Tag: email

The cyber perimeter was never dead. We just abandoned it.

Mar 13, 2026 9:10 AM

Tags: access, advisory, authentication, awareness, backup, cisa, ciso, cloud, control, cyber, cybersecurity, data-breach, email, exploit, firewall, flaw, governance, government, Hardware, identity, infrastructure, Internet, resilience, risk, router, rust, service, software, strategy, technology, update, zero-trust

Industry has comforted itself with the idea that the perimeter is dead. It is not. What happened is far worse. We ignored the edge, let unsupported hardware decay in place, and effectively donated our perimeter to adversaries who were more than willing to accept it.The FBI’s Winter SHIELD effort is the operational side of the…
The cyber perimeter was never dead. We just abandoned it.

Mar 13, 2026 9:10 AM

Tags: access, advisory, authentication, awareness, backup, cisa, ciso, cloud, control, cyber, cybersecurity, data-breach, email, exploit, firewall, flaw, governance, government, Hardware, identity, infrastructure, Internet, resilience, risk, router, rust, service, software, strategy, technology, update, zero-trust

Industry has comforted itself with the idea that the perimeter is dead. It is not. What happened is far worse. We ignored the edge, let unsupported hardware decay in place, and effectively donated our perimeter to adversaries who were more than willing to accept it.The FBI’s Winter SHIELD effort is the operational side of the…
Microsoft Copilot Email and Teams Summarization Flaw Opens Door to Phishing Attacks

Mar 13, 2026 6:10 AM

Tags: ai, attack, business, cyber, email, flaw, intelligence, microsoft, phishing

Artificial intelligence assistants have transformed daily business operations, helping teams manage overflowing inboxes and summarize complex communications. Microsoft Copilot integrates directly into these workflows, pulling context from various Microsoft 365 applications to streamline tasks. However, this convenience introduces a new security boundary: what happens when Copilot follows hidden instructions written by an attacker inside an…
AI-Driven Phishing Attacks Bypass Email Filters, Land in Inboxes

Mar 12, 2026 3:10 PM

Tags: ai, attack, breach, cyber, email, phishing, risk, social-engineering

AI-generated phishing is rapidly reshaping email risk, with more attacks slipping past filters and landing directly in users’ inboxes, even though AI-generated emails remain a minority of total phishing. The human element remains central: 68% of breaches involve people, and 8095% of those begin with phishing, making social engineering the dominant breach vector. Phishing volume…
Attackers Don’t Just Send Phishing Emails. They Weaponize Your SOC’s Workload

Mar 12, 2026 2:10 PM

Tags: cybersecurity, defense, email, phishing, soc, training

The most dangerous phishing campaigns aren’t just designed to fool employees. Many are designed to exhaust the analysts investigating them. When a phishing investigation takes 12 hours instead of five minutes, the outcome can shift from a contained incident to a breach.For years, the cybersecurity industry has focused on the front door of phishing defense:…
Phishers hide scam links with IPv6 trick in “free toothbrush” emails

Mar 11, 2026 8:48 PM

Tags: email, healthcare, phishing, scam

United Healthcare impersonators are using an IPv6 trick to hide the real destination of phishing links in emails promising free Oral-B toothbrushes. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/phishers-hide-scam-links-with-ipv6-trick-in-free-toothbrush-emails/
Sextortion >>I recorded you<< emails reuse passwords found in disposable inboxes

Mar 11, 2026 6:48 PM

Tags: email, password

“You pervert, I recorded you!” sextortion emails include real passwords harvested from public temporary email inboxes. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/sextortion-i-recorded-you-emails-reuse-passwords-found-in-disposable-inboxes/
Iran-linked hackers claim cyberattack on Albania’s parliament email systems

Mar 11, 2026 4:48 PM

Tags: cyberattack, email, hacker, iran, service

In a statement shared with local media, parliament said its main systems and official website remained operational but confirmed that internal email services used by the parliamentary administration had been temporarily suspended. First seen on therecord.media Jump to article: therecord.media/iran-linked-hackers-claim-cyberattack-albania-parliament
Did cybersecurity recently have its Gatling gun moment?

Mar 11, 2026 12:49 PM

Tags: ai, attack, automation, cyber, cyberattack, cybercrime, cybersecurity, defense, detection, email, endpoint, government, hacker, intelligence, LLM, malicious, malware, phishing, ransomware, siem, social-engineering, spear-phishing, strategy, tactics, threat, tool, update, vulnerability, warfare

inflection point. Both emblematic of an irreversible tipping point, where the nature of conflict was altered by its sudden asymmetry.The Gatling gun is the perfect analogy for the current cyber landscape. Just as it transformed warfare from a manual craft into an industrial process, modern threats have shifted from individual attacks to automated, high-velocity engagements.Here…
Jack & Jill went up the hill, and an AI tried to hack them

Mar 11, 2026 5:48 AM

Tags: access, ai, attack, authentication, data, email, endpoint, exploit, hacking, injection, jobs, phishing, RedTeam, service, social-engineering, strategy, tool, vulnerability

get_or_create_company” endpoint that determines from a user’s email domain whether it should create a new company on the platform or associate them with an existing company to auto-join CodeWall’s account. Thanks to the bug that failed to check user roles when onboarding, it then obtained full org admin privileges and was able to access team…
Jack & Jill went up the hill, and an AI tried to hack them

Mar 11, 2026 5:48 AM

Tags: access, ai, attack, authentication, data, email, endpoint, exploit, hacking, injection, jobs, phishing, RedTeam, service, social-engineering, strategy, tool, vulnerability

get_or_create_company” endpoint that determines from a user’s email domain whether it should create a new company on the platform or associate them with an existing company to auto-join CodeWall’s account. Thanks to the bug that failed to check user roles when onboarding, it then obtained full org admin privileges and was able to access team…
March Patch Tuesday: Three high severity holes in Microsoft Office

Mar 11, 2026 1:48 AM

Tags: ai, apache, backup, browser, chrome, cloud, credentials, cve, cvss, cyber, email, endpoint, exploit, google, incident, incident response, injection, insurance, iot, linux, macOS, malicious, microsoft, network, office, sap, soc, sql, tool, update, vulnerability, windows

aadsshlogin package. Systems with the extension already installed have packages.microsoft.com configured automatically, so no additional setup is required.”The cloud ecosystem doesn’t really handle patching well,” Reguly said. “It’s a relatively immature process, and the way that Microsoft handles these products really demonstrates that. The CVE impacting Azure Linux Virtual Machines (CVE-2026-23665) or the multiple CVEs…
Cal AI, New Owner of MyFitnessPal, Hit by Alleged Breach of 3 Million Users

Mar 10, 2026 11:48 PM

Tags: ai, breach, data, data-breach, email, hacker

Cal AI faces data breach claims after hackers post alleged data of 3 million users, including emails, health details, and subscriptions. First seen on hackread.com Jump to article: hackread.com/cal-ai-myfitnesspal-data-breach-3m-users/
Google Cloud Security Threat Horizons Report #13 (H1 2026) Is Out!

Mar 10, 2026 9:48 PM

Tags: access, ai, apt, attack, cloud, credentials, cybersecurity, data, email, exploit, extortion, google, incident response, injection, intelligence, LLM, metric, phishing, ransomware, rce, remote-code-execution, saas, service, social-engineering, software, theft, threat, vulnerability, zero-day

This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Cloud Threat Horizons Report, #13 (full version, no info to enter!) that we just released (the official blog for #1 report, my unofficial blogs for #2, #3, #4, #5, #6, #7, #8, #9, #10, #11 and #12).…
Phishing Scammers Impersonating City, County Officials, Demanding Payment: FBI

Mar 10, 2026 4:46 PM

Tags: country, email, phishing, scam

Scammers are impersonating local municipal officials around the country with seemingly legitimate phishing messages demanding payment for permits. The bad actors grab publicly available information and use them in their emails to fool their targets. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/phishing-scammers-impersonating-city-county-officials-demanding-payment-fbi/
Inside a bot operator’s email verification infrastructure

Mar 10, 2026 3:48 PM

Tags: attack, email, infrastructure

During an investigation into a large-scale automated account creation attack targeting one of our customers, we observed a burst of suspicious registration activity. In less than a week, the attackers attempted more than 80,000 registrations. While investigating the registrations, we identified several unusual email domains being used during the First seen on securityboulevard.com Jump to…
Cybercriminals impersonating city officials to steal permit payments, FBI says

Mar 10, 2026 3:48 PM

Tags: cybercrime, email, phishing

In a notice on Monday, the agency said people and businesses with active applications for the permits are being targeted with phishing emails that often include detailed, accurate information “including property addresses, case numbers, and the true names of city and county officials.” First seen on therecord.media Jump to article: therecord.media/cybercriminals-impersonate-city-officials-permit-payments
Top 10 Best Anti-Phishing Tools in 2026

Mar 10, 2026 3:48 PM

Tags: ai, business, cyber, cybersecurity, deep-fake, email, exploit, phishing, spam, threat, tool

The cybersecurity landscape has shifted dramatically, and traditional spam filters are no longer enough to protect sensitive enterprise data. As we navigate through 2026, threat actors are leveraging sophisticated AI-powered exploits to bypass standard security protocols, craft hyper-realistic deepfake audio messages, and execute highly targeted Business Email Compromise (BEC) campaigns. Phishing has evolved from obvious,…
LeakyLooker: Hacking Google Cloud’s Data via Dangerous Looker Studio Vulnerabilities

Mar 10, 2026 2:47 PM

Tags: access, api, attack, authentication, breach, business, cloud, control, credentials, data, data-breach, email, exploit, flaw, google, group, guide, hacking, identity, infrastructure, injection, intelligence, jobs, leak, malicious, mitigation, monitoring, network, oracle, password, programming, service, sql, tool, unauthorized, update, vulnerability

Tenable Research revealed “LeakyLooker,” a set of nine novel cross-tenant vulnerabilities in Google Looker Studio. These flaws could have let attackers exfiltrate or modify data across Google services like BigQuery and Google Sheets. Google has since remediated all identified issues. We discovered and disclosed nine novel cross-tenant vulnerabilities in Google Looker Studio (formerly Data Studio).…
Attackers use AiTM phishing kit, typosquatted domains to hijack AWS accounts

Mar 10, 2026 2:47 PM

Tags: email, phishing

Phishers are targeting AWS accounts holders with fake email security alerts and redirecting them to a high-fidelity clone of the AWS Management Console sign-in page, Datadog … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/10/aitm-phishing-aws-accounts/
Devs looking for OpenClaw get served a GhostClaw RAT

Mar 10, 2026 1:47 PM

Tags: access, apple, credentials, crypto, data, detection, email, malware, password, rat, service, theft, tool

From password theft to persistence: The second stage malware, internally referred to as “GhostLoader,” is a large JavaScript bundle implementing both an infostealer and a remote access framework. Once launched, GhostLoader installs itself into a hidden directory disguised as an npm telemetry service and sets up persistence mechanisms which include shell configuration hooks that automatically…
How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows

Mar 10, 2026 1:47 PM

Tags: ai, data, email, guide, intelligence, leak, software, tool

Artificial Intelligence (AI) is no longer just a tool we talk to; it is a tool that does things for us. These are called AI Agents. They can send emails, move data, and even manage software on their own.But there is a problem. While these agents make work faster, they also open a new “back…
Law enforcement disrupted Tycoon 2FA phishing-as-a-service platform

Mar 10, 2026 10:47 AM

Tags: 2fa, email, infrastructure, law, microsoft, phishing, service

Authorities disrupted the Tycoon 2FA phishing-as-a-service platform used to send millions of phishing emails to over 500,000 orgs worldwide. The joint effort, led by Microsoft, Europol, and industry partners, aimed to target the infrastructure of Tycoon 2FA phishing-as-a-service platform responsible for tens of millions of fraudulent emails reaching over 500,000 organizations each month worldwide. By…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
Hackers Use Microsoft Teams to Manipulate Employees Into Allowing Remote Access

Mar 10, 2026 6:47 AM

Tags: access, cyber, cybersecurity, email, finance, group, hacker, healthcare, malware, microsoft, threat, tool

A newly discovered malware operation is targeting employees at finance and healthcare organizations by posing as internal IT support. Once inside, the attackers deploy a stealthy new tool called the A0Backdoor. Cybersecurity researchers at BlueVoyant have identified a threat group, known as Blitz Brigantine or Storm-1811, using email bombing and Microsoft Teams messages to trick…
The Portland Timbers expand from data protection to cybersecurity with Acronis

Mar 9, 2026 12:47 PM

Tags: backup, cyber, cybersecurity, data, edr, email, intelligence, resilience, threat

The Portland Timbers’ continued partnership with Acronis reflects a shared vision for modern cyber resilience, one built on consolidation, threat intelligence and integrated protection. This expansion goes beyond backup and recovery to incorporate cybersecurity capabilities, including Acronis EDR, Acronis RMM and Acronis Email Security. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/the-portland-timbers-expand-from-data-protection-to-cybersecurity-with-acronis/
MaaS VIP Keylogger Campaign Uses Steganography to Steal Credentials at Scale

Mar 9, 2026 12:47 PM

Tags: credentials, cyber, defense, email, malware, phishing, service, spear-phishing

A large-scale spear-phishing campaign distributing aVIP Keyloggervariant sold as Malware-as-a-Service (MaaS). The campaign employs steganography, in-memory execution, and modular payload design to evade defenses while harvesting credentials across browsers, email clients, and collaboration tools. Researchers observed fraudulent purchase-order emails that encouraged victims to open an attached RAR file. The compressed archive contained an executable disguised…
Rogues gallery: 15 worst ransomware groups active today

Mar 9, 2026 10:47 AM

Tags: access, ai, alphv, apt, attack, backup, breach, cloud, cyber, cybercrime, dark-web, data, data-breach, defense, detection, email, encryption, endpoint, exploit, extortion, finance, government, group, healthcare, infrastructure, insurance, intelligence, korea, law, leak, linux, lockbit, malicious, malware, moveIT, network, north-korea, organized, phishing, ransom, ransomware, russia, service, social-engineering, software, strategy, threat, tool, usa, vmware, vpn, vulnerability, windows, zero-day

Black Basta: History: Black Basta appeared on the ransomware scene in early 2022 and is believed to be a spin-off from Conti, a group notorious for attacking major organizations.How it works: Black Basta usually deploys malware through exploitation of known vulnerabilities and social engineering campaigns. “Employees in the target environment are email bombed and then…
Hackers abuse .arpa DNS and ipv6 to evade phishing defenses

Mar 8, 2026 3:47 PM

Tags: defense, dns, email, hacker, phishing, threat

Threat actors are abusing the special-use “.arpa” domain and IPv6 reverse DNS in phishing campaigns that more easily evade domain reputation checks and email security gateways. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-abuse-arpa-dns-and-ipv6-to-evade-phishing-defenses/