Phishing attacks in 2025 increasingly moved beyond email, with attackers using social platforms, search ads, and ...

North Korean state-backed hackers, the Lazarus Group, primarily employed spear phishing attacks to steal funds over the last ...

An entire cottage industry has formed around phishing attacks that bypass some of the most common forms of multifactor authentication (MFA) and allow even non-technical users to quickly create sites ...

What’s new in a ConsentFix attack is that the attack happens entirely inside a browser, say the researchers, which removes one of the key detection opportunities because the attack doesn’t touch an ...

Push Security, a leader in browser-based detection and response, today announced the discovery of a new class of phishing attack that enables Microsoft account takeover simply by copy-and-pasting a ...

Targeted email scams are getting bolder and more convincing. Here's how they work, and the smartest ways to defend yourself.

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. Update, Jan. 11, 2025: This story, originally published Jan. 9 ...

The Keep Aware threat research team recently observed a phishing incident that involved leveraging legitimate infrastructure, precision email validation, and evasive delivery techniques. This attack ...

Hackers are turning inboxes into danger zones. Google has issued an urgent warning to its 3 billion Gmail users after confirming a “sophisticated” phishing scam targeting unsuspecting emailers — and ...

Critical infrastructure needs phishing-resistant authentication to secure operational technology and prevent OT cyber attacks ...