GoKawiil
Attackers conceal phishing lures using invisible Unicode characters
(bleepingcomputer.com)
1.
2.
39 New Methods That Compromise Passkey Authentication
(bleepingcomputer.com)
3.
A Beginner's Deep Dive Guide to Entra Passkeys
(news.ycombinator.com)
4.
Hackers abuse Faronics Deploy admin tool to install ScreenConnect
(bleepingcomputer.com)
5.
Brave browser adds email aliases to help users evade tracking
(bleepingcomputer.com)
6.
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
(darkreading.com)
7.
Hackers abuse npm mirrors to host phishing redirect pages
(bleepingcomputer.com)
8.
AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes
(bleepingcomputer.com)
9.
How to compromise your system with a job interview
(news.ycombinator.com)
10.
How MSPs can catch phishing attacks email filters miss
(bleepingcomputer.com)
11.
SilkParasite Threatens Central Asian Orgs With Flurry of RATs
(darkreading.com)
13.
SafePal data breach impacts 39,798 customers, stolen info for sale
(bleepingcomputer.com)
14.
Trezor discloses data breach affecting nearly 14,000 customers
(bleepingcomputer.com)
15.
16.
The Threat Hiding in Your Hiring Process: How Fake Remote Workers Get In
(bleepingcomputer.com)
17.
18.
When Credentials Are No Longer Enough: Device Trust in the AI Era
(bleepingcomputer.com)
19.
Thanks FedEx, This Is Why We Keep Getting Phished (2024)
(news.ycombinator.com)
20.
Web Security is Too Hard
(news.ycombinator.com)
21.
Web security is too hard
(news.ycombinator.com)
22.
Security Is Hard, Y'all
(news.ycombinator.com)
23.
Phishing service spoofs RingCentral to steal Microsoft 365 accounts
(bleepingcomputer.com)
24.
Device Code Phishing Up 1,500% in 2026; Vishing Doubles
(darkreading.com)
25.
Anti-fraud tools can't keep pace with robocall scammers
(news.ycombinator.com)
26.
Anti-fraud tools can't keep pace with scammers exploiting cheap internet calling
(news.ycombinator.com)
27.
Ask HN: Crooked Timber showed showed me a virus captcha, What now?
(news.ycombinator.com)
28.
DMARC has been public since 2012 but most company domains still don't enforce it
(news.ycombinator.com)
29.
DMARC Has Been Public Since 2012. 68.4% of Domains Still Don't Enforce It
(news.ycombinator.com)
30.
Apple @ Work Podcast: Remember Postini?
(9to5mac.com)