14 articles
Dutch police have arrested a suspect in the ShinyHunters investigation. The arrest does not settle who carried out the Odido or FBI incidents; the documented access paths still demand action.
A joint law-enforcement advisory links fake technical interviews to 30,000 infected devices. The practical boundary is where an interview project runs.
A domain that looks pixel-perfect in your browser's address bar can still be fake. Here's how homograph and Punycode phishing exploits Unicode lookalike characters — and how to catch it.
Evil twin access points clone trusted Wi-Fi networks to intercept traffic and steal credentials. Here's how the attack works, why WPA3 doesn't fully stop it, and how to detect and defend against it.
A finance employee wired $25.6 million after a video call with the CFO and colleagues — all AI-generated deepfakes. Short public audio clips can now seed convincing voice clones. Here's how vishing changed and what actually stops it.
SIM swapping redirects SMS and voice verification to an attacker-controlled device. Here's how number-porting fraud works, why SMS MFA fails, and what actually stops it.
BEC caused $3.05 billion in reported US losses in 2025 alone — without a single exploit. Here's the full attack chain from mailbox compromise to wire fraud, and the controls that actually stop it.
Meta's Muse Image turns public Instagram content into promptable visual context. The security issue is not novelty; it is lower-friction impersonation at social-media scale.
WhatsApp usernames reduce phone-number exposure, but they also create a new global namespace where brands, public bodies, and lookalike handles can become fraud infrastructure.
Physical social engineering is back — and the attacker doesn't have to be an IT guy. Learn how anyone with the right uniform and pretext can walk through your front door, and how organizations can fight back.
ClickFix attacks trick users into running malicious code disguised as legitimate troubleshooting. Learn how these social engineering tactics work and how to defend against them.
Europol's OTF GRIMM has made 280 arrests in one year targeting criminal networks that outsource violence like a SaaS product. The model mirrors ransomware-as-a-service — and it's recruiting teenagers through Discord and encrypted apps.
A practical, no-nonsense guide to the essential security actions every home user should take to protect their computer, network, and personal data from everyday cyber threats.
AI has transformed social engineering into an automated, scalable threat. Learn how attackers leverage AI-powered phishing, deepfakes, and voice cloning—and what defenders can do about it.