Trending
EvilTokens abused the Microsoft 365 device code flow, so victims entered a real code on Microsoft's genuine sign-in page. Microsoft seized its infrastructure on September 22, 2026 and now links it to more than 10,000 organizations.
Data Breaches
Jones Day, one of the world's largest law firms, has confirmed that a targeted cyberattack resulted in unauthorized access to sensitive files belonging to 10 of its clients. The breach, which the firm describes as "limited" in scope, was carried out via a sophisticated phishing campaign
Cyber Attacks
Harvard University’s Information Technology (HUIT) department has issued a high-priority security alert following a "brazen" and targeted cyber campaign aimed at students, faculty, and staff. The university, which serves as a global hub for high-value research and intellectual property, is currently navigating a sophisticated social
Cybersecurity 101
A clear guide to the most common cybersecurity threats organizations face in 2026 — malware, phishing, data breaches, DDoS, injection attacks, insider threats, and the best practices for defense.
Data Breaches
Starbucks has disclosed a cybersecurity incident that exposed sensitive personal information belonging to hundreds of employees after attackers gained unauthorized access to internal HR accounts. The company confirmed that 889 employee accounts were compromised following a phishing campaign targeting its internal workforce portal, based on breach notification filings submitted to
Phishing
Phishing tricks people, not software — which is why it starts most breaches. A clear guide to how phishing works, the main types, the red flags, the AI and MFA-bypass tactics of 2026, and how to protect yourself.
Cybersecurity 101
Social engineering is the use of psychological manipulation — authority, urgency, trust — to trick people past security. A practitioner's guide to the psychology, the techniques from phishing to help-desk vishing and deepfakes, real 2026 cases, and how to defend.