Topic: account takeover
-
Microsoft 365 Users Targeted by EvilTokens Device Code Phishing
A new phishing-as-a-service toolkit called EvilTokens is enabling a surge in sophisticated device code phishing attacks against Microsoft 365 accounts, bypassing traditional security like multi-factor authentication. The attack exploits a legitimate Microsoft device authentication feature, tricki...
Read More » -
Fake TechCrunch Impersonators Still Targeting Businesses
Scammers are impersonating TechCrunch journalists and event coordinators to deceive businesses, using the publication's trusted reputation to solicit sensitive information or gain unauthorized access. These fraudulent actors employ tactics like mimicking official email domains and refining their ...
Read More » -
US Data Breaches Soar to Record High, Yet Fewer Victims Impacted
U.S. data compromises reached a record high of 3,332 in 2025, but the number of affected individuals fell sharply due to fewer massive "mega breaches." The financial services sector was the most targeted industry, and these incidents act as a hidden "cyber tax," with many small businesses raising...
Read More »