Cybersecurity researchers at Sekoia ApS’ Threat Detection & Research team are warning of a new phishing kit linked to the adversary-in-the-middle technique that is being utilized by multiple threat ...

Salty2FA phishing kit active since June 2025 bypasses 2FA in US and EU campaigns, fueling enterprise breaches.

Scattered Spider now targeting airlines. Bypasses 2FA via help desk tricks. Strict security protocols are necessary for prevention. The FBI has issued a fresh cybersecurity alert, warning that the ...

When it comes to credential theft and account takeovers, you might think that cybercriminals are somewhat indifferent as to what account is compromised. This is true, to a degree. Some accounts are ...

“Weaponise Google AppSheet” thus captures this attack’s essence: abuse of a trusted, legitimate development tool to deliver ...

Multi-factor (MFA) authentication can boost account security, but you should be on the lookout for malicious prompts that give bad actors the codes they need to log in easily.

If a code shows up when you didn’t log in anywhere, someone is trying their luck with your account. Here are some signs to ...

Twitter has announced that it will no longer support SMS two-factor authentication unless you pay for a Twitter Blue subscription. However, there are more secure options for multi-factor ...

GitHub will start requiring active developers to enable two-factor authentication (2FA) on their accounts beginning next week, on March 13. Once expanded to the ...