The Fake Passkey Call That Beat Their Cybersecurity Team
A fake IT call and a bogus passkey setup page are enough to take over Microsoft 365 accounts. Here's how cybersecurity teams close that gap.
July 2026
Nobody From Discord Trust & Safety Wants Your Login Code
Fake "you've been reported" DMs are the newest cybersecurity blind spot, phishing MFA codes in real time. Here's how to actually stop it.
June 2026
The Receipt You Never Bought Wants You To Call
Callback phishing now hides inside trusted apps with no link to block. See why your firewall misses it and what stops it. Start here.
A Million Phishing URLs Down. Your Credentials Already Moved.
The FBI nuked a million phishing URLs this week. The credentials already moved. Here's where cybersecurity defenders should actually invest next.
Phishing Volume Fell 20%. Your Click Rate Didn’t.
Phishing volume fell 20 percent while breach risk climbed. Here's why your cybersecurity dashboards lie, and what to harden first this month.
The Teams DM From “IT” Came From An External Tenant
Teams federation defaults turned "Hi, this is IT" into a cybersecurity disaster. Here's the configuration and detection work that actually shuts it down.
The SVG Attachment That Walks Past Your Email Filter
SVG phishing attachments are slipping past mail filters that trust the image extension. Here's the gap and how to close it before users click.
May 2026
Signal’s Encryption Held. The Backup Key Didn’t.
A Signal phishing wave skips the encryption and goes straight for backup recovery keys. Here's the cybersecurity gap to close this week.
The Fake Outage Page Is Hosted On chatgpt.com
ChatGPT share links and Markdown rendering are now phishing infrastructure. Here's why domain trust is failing and what to check first.
Tycoon2FA Used Microsoft’s Login Flow Against You
Tycoon2FA's new device-code phishing flow hijacks Microsoft 365 sessions without stealing a password. Here's what actually stops it.