A WordPress flaw drawing tens of thousands of attackers. Two network products hacked before a fix even existed. Hundreds of thousands of access keys forgotten on GitHub. And, […]
China-linked group TA419 invites experts to join a fake “AI Policy Advisory Committee,” then steals their Microsoft 365 session despite multi-factor authentication. Here’s how the trap works, and why passkeys change the game.
Scammers built malicious Custom GPTs on ChatGPT, posing as a new “Plus 5.6” model, to trick people into pasting a command that installs a remote access trojan. Here’s what happened, and the simple rules to give your team.
Microsoft just took down EvilTokens, a phishing platform linked to more than 12,000 compromised inboxes, with Canada among the hardest-hit countries. Its technique, device code phishing, gets around multi-factor authentication. Here’s how to protect your SMB.
