social engineering attack

A sophisticated cyber campaign named **RedKitten** is targeting individuals and organizations in Iran, particularly human rights and political dissent groups,…

France's data protection authority fined the national unemployment agency €5 million for a major cybersecurity breach that compromised the personal…

The ShinyHunters gang is conducting a sophisticated voice phishing campaign, using social engineering to steal credentials and MFA codes by…

The malicious "NexShield" browser extension, a copy of a legitimate ad blocker, uses social engineering to trick users into running…

A Russian-aligned threat group (Void Blizzard/Laundry Bear) targeted Ukrainian military personnel in late 2025/early 2026 using a fake charity scheme…

A social engineering attack on third-party platforms allowed hackers to breach Betterment's internal systems, compromising sensitive customer data like names,…

DoorDash experienced a data breach in October 2025, compromising customer names, phone numbers, email addresses, and delivery locations, but sensitive…

DoorDash experienced a data breach in October 2025 due to a social engineering attack on an employee, compromising user contact…

The University of Pennsylvania experienced a cybersecurity breach where hackers used stolen credentials via social engineering to access systems, stealing…

A dangerous scam on TikTok, known as ClickFix, tricks users into installing information-stealing malware by posing as helpful tech support…

WestJet experienced a data breach affecting approximately 1.2 million travelers, exposing personal details like names, addresses, and sensitive travel documents…

A social engineering attack on Clorox, executed by impersonating employees and manipulating an outsourced service desk, led to an estimated…

Insight Partners has completed notifying individuals affected by a January data breach that compromised sensitive personal and financial information of…

Workday experienced a security breach via a third-party CRM platform, exposing business contact information but not customer data, due to…

Allianz Life suffered a major data breach compromising sensitive information of over 1 million customers due to unauthorized access to…

Clorox sued Cognizant for $380 million, alleging gross negligence in a 2023 cyberattack caused by lax security protocols and a…

Russian hackers bypassed two-factor authentication (2FA) using social engineering, exploiting legitimate account features like Gmail's "app password" to target high-profile…

Insight Partners confirmed a January data breach involving sensitive personal data of employees, limited partners, and financial records, with notifications…