Email security

Attackers target password spraying attacks on Microsoft 365 accounts to run account takeovers.

Infiltration of the company's information systems, including its email platform, enabled the misdirection of vendor payments, said NioCorp in a filing with the Securities and Exchange Commission.

Here are five other trends in addition to AI undermining email security.

The first day of ThreatLocker's annual conference featured controversial opinions and tales from the dark side of the web.

Kimsuky — also known as APT43, Black Banshee, TA427, and Velvet Chollima — commences intrusions with the distribution of phishing emails with a ZIP archive attachment containing an LNK file seemingly spoofing legitimate documents.

Threat actors exploiting Salesforce's automated mailing service sent malicious emails with fake Facebook logos warning of copyright violations and account restrictions should recipients fail to contest the claim using a link that redirects to a phony Facebook support page seeking their credentials.

DOJ says the joint action with the Dutch National Police took down 39 domains of the Pakistani group Saim Raza.