Cyber Attacks
Security researchers have identified a persistent campaign abusing the popular workflow automation tool n8n to deliver sophisticated malware via phishing emails, bypassing traditional gateway filters. LONDON — Since October 2025, a sophisticated threat actor has been exploiting the webhook functionality of n8n, an open-source workflow automation platform, to facilitate a global
Trending
Threat actors are increasingly leveraging the inherent trust of major SaaS platforms to deliver phishing lures directly through legitimate system-generated alerts. SAN FRANCISCO, CA — Security researchers have identified a sophisticated shift in phishing tactics, where attackers are bypassing traditional email gateways by abusing the automated notification systems of GitHub and
Data Breaches
The world’s largest travel platform has issued an urgent warning to customers after an unauthorized third party accessed sensitive booking information, triggering a massive wave of targeted phishing attacks. AMSTERDAM, Netherlands — Booking.com has confirmed a significant data security incident that has exposed the personal details and travel itineraries
Trending
A novel Phishing-as-a-Service platform is leveraging Microsoft's device code flow to bypass multi-factor authentication and automate business email compromise at scale. REDMOND — Security researchers have identified a surge in high-velocity phishing campaigns powered by a new service called "EvilTokens." The platform specifically targets Microsoft 365 environments
Data Breaches
Jones Day, one of the world's largest law firms, has confirmed that a targeted cyberattack resulted in unauthorized access to sensitive files belonging to 10 of its clients. The breach, which the firm describes as "limited" in scope, was carried out via a sophisticated phishing campaign
Cyber Attacks
Harvard University’s Information Technology (HUIT) department has issued a high-priority security alert following a "brazen" and targeted cyber campaign aimed at students, faculty, and staff. The university, which serves as a global hub for high-value research and intellectual property, is currently navigating a sophisticated social engineering raid
Cybersecurity 101
Modern organizations operate in a digital environment where cyber threats are becoming more frequent, sophisticated, and financially damaging. As businesses increasingly rely on cloud environments, connected devices, and digital services, the number of cybersecurity threats targeting organizations continues to grow. Cybersecurity threats are acts performed by individuals or groups with
Data Breaches
Starbucks has disclosed a cybersecurity incident that exposed sensitive personal information belonging to hundreds of employees after attackers gained unauthorized access to internal HR accounts. The company confirmed that 889 employee accounts were compromised following a phishing campaign targeting its internal workforce portal, based on breach notification filings submitted to
Cybersecurity 101
Phishing is among the most pervasive threats to organizational and personal security today. Effective defense now requires much more than just robust firewalls and encryption. As technical security measures become more robust, cybercriminals have shifted their focus toward the weakest link in the security chain: the human element. Mobile devices,
Cybersecurity 101
Social engineering is one of the most dangerous and persistent threats in cybersecurity. Social engineering is the term used for a broad range of malicious activities accomplished through human interactions. It relies on psychological manipulation rather than technical vulnerabilities to deceive victims. This guide is for individuals and organizations seeking
Cybersecurity 101
Understanding the concept of a threat actor is crucial for anyone concerned with cybersecurity. This article covers the definition, types, motivations, attack methods, and defense strategies related to threat actors in cybersecurity. It is designed for security professionals, IT staff, and anyone interested in cybersecurity threats. Threat actors are individuals