News · via Dark Reading
External Teams Chats Anchor 15-Minute Malware Delivery
Main bombing sis getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.
Social engineering
Coverage tagged "Social engineering".
News · via Infosecurity Magazine
Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
Arctic Wolf warned that the function enables highly effective social engineering attacks, which lead to incidents such as ransomware
News · via arXiv cs.CR
Agent-to-Agent Synthetic Social Engineering on the Web
arXiv:2610.33411v1 Announce Type: new Abstract: An AI agent can prepare an accurate report and still request an action its user has not authorized. Cooperation across Web services therefore requires…
News · via The Hacker News
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat…
News · via SOCRadar
Finaxis, WoWInstaller, Moodle, MyHairCare & HT Médica Leaks
SOCRadar Dark Web Team identified several underground posts, including an alleged Finaxis.cloud data sale involving 400GB of information, a resurfaced WoWInstaller database containing historical user…
News · via Security Affairs
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram
uCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform. uCreater is a rentable Android spyware platform that hides inside…
News · via Dark Reading
Cyber Insurance's New Reality: Underwriting Isn't Enough
Rising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself.
News · via Infosecurity Magazine
Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise
Security researchers identified attempts to access corporate networks which have been linked to a major Microsoft 365-targeted BEC campaign using phishing, stolen session tokens and social engineering
News · via Security Affairs
INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown
INTERPOL’s Operation Serengeti III led to 1,462 arrests, disrupted 10,909 malicious networks and recovered $105 million across 21 countries. INTERPOL announced the results of Operation Serengeti III…
News · via Flashpoint
Preparing for 2027: Five Trends Shaping Enterprise Threat Intelligence
Table Of ContentsTable of ContentsAI Is Changing the Economics and Speed of CybercrimeAI Is Changing How Cybercriminals Develop Tools and Share KnowledgeThreat Intelligence Teams Are Struggling to…
News · via Help Net Security
Broadcom adds real-time scam detection to 3-D Secure authentication
Broadcom has announced the launch of Arcot Scam Defense, a new feature of Arcot by Broadcom, designed to block social engineering fraud during card-not-present (CNP) transactions. “Financial…
News · via SecurityWeek
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis.
News · via The Hacker News
Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands
Google on Tuesday said it's rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social…
News · via Cisco Talos
Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers
Legitimate infrastructure has become a powerful delivery mechanism for attackers, carrying the inherent trust they once had to build. As Cisco Talos explored in our previous research on weaponizing…
News · via Help Net Security
Chrome flags malicious commands that scammers pass off as fixes
Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command. The company introduced Enhanced Protection for…
News · via Google Security Blog
Our latest defenses against evolving web scams
Google Chrome's Enhanced Protection mode makes users ten times safer from phishing, social engineering, and other attacks when compared to Standard Protection mode. Buil…
News · via Flashpoint
Inside Joint Disruption Week: 28 Arrests and 3.7 Million Scam Accounts Removed
Table Of ContentsTable of ContentsJoint Disruption Week: The ResultsDisrupting the Infrastructure Behind Online FraudContinuing Efforts to Disrupt Scam NetworksMoresubscribe to our newsletter More…
News · via SOCRadar
ZoomInfo Sale, TryCircle, Vicente López, HDB, and X Leaks
Ameer OwdaameerowdaEdit Profile SOCRadar Dark Web Team identified several underground posts, including an alleged ZoomInfo database sale involving 185 million records, an alleged TryCircle customer…
News · via Zscaler ThreatLabz
Ransomware at Machine Speed: How GenAI Shrinks the Path after Initial Access
Artificial Intelligence technologies have made a huge impact on the security industry. But as with any public technology, adversaries have access to AI as well.
News · via Tenable
Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)
69Critical 1337Important 0Moderate 1Low Microsoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release…