Ars Technica · Security·1d agoYour uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?#google-ads#malvertising#netskope 3 sources in the wild 2 min3
The Register · Security·1d agoFake Google Security Team ad says 'no script reading' in voice phishing - then prints the script#vishing#voice-phishing#google 2 min
The Register · Security·1d agoCrooks use fake desktop apps to fool HR staff into giving them remote access#screenconnect#connectwise#social-engineering 2 sources in the wild 3 min
The Hacker News·1d ago highPlaceholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content#clickfix#pastejacking#social-engineering 4 sources in the wild 4 min
Malwarebytes Labs·1d agoLinkedIn adds new checks for fake profiles and work histories#linkedin#verification#fake-profiles 2 sources 3 min
Dark Reading·1d agoStopping IT Worker Scams Requires Revamped HR Process#it-worker-scam#hiring-fraud#hr
Cyber Security News·1d agoSauron Loader Malware Uses DLL Side-Loading and In-Memory Decryption to Evade Detection#sauron-loader#dll-side-loading#clickfix in the wild 5 min
The Hacker News·1d agoPamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence#pamstealer#macos#infostealer 3 sources in the wild 4 min
SANS Internet Storm Center·2d agoMacfinger ClickFix campaign, (Tue, Sep 22nd)#clickfix#macos#malware 3 sources in the wild 6 min
The Record·2d ago highAstrana latest healthcare tech firm to report data breach to SEC#astrana#healthcare#secData breach in the wild 2 min
SecurityWeek·2d ago criticalAstrana Health Data Breach Impacts Private, Confidential Information#data-breach#data-exfiltration#healthcare 2 min
The Hacker News·2d ago high17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360#clickfix#etherhiding#infostealer in the wild 8 min
ESET WeLiveSecurity·2d agoBeen told to pay at a Bitcoin ATM? Read this first#bitcoin-atm#scam#social-engineering 5 min
Malwarebytes Labs·3d agoHow device code phishing gives scammers access to your account#device-code-phishing#oauth#mfa-bypass 3 min
Help Net Security·3d agoLookout targets smishing, voice cloning, and vishing with real-time mobile protection#lookout#social-engineering#smishingTools 3 min
Malwarebytes Labs·3d agoFake Claude Max giveaway hides a Google account phishing trap#phishing#claude#google 2 sources in the wild 5 min
Recorded Future·4d agoThe Lure Isn't The Malware. It's Your Logo.#clickfix#social-engineering#recorded-future 5 min
Infosecurity Magazine·4d ago highNorth Korean Attackers Hit 30,000 Devices and Steal $10.7m#north-korea#waterplum#contagious-interview 5 sources in the wild 2 min2
Infosecurity Magazine·4d agoAI Incident Response Readiness Lags Behind AI Adoption, ISACA Finds#isaca#ai-governance#incident-response 2 min
BleepingComputer·4d agoWebinar tomorrow: Inside real-world Google Workspace breaches#google-workspace#oauth#social-engineering 3 min
Infosecurity Magazine·4d agoCISOs Must Update Incident Response Playbooks for Multimodal Deepfakes, Gartner Warns#deepfake#phishing#bec 2 sources in the wild 2 min
Cyber Security News·5d ago highHackers Impersonate IT Help Desk on Microsoft Teams to Steal Windows Passwords#microsoft-teams#phishing#synkloader 2 sources in the wild 3 min1