Topic: employee security training
-
Microsoft 365 Users Targeted by EvilTokens Device Code Phishing
A new phishing-as-a-service toolkit called EvilTokens is enabling a surge in sophisticated device code phishing attacks against Microsoft 365 accounts, bypassing traditional security like multi-factor authentication. The attack exploits a legitimate Microsoft device authentication feature, tricki...
Read More » -
Threat actors recruit employees with cloud access
Intel 471 categorizes insider threats into three types: negligent insiders who create vulnerabilities through carelessness, manipulated insiders tricked by social engineering, and malicious insiders who deliberately exploit access for gain. Cybercriminals exploit these threats through credential ...
Read More » -
Workday Hit by Data Breach Following Salesforce Attack
Workday experienced a security breach via a third-party CRM platform, exposing business contact information but not customer data, due to a social engineering attack impersonating internal personnel. The breach, detected on August 6, involved Salesforce and mirrored tactics used by cybercriminal ...
Read More » -
Allianz Life Data Breach Affects Over 1 Million Customers
Allianz Life suffered a major data breach compromising sensitive information of over 1 million customers due to unauthorized access to a third-party CRM system, raising identity theft and fraud concerns. Hackers used social engineering tactics on July 16, 2025, to infiltrate the CRM platform, ste...
Read More »