Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

New Phishing Kits Use Open-Source Tools to Bypass MFA

Researchers at Lexfo are tracking three sophisticated phishing kits that were built using open-source components, primarily based on the publicly available adversary-in-the-middle (AiTM) attack framework “Evilginx.” The phishing kits are designed to proxy “live Microsoft 365 authentication sessions to capture session cookies and OAuth tokens in real time, bypassing MFA entirely.” The kits also use AI to generate personalized phishing lures with a variety of different delivery metho

How to Protect Yourself from Online Scams and Cyber Threats

The internet has become a huge part of our daily lives, from banking and shopping to connecting with friends and family. While this digital integration is incredibly convenient, it also exposes us to more and more sophisticated online scams. To protect your digital assets, you need to stay alert and understand the threats out there. This guide offers practical steps to help you navigate the online world safely and avoid common problems.

Simple SPF Record Generator To Improve Email Deliverability

Email deliverability plays a vital role in ensuring your messages reach the intended recipients instead of being filtered into spam folders. One of the most effective ways to protect your domain and improve inbox placement is by publishing a properly configured Sender Policy Framework (SPF) record. An SPF record specifies which mail servers are authorized to send emails on behalf of your domain, helping prevent email spoofing, phishing attacks, and unauthorized use of your domain name.

Securing Digital Identities Against Emerging Cyber Threats

As more of our lives move online, from banking and shopping to using government services, our digital identity has become incredibly valuable. Protecting it isn't just about using a strong password anymore. Cybercriminals are using more advanced tactics, which means security measures constantly need to evolve to keep up. This includes developing better threat detection systems, using multi-factor authentication, and adding subtle protections like browser checking to confirm who a user is.

AI-Generated Phishing Achieves a 54% Click Rate

For years, phishing has worked for one simple reason: it exploits the weakest link, the user. The defensive strategy has followed the same formula: better email filtering, more user awareness, and an extra layer of authentication. It wasn't perfect, but it was a workable balance.

From Inbox to Encryption: How Ransomware Delivery Has Evolved

Ransomware and phishing have always been linked, but the old model was blunt: a phishing email carried the payload, the recipient opened it, encryption followed within hours. What the threat looks like in 2026 is fundamentally different. The email that starts the chain carries nothing dangerous. Instead, the ransomware arrives weeks later, launched by a completely different attacker. So, what can organizations do to protect themselves from these new threats?

New Phishing Tools Enable Attackers to Easily Bypass Multifactor Authentication

Researchers at ReliaQuest are tracking two new phishing toolkits that are designed to bypass multifactor authentication (MFA). The first tool, called “Jalisco,” is a device code phishing platform that pairs with AI-powered phishing-as-a-service platforms like EvilTokens to provide fresh OAuth codes in real time.