Every post we’ve published — newest first.
Two independent research teams have now mapped the same attack pipeline from different angles. Kaspersky’s Securelist group documented a sharp rise in phishing and business email compromise campaigns abusing Amazon …
A single command-and-control address tied to the RedLine infostealer, flagged on a non-standard high port, turned out to be the loose thread that unraveled an entire phishing operation. Researchers pivoting off that one …
Proofpoint published new research this week on the state of email authentication among India’s Fortune 100 companies, and the headline number cuts against the usual narrative. Adoption is not the problem. …
Researchers at Blackpoint Cyber’s Adversary Pursuit Group have published details on a previously undocumented malware framework they are calling Avalon, a modular toolkit that bundles credential theft, lateral …
Apple’s Hide My Email is one of the more quietly popular privacy features in iCloud+. Type your Apple ID into a sign-up form, tap Hide My Email instead, and Apple generates a random alias, something like …
Between June 12 and June 26, an automated attacker made more than 81 million login attempts against Microsoft 365 accounts monitored by the security firm Huntress. The traffic came from IPv6 address space registered to …
The FBI’s Internet Crime Complaint Center (IC3) released its 2025 Internet Crime Report in April, marking 25 years of tracking reported cybercrime in the United States. The topline number is stark on its own: …
On June 25, 2026, Microsoft’s threat intelligence team published details of a phishing campaign that has been running against hotels across Europe and Asia since April. The lure is ordinary: a ZIP file named …
Tomorrow, June 30, 2026, Essential Entities across the European Union face the first formal compliance audit under the Network and Information Security Directive 2. If your organization operates in energy, transport, …
DMARC has earned its place as the cornerstone of domain-level email authentication. Set your policy to p=reject, align your SPF and DKIM records correctly, and the vast majority of external spoofing attempts that abuse …
A vulnerability disclosed in June 2026 in the Gravity SMTP WordPress plugin illustrates a category of email security failure that DMARC was never designed to address. CVE-2026-4020 is an unauthenticated information …
Google published its June 2026 fraud and scams advisory this month, drawing on data from the NASDAQ Global Financial Crime Report and its own threat intelligence teams. The headline numbers are significant: global fraud …
