SCROLL NEWS / DISCOVERY
Search headlines
Find the stories shaping the conversation.
Results for " Phish " 47 found 🔀 AI-powered Shuffle
Sign in to save shuffle history.
Phish of the day: Microsoft OAuth scams abuse redirects for malware delivery
: Crims hope for payday from malicious payloads rather than stealing access tokens
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
N0va phishing abuses legitimate authentication flows to capture access and refresh tokens and establish SSO access to corporate resources.
Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA
Authorities seize 200 Kratos servers and arrest its alleged developer and operator; investigators estimate 15,000 campaigns ran monthly.
Microsoft adds Windows protections for malicious Remote Desktop files
Microsoft has introduced new Windows protections to defend against phishing attacks that abuse Remote Desktop connection (.rdp) files, adding warnings and disabling risky shared resources by default.
FBI warns of Kali365 phishing service targeting Microsoft 365 accounts
The FBI is warning about the Kali365 phishing-as-a-service platform (PhaaS) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass multi-factor authentication (MFA).
How to Reduce Phishing Exposure Before It Turns into Business Disruption
Phishing links exposed in 40 seconds across U.S. sectors, helping SOCs cut MTTR by 21 minutes and triage 94% faster.
Illinois cardiology practice sued over data breach
A class action lawsuit seeks damages for patients after a practice employee fell victim to an email phishing attack.
Attackers conceal phishing lures using invisible Unicode characters
Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters.
1Password is introducing a new phishing prevention feature
An ounce of online prevention.
Baptist Health warns patients of MyChart phishing scam
Baptist Health is warning patients about a widespread phishing scam targeting users of the MyChart medical portal.
Strengthening cybersecurity for nonprofits
Nonprofits face growing cyber threats from phishing, ransomware, and AI-enhanced attacks that can disrupt operations and expose sensitive donor data.
BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials.
30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign
30,000 Facebook accounts hacked via AppSheet phishing emails, exploiting Meta lures, leading to large-scale account theft and resale.
Fake MyChart messages target seniors’ personal, financial information
Keep your audience informed about the MyChart scam that targets seniors with fake Medicare offers and phishing attempts.
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
PREY-0058 uses help desk vishing and AitM token theft to steal data from Microsoft 365 and other SaaS services for extortion.
Health systems warn patients of MyChart phishing scam
Scammers are masquerading as MyChart to trick patients into providing personal information. Epic says that the increase in phishing attempts are just cybercriminals taking advantage of the MyChart brand rather than a security concern.
Chrome adopts what may be the best protection yet against account takeovers
Device-bound session credentials thwart an increasingly common form of account takeover.
Top Weekly Entertainment Picks
October is here, bringing crisp days, apple cider and a full lineup of fall fun. Phish makes its highly anticipated return to Atlantic City, Smithville raises
Gmail change may flood your inbox with political email
Gmail's Verified Sender Program launches September 8, 2026, giving U.S. political committees a more reliable path to your personal email inbox.
TA446 Deploys Leaked DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign
TA446 used leaked DarkSword on March 26 to target iOS devices, prompting Apple alerts and widening mobile espionage risks.
Google Reports State-Backed Hackers Using Gemini AI for Recon and Attack Support
Google finds nation-state hackers abusing Gemini AI for target profiling, phishing kits, malware staging, and model extraction attacks.
Phish Busts A 1992 Move To Open MSG Run
Phish turned the clock all the way back Wednesday night (July 22) at New York's Madison Square Garden.
Latest phishing scam targets Medicare patients, University Health warns
Passkey-themed phishing attacks lead to Microsoft 365 data theft
Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts and steal data from Microsoft 365 services.
AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion
AitM phishing hijacks TikTok Business accounts via Cloudflare Turnstile evasion as SVG malware linked to BianLian targets Venezuela.
MyChart Medicare phishing scam raises concern among Philadelphia health systems
Pa. Attorney General David Sunday is urging residents to beware of unsolicited free offers and rewards.
1Password adds an extra layer of phishing protection
The browser extension now warns you if you're about to paste credentials into a bogus site.
Hotel Wi-Fi phishing attack targets Microsoft logins
Hackers are compromising hotel Wi-Fi gateways to redirect business travelers to fake Microsoft 365 login pages that can bypass multifactor authentication.
Microsoft warns of sophisticated phishing campaign heavily targeting health care organizations
Microsoft Threat Intelligence is warning of a large scale, multistage phishing campaign that disproportionately targeted the health care sector, sending “code of conduct” themed emails to lure users into credential theft and token compromise.
GTA 6 Pre-Order Hype Causes Huge Malware Concern
Grand Theft Auto 6's pre-order concerns have driven a surge in malware, phishing, and scams, it has been revealed.
Fly Phishing: How Business Aviation Can Fight AI-Supercharged Cybertheft
AI is making cybercriminals faster, smarter and harder to detect. Learn how business aviation operators can recognize emerging threats, defend against sophisticated phishing attacks and protect their aircraft, data and organizations.
The fact-checking mandate evolves from politics to personal security
"Online scams, phishing attempts, and fraudulent schemes have grown in both volume and sophistication, creating a new front in the war on falsehoods."
April Las Vegas headliners. David Byrne, Cyndi Lauper, Phish included
Las Vegas is known for its entertainment and people traveling into the Southern Nevada city may be wondering what shows are coming up. Here's the list.
Your iPhone Gets Stolen. Then the Hacking Begins
A bustling underground ecosystem is providing criminals with the tools to unlock iPhones—and wage phishing attacks against their contacts to access bank accounts and more.
4Wall Entertainment Welcomes Trey Kerr As VP Of Music Production
Trey Kerr, longtime broadcast and video director for Phish and recent CEO of Gateway Production Services and Studios, has joined 4Wall as VP of | Trey Kerr, longtime broadcast and video director for Phish and recent CEO of Gateway Production Services and Studios, has joined 4Wall as VP of Music Production.
The Best Of Science Friday, 2025
From fish to Phish, Science Friday has had a big year. Our staff chose their favorite Science Friday stories and projects from 2025.
AI Brings Scamming Against Businesses To A Whole New Level
AI supercharges existing scam categories like impersonation, phishing, and business email compromise, making them hyper-personalized and harder to detect.
Fake Google Security site uses PWA app to steal credentials, MFA codes
A phishing campaign is using a fake Google Account security page to deliver a web-based app capable of stealing one-time passcodes, harvesting cryptocurrency wallet addresses, and proxying attacker traffic through victims' browsers.
Medical equipment supplier’s cloud applications breached, leaking patient data to hackers
AdaptHealth said the intrusion on its network was made possible by compromised credentials phished from one of its vendors. Stolen data may include protected health information, though exactly what is still being determined.
Calendar invite scams are rising, and AI makes them more convincing
Scammers are using calendar invitations to lure workers to phishing sites and fake calls. Here's why the attacks can be so convincing.
Health systems warn of coordinated phishing targeting Epic’s patient portal
It isn’t clear how many scammers are involved in the effort, but health systems across the country are warning their patients to ignore fake messages, many of which offer a “reward” in the form of a “MyChart Medicare Kit.”
Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries
Microsoft disclosed a credential theft campaign targeting 35,000+ users at 13,000+ organizations across 26 countries.
Phishing Alert: 'Business Registry' Email Scam » CBIA
State officials this week warned businesses about a malicious email that claims to be from the "Connecticut Business Registry."
Secretary of state warns about scam email impersonating state business registry
Connecticut Secretary of State Stephanie Thomas is warning businesses across the state about a phishing email impersonating the Connecticut Business Registry, designed to steal sensitive information. Thomas said the “malicious email” appears to come from the Connecticut Business Registry and includes a DottedSign link prompting recipients to view and sign a digital document. The link can trick users into revealing…
The FBI Just Issued an Urgent Warning for Anyone Using Microsoft Teams, Outlook, or OneDrive Over a New Phishing Scheme
A fast-spreading cyberattack kit called "Kali365" allows low-skill scammers to hijack a user's account without ever stealing their password.
Child dies in Detroit house fire; Southfield schools addressing phishing scam; sports and weather
SGMC Health Alerts Patients to MyChart Phishing Scam
SGMC Health is reminding patients to stay alert after reports of fraudulent emails and text messages using the MyChart name to target healthcare consumers nationwide.