The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.

The post AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft appeared first on SecurityWeek.

Analysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks.

The post Phishing Research Challenges Conventional Security Awareness Testing appeared first on SecurityWeek.

Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking.

The post Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack appeared first on SecurityWeek.

A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.

The post ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited appeared first on SecurityWeek.

Researchers say iAuthFlow V2 can register an attacker-controlled passkey, enabling persistent access even after passwords are changed and active sessions revoked.

The post New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets appeared first on SecurityWeek.