Cyber Attacks
Researchers Find IDN Flaws Bypassing Chrome Phishing Safeguards
Two edge cases in internationalized domain name handling allow Cyrillic-Latin lookalikes to evade Chromium’s display and navigation warnings.
Phishing
Everything Threat Times has reported about Phishing: 16 stories, newest first. Part of our Cyber Attacks coverage.
Data Breaches
H&M Group Investigates Claims of Data Breach by ShinyHunters
The fashion retailer is assessing online claims of a limited-scope incident, stating no evidence of compromise exists so far.
Cyber Attacks
Cisco Talos Tracks Google AitM Phishing Kit Targeting Taiwan Researchers
Attackers use live WebSockets to bypass MFA by relaying authentication steps in real time to operators.
Cyber Attacks
Cisco Talos Tracks UAT-11985 Campaign Bypassing Google MFA via AI-Like Lures
Researchers identify a spear-phishing operation using AI-assisted event invitations to steal credentials from Taiwanese research affiliates by intercepting Google authentication sessions.
Cyber Attacks
Attackers Abuse Microsoft Power BI to Distribute ScreenConnect RMM Clients
Threat actors used trusted Microsoft infrastructure to deliver remote monitoring tools, establishing persistent access through sophisticated phishing lures.
Cyber Attacks
Check Point Reports 48% Rise in Global Cyber Attacks for September 2026
Organizations faced an average of 2,803 weekly cyber attacks in September 2026, marking a significant surge from last year, according to Check Point Research data.
Cyber Attacks
Malwarebytes Labs: Attackers Hijacked Country-Code Domains to Impersonate Google
Cybercriminals compromised three country-code namespaces to obtain certificates for impersonating trusted services, according to new research from Malwarebytes Labs.
Cyber Attacks
Malwarebytes Labs Reports ASOS Hackers Stole Customer Details and Shopping Searches
Researchers confirm the ASOS data breach includes shopping search history alongside personal details, raising phishing risks for customers.
AI
Sponsored Feature Explores Using GenAI to Counter GenAI in Email Security
A new sponsored report examines how organizations are deploying generative AI tools to defend against AI-driven email attacks.
Cyber Attacks
ASOS Customers Receive Fake Breach Alerts Linked to Suspected Snowflake Incident
Shoppers received push notifications claiming a Snowflake data breach compromised ASOS systems, raising concerns about credential theft.
Cyber Attacks
Nikkei confirms two employee cloud accounts compromised, used to send mass phishing
The Japanese media giant disclosed unauthorized access to staff accounts, with one leveraged to distribute thousands of phishing messages.
Cyber Attacks
Barracuda Identifies Phishing Campaigns Embedding AI Prompt Injections
Barracuda reports phishing emails designed to trick both human recipients and AI assistants through hidden prompt injection techniques.
Cyber Attacks
ANY.RUN Identifies Wazza Phishkit Targeting US, EU, and Australian Sectors
Analysis reveals Wazza phishkit employs advanced session management to target banking, government, and manufacturing entities across three continents.
Cyber Attacks
Social Engineering Warning Signs and How to Respond
Attackers exploit human psychology faster than technical controls can intercept, making behavioral anomalies the primary detection vector for compromise attempts.
Cyber Attacks
ESET Reveals Phishing Campaign Targeting YouTubers with Fake Sponsorship Offers
Scammers impersonate brands to trick creators into handing over Google account credentials via fake verification platforms.
Cyber Attacks
Cisco Talos: AI-Assisted Phishing Campaign Targets Taiwan Research Institutions
A new spear-phishing operation uses real-time AI pages to steal credentials from researchers in Taiwan, impersonating legitimate academic events.