#phishing

#phishing

Yubico launching refreshed security keys with 5.7 firmware to enhance security features and move away from password-based protections. [ more ]

Passkeys combine private and public cryptographic keys for authentication.

Passkeys are phishing-resistant and eliminate the need for complex passwords. [ more ]

A data breach at Dell exposed customer names and addresses dating back to 2017, prompting security concerns and warnings about potential phishing attempts. [ more ]

Cybercriminals trick victims into giving access codes, allowing hijacking of online accounts and digital wallets. [ more ]

A dodgy email with a malicious link remains a top cyber threat. Bolster, an AI startup, raises $14 million to combat phishing attacks for businesses. [ more ]

TOAD attacks combine different phishing methods, posing a significant threat to businesses globally. [ more ]

Cybercriminals target Meta business accounts for malvertising campaigns, leveraging phishing kits to bypass multi-factor authentication. [ more ]

Phishing simulation training is an effective strategy for enhancing employees' ability to recognize and neutralize email phishing threats. [ more ]

Cyberattack targets Facebook users with phishing ads disguised as 'sponsored' Google links. [ more ]

Google updates Safe Browsing mode in Chrome to check sites against a real-time server-side list of known unsafe sites.

Real-time URL checks in Safe Browsing mode can help block 25% more phishing attempts. [ more ]

Google and Yahoo have partnered to create new guidelines for mass email senders to combat spam, spoofing, and phishing attacks.

Email senders must authenticate their emails, enable one-click unsubscribing, and maintain a low spam complaint rate. [ more ]

Law enforcement shuts down major phishing-as-a-service platform LabHost, leading to 37 arrests worldwide and revealing 70,000 UK fraud victims. [ more ]

Miscreants are misusing OAuth for financially motivated cyber crimes such as phishing and crypto mining.

Microsoft warns that compromised accounts without strong authentication are particularly vulnerable to OAuth abuse. [ more ]

AI tools contributing to more sophisticated misinformation.

Phishing campaigns using generative AI can increase likelihood of election personnel being targeted. [ more ]

Generative artificial intelligence tools like FraudGPT and WormGPT are being used by cybercriminals for malicious purposes.

These AI tools can create convincing fake messages and emails, leading to scams, deepfakes, and misinformation campaigns. [ more ]

Phishing campaigns leveraging AI capabilities expected to increase in 2024.

Automation behind cyber attacks and AI will continue to expand, allowing for more sophisticated targeted attacks. [ more ]

Malicious attackers are using artificial intelligence (AI) for more effective cyber attacks, and the volume and impact of threats will increase in the next two years.

AI tools make it easy to generate believable text, images, audio, and deepfake videos that can be used to deceive targets. [ more ]