Microsoft will roll out AI-powered, context-aware phishing detection in Teams starting in early November 2026, with general availability expected worldwide by mid-December. The feature analyzes conversation context—particularly in external first-contact chats—to spot phishing, impersonation and social engineering attempts without relying solely on malicious links or files, and Microsoft says it won't retain message content for training or other purposes.
bleepingcomputer.com
· 2026-10-23
A Chinese couple, Ye Jiafeng and Shen Qi, both 39, have been arrested in Japan after police say they hid a computer behind a fridge in a hotel room to send roughly 480,000 phishing emails impersonating credit card companies. The machine, connected to hotel Wi-Fi since May 2025 and controlled remotely, held about 2.4 million email addresses when discovered. The pair also face charges over separate stolen credit card purchases, with 74 phones and 10 million yen in fraudulent spending reportedly linked to their home.
tomshardware.com
· 2026-10-22
Google has updated Chrome to flag websites it deems 'suspicious,' not just those already confirmed as dangerous. The new alerts, powered partly by Gemini AI analysis of a site's content, branding and domain reputation, let users choose to leave the page, mark it safe, or continue browsing. The update also adds protections against fake antivirus update prompts and ClickFix-style social engineering attacks.
zdnet.com
· 2026-10-21
Optiv has introduced CyberBOT, a free cybersecurity education program aimed at classrooms, nonprofits and community organizations. The program consists of five interactive sessions covering threat actors, email security, password practices, social media privacy and mobile device protection, built around hands-on activities like games, posters and group exercises.
darkreading.com
· 2026-10-21
Push Security reports that ClickFix, a phishing technique that tricks users into running malicious commands, accounted for an average 52% of its detections through Q2 2026, rising to 67% in August. Newer variants impersonate AI tools like Claude and ChatGPT, with ANY.RUN linking over 1,200 sandbox analyses to fake AI campaigns between April and October 2026, 81% of which impersonated Claude or ChatGPT/Codex.
bleepingcomputer.com
· 2026-10-21
Google is rolling out a new Chrome safety feature that warns users before they visit sites flagged as potentially malicious, available when Enhanced Protection is enabled. The warnings come in two tiers: a dismissible pop-up for 'suspicious' sites with a lower-confidence risk assessment, and a near full-screen red alert for 'dangerous' sites deemed high-risk. Google also upgraded its Gemini-powered scam detection for users with Enhanced Protection turned on.
theverge.com
· 2026-10-20
A QR code hides its destination until you have already opened it. susQR is a free web tool that checks the link first, and it is worth keeping one tap away.
susqr.com
· 2026-10-19
Quishing works because a QR code gives you nothing to judge before you commit. Here is what the scams look like in practice and the habits that defuse them.
gokawiil.com
· 2026-10-19
Cybersecurity firm Malwarebytes reports that AI agents handling email can be manipulated by prompt injection attacks, where hidden instructions invisible to humans are embedded to hijack the assistant's behavior. The company says this differs from traditional phishing because the AI, not a person, is being deceived, and current fixes rely on filtering hidden content before it reaches the model.
futurism.com
· 2026-10-17
Security firm Sublime has reported a surge in phishing attacks delivered via calendar invitations (ICS files) rather than traditional email, warning that such invites can bypass spam filters even when the accompanying email is blocked. The scams typically mimic legitimate meeting invites or payment notices, directing victims to fake login pages or malware disguised as Microsoft, Google, or PayPal services. Sublime says ICS phishing incidents rose roughly 33,000% between May and September, with attacks doubling or tripling month over month.
techspot.com
· 2026-10-17
Any.Run researchers studied malicious campaigns impersonating AI tools and found 1,258 incidents tied to fake Claude and ChatGPT lures over a six-month period on its platform. Attackers used SEO poisoning, malicious ads, fake download pages, and AI-themed artifacts, with Claude impersonated in 60% of cases and ChatGPT/Codex in 33%. Many attacks relied on tricking an employee into running an install command, launching a fake installer, or signing into a spoofed login window.
darkreading.com
· 2026-10-16
Proofpoint researcher Selena Larson told Dark Reading that threat actors like TA4903 and TA2725, once sophisticated operations, have grown less effective after adopting AI tools in their attack chains. She contrasted this with widely cited survey data claiming 84% of ransomware attacks now involve AI, arguing that such headline figures overstate AI's actual impact on attacker capability.
darkreading.com
· 2026-10-15
GoKawiil