Browsing: phishing

Free Mobile, one of France’s main cellular providers, was fined €27 million by France’s data protection regulator, the CNIL, in January over failures to protect customer data. The October 2024 breach allowed an unauthorized party to access sensitive customer records, including bank account details and login information. Since the breach, we’ve seen many poorly written…

Hackers have seized on a data breach at digital financial firm Revolut to try and harvest more account information from customers

Crypto phishing gives itself away at almost the same point every time: in what the message wants from you. A genuine crypto exchange never asks for your seed phrase, never for your private key and never for the code in your authenticator app. Any email, text message or social media message that asks for one…

Only days after Revolut acknowledged that it disclosed sensitive customer records to an unauthorized party, affected customers are receiving phishing texts. However, we don’t know yet if the phishing texts are linked to the breach.

Phishing attempts are increasingly using familiar names, services and notification formats to make malicious emails more difficult to recognize. Seton Hall’s IT Security team recently identified a phishing campaign targeting the University community that demonstrates how attackers use this approach to impersonate trusted technology and prompt recipients to take action. 

Cybercriminals linked to several prominent data-extortion operations are exploiting confusion surrounding passkeys and single sign-on systems to compromise enterprise Microsoft accounts, establish persistent access and systematically steal sensitive information from cloud services.

Microsoftdescribes this attack, which has been observed since May 2026, as one that starts with identity-focused social engineering. “The threat actors call or message a user’s personal phone number, while claiming to be from the organization’s IT help desk and urging them to immediately update their passkey, multi-factor authentication (MFA), or single sign-on (SSO) configuration…

Trezor, the crypto hardware wallet maker owned by SatoshiLabs, confirmed on September 11, 2026 that attackers breached its third-party email marketing provider, Brevo, and used that access to blast phishing emails to roughly 347,000 addresses pulled from its opt-in newsletter database. The company says about 2,500 people clicked the malicious link before it disabled the…

Older Australians remain the most exposed group despite a significant drop in overall scam losses

IEH Corporation is a U.S. defense and aerospace manufacturer based in Brooklyn, New York. The company specializes in high-reliability electrical connectors, particularly hyperboloid connectors used in demanding military and aerospace environments. Its connectors are used in systems including rotary-wing aircraft, THAAD and Patriot missile systems, fighter aircraft, airborne radar systems, satellites and spacecraft, military radios,…