Microsoft Warns of Passkey-Themed Phishing and Cloud Identity Compromise
Microsoft has recorded active intrusions into cloud accounts in which attackers exploit phone calls and text messages with urgent requests to change a passkey or MFA.
Tag phishing
Phishing Campaign Exploited Trezor’s Brevo Newsletter Account
An attacker exploited Trezor’s account with newsletter service Brevo. The phishing email urged recipients to download an app and enter their wallet seed.
Anthropic Disrupts Espionage Operation That Used Claude in Cyberattacks
Anthropic says it blocked accounts linked to the GTG-20006 group, which allegedly used Claude to automate parts of espionage attacks against targets in Ukraine and Europe.
Microsoft Analyzes BEC Campaign Impersonating Executives and Using ServiceNow Invoices
Microsoft detected more than one million fraudulent emails impersonating company executives and ServiceNow communications. Indicators suggest possible use of generative AI, but they are not definitive evidence.
CloudSEK Warns About BigBear 2.0 AiTM Phishing Targeting Microsoft 365 Accounts
According to CloudSEK research, the BigBear 2.0 platform captures Microsoft 365 passwords and authenticated session cookies. This may give attackers access to an account even after standard MFA is completed.
Mathspace Confirms Data Breach After Metabase Vulnerability Exploitation
Education platform Mathspace confirmed unauthorized access to its internal reporting system. The incident affects 1,079,819 people in Australia and New Zealand.
Microsoft Describes Phishing Using Invisible Unicode Characters
Microsoft analyzed a phishing campaign that inserted invisible Unicode Tags characters into financial terms to make email filters’ work more difficult.
U.S. Unseal Indictment Against Russian Citizen in Freelance Platform Phishing Case
The U.S. has unsealed an indictment against Searzhudin Aktulajev. Prosecutors allege he was involved in a campaign involving malicious Excel attachments sent to users of an unnamed freelance platform.
MAG Confirms Customer Data Breach; FulcrumSec Claims It Obtained 86 GB
Manchester Airports Group confirmed a cyber incident involving customer data. The FulcrumSec group claimed responsibility, but its claims about the volume and scope of the data remain only partially verified.
MAG Confirms Customer Data Breach at Three UK Airports
Manchester Airports Group confirmed that an unauthorized third party obtained some customer data. The incident did not affect airport operations or payment information.