400 Fake Help Desk Chats Landed Minutes After Inbox Floods
Attackers flooded inboxes, then posed as IT on Teams in 400-plus cybersecurity incidents. Shut off external chat before the next flood.
October 2026
Your Honest Notice Makes the Fake One Land
Capcom's 11.7M dump shows how a cybersecurity notice becomes a phishing calendar. Check your reset path before you hit send.
Of Course Sales Quoted the Fake Job
RFQ phishing is turning your sales queue into a cybersecurity hole. See the controls that still work when closers have to reply.
Did Law Enforcement Patch Your Inbox?
Marketplace raids don't retire phishing kits. See what your cybersecurity team should break before leftover campaigns hit.
Is Official Still a Cyber Security Signal?
Official accounts just pushed a crypto lure and a fake Zoom dropper. See why cybersecurity still trusts the wrong signal. Review your comms path.
September 2026
Did Your Firewall Approve That Helpdesk Client?
Phishing is installing the RMM your firewall already trusts. See how that gap rewrites cybersecurity response, then audit your consoles.
The Coworker on the Line Wasn’t Real
Astrana's impersonation breach shows cybersecurity still fails at the helpful employee. See the controls that actually cut that path.
A Takedown Does Not Kill a Stolen Session
EvilTokens is down, but stolen device-code sessions still beat most cybersecurity controls. Check your OAuth grants before the next kit stands up.
Who Still Grades Phishing by the Click?
Click rates still run most cybersecurity awareness programs. This week's research, plus a million AI lures, says score the password. Fix the metric.
Passkeys Are Working For the Attacker
Passkey-themed phishing is beating cybersecurity checkboxes and leaving MFA persistence in the tenant. Audit enrollments before the next "IT" call.