

ASCII smuggling crosses over from AI prompt injection to phishing evasion

Microsoft details high-volume phishing campaign using ASCII smuggling (Unicode tag chars) for filter evasion, peaking at 2.3M messages.

Microsoft researchers observed a high-volume finance-themed phishing campaign using invisible Unicode tag characters (U+E0000–U+E007F), a technique known from AI prompt injection research as ASCII smuggling, to split lure words like 'funding' and evade email filters. Telemetry from Microsoft Defender for Office 365 showed signature hits jump from roughly 21,000 messages on February 8, 2026 to more than 1.3 million on February 9, peaking above 2.3 million on February 11, with elevated weekday activity lasting approximately three months. The discovery emerged from prompt injection protection research, showing AI-era evasion techniques crossing into traditional phishing. Most messages were flagged by layered Defender protections rather than a single Unicode-specific signal.

Microsoft Security BlogSep 3, 16:00 UTC · 13d agoPhishing & fraud in the wild1

HijackLoader Evolves: Researchers Decode the Latest Evasion Methods

The Hacker NewsFeb 8, 10:28 UTC · Feb 8, 2024Malware

Control Flow Integrity, a fun and innovative Javascript Evasion Technique

Security AffairsFeb 21, 14:29 UTC · Feb 21, 2018Malware

China-based Evasive Panda hackers compromised an ISP to spread malware, report says

The RecordAug 2, 19:10 UTC · Aug 2, 2024Malware

Threat Spotlight: Astaroth — Maze of obfuscation and evasion reveals dark stealer

Cisco TalosMay 11, 15:00 UTC · May 11, 2020Malware

ApateWeb: An Evasive Large-Scale Scareware and PUP Delivery Campaign

Unit 42 uncovers ApateWeb, a campaign using over 130,000 domains and multilayered redirects to deliver scareware, adware and PUPs to millions of users.

Unit 42 discovered ApateWeb, a large-scale campaign using a network of more than 130,000 domains to deliver scareware, potentially unwanted programs, adware including a rogue browser and browser extensions, and scam pages. The campaign uses a three-layer structure with deceptive emails as the entry point, centralized victim tracking via UUIDs, intermediate adware or anti-bot redirections, and evasion tactics such as cloaking, bot detection error pages, and wildcard DNS abuse. Activity spiked since August 2022, with several hundred attacker-controlled sites remaining in Tranco's top 1 million rankings and millions of monthly hits; Unit 42 blocked an estimated 3.5 million sessions across 74,711 devices in November 2023.