The SVG Attachment That Walks Past Your Email Filter
SVG phishing attachments are slipping past mail filters that trust the image extension. Here's the gap and how to close it before users click.
June 2026
May 2026
Signal’s Encryption Held. The Backup Key Didn’t.
A Signal phishing wave skips the encryption and goes straight for backup recovery keys. Here's the cybersecurity gap to close this week.
The Fake Outage Page Is Hosted On chatgpt.com
ChatGPT share links and Markdown rendering are now phishing infrastructure. Here's why domain trust is failing and what to check first.
Tycoon2FA Used Microsoft’s Login Flow Against You
Tycoon2FA's new device-code phishing flow hijacks Microsoft 365 sessions without stealing a password. Here's what actually stops it.
500 Victims, 6 Sectors: A Phishing Operation Hiding in Plain Sight
A years-long phishing op hit 500+ orgs across six sectors. Here's why signature-based cybersecurity missed it and what to fix this quarter.
Trusted Platforms Are Now the Attack Rail
Attackers are using Amazon SES, AiTM proxies, and RMM tools to bypass cybersecurity controls. Here's what your team needs to fix now.
April 2026
Your AI Browser Extension Knows Too Much About Your Cybersecurity
AI browser extensions are reading your emails and exfiltrating credentials. Here's what Unit 42 found, and what your cybersecurity posture needs to do about it now.
SMS Blasters and Phishing Flaws Need ipban
SMS blasters and platform-abused email flows show attackers don't need to break in. See how ipban and edge controls disrupt the follow-on phases. Read more.
Phishing Is Back on Top — What Does That Tell You About IPBan?
Phishing is the #1 initial access method again in 2026 — and the real gap isn't your inbox filter. See where IPBan fits after the click. Read now.
September 2024
Github Phishing Alert
Yesterday, I got an innocent looking email from a github issue on the IPBan github repository. Here's a screenshot. Please don't type the url into [...]