GoKawiil
Tech News
A cybersecurity vendor is promoting 'Identity Telemetry,' a real-time monitoring approach meant to complement traditional Identity Governance tools like role-based access and periodic reviews. The pitch argues that static governance policies alone cannot detect breaches as they happen, and organizations need continuous visibility into identity events to catch active threats.
Criminals in Portugal, France and Germany have been mailing counterfeit credit cards and letters warning recipients that their card is expiring, urging them to scan a QR code to "activate" a replacement. The code leads to a fraudulent banking site that harvests login credentials, giving attackers access to victims' real accounts. Some fake cards even bear the recipient's actual name to increase credibility, according to digital banking advisor Georg Hauer.
Asus disclosed that a breach affected part of its eShop platform, exposing customer contact details and order records, though it says no payment or financial data was compromised. The company has not specified how many customers were affected, which regions were involved, or how long the breach lasted, and says it has contained the incident and is investigating.
A wave of phishing emails impersonating invitation platforms like Paperless Post and Evite has been spreading contacts' names to trick recipients into entering email or phone credentials to view fake event details. Journalist Eric Umansky was among early victims, waking to messages asking about a party he never planned, despite having two-factor authentication enabled on his account. The FTC issued a consumer alert in May after receiving a rise in reports of the scam.
Security firm Zenity disclosed three vulnerabilities, collectively named 'Salesbleed,' in Salesforce's Agentforce AI platform. The flaws let attackers plant malicious prompts inside Web-to-lead forms, which AI agents then process, allowing gradual extraction of internal data and, when combined with normal Agentforce workflows, the ability to send phishing messages to employees through their trusted Slack channels.
Malwarebytes reported a phishing campaign that impersonates a promotion from Anthropic, falsely claiming to offer 10,000 users a free month of Claude Max to mark 100 million users. Victims who click through are directed to a fake Google login page designed to steal their credentials, using a convincing 'browser-in-a-browser' overlay that mimics a real Google sign-in window.
Microsoft has shut down EvilTokens, a subscription-based cybercrime service sold via Telegram that used AI tools to break into Microsoft accounts and mine stolen inboxes for payment details and business contacts. The company said the service compromised roughly 12,000 accounts across 10,000 organizations by abusing Microsoft's device-code sign-in process, and it seized 50 websites and 150 domains via legal action. UK police separately arrested two men suspected of running the operation.
Microsoft and partners including Cloudflare, Coinbase, OpenAI, SpyCloud, TRM Labs and Health-ISAC disrupted EvilTokens, a phishing-as-a-service platform that used AI to scan compromised inboxes and craft tailored lures. The operation had compromised over 12,000 inboxes across more than 10,000 organizations worldwide, spanning sectors like healthcare, finance and higher education. The takedown seized 50 sites and disabled 150 domains, and UK police arrested two men, aged 32 and 38, after Microsoft shared intelligence with the Metropolitan Police's cybercrime unit.
Microsoft and partner organizations dismantled EvilTokens, a phishing-as-a-service operation that used AI tools and device code phishing to compromise over 12,000 inboxes across more than 10,000 organizations. Following a US court-enabled legal action, Microsoft seized 50 websites and disabled over 150 additional domains linked to the operators, tracked as Storm-2992. The UK's Metropolitan Police also arrested two men connected to the scheme this month; both were released on bail pending further investigation.
Microsoft announced it coordinated an industry-wide disruption of EvilTokens, a subscription phishing service sold via Telegram since February that used an AI chatbot to help criminals analyze compromised inboxes and craft convincing fraud emails. The platform compromised 12,000 accounts across 10,000 organizations worldwide, mostly in the US, and Microsoft seized 50 websites and 150 domains as UK police arrested two suspects.
In the latest Apple @ Work episode, host discusses tailored phishing simulations with Samantha Schwartz and Jack Hirsch of Sublime Security. The conversation focuses on how simulated phishing tests are evolving to reflect increasingly sophisticated, AI-generated attack techniques. The episode is sponsored by Mosyle, which markets itself as a unified Apple device management platform used by over 45,000 organizations.
Security firm Sublime found that malicious calendar invites sent via email, known as ICS phishing, have surged dramatically, rising 282% in June, 338% in July, and 1,216% in August, with a projected 2,852% jump in September. These fake invites exploit a default feature in Outlook, Gmail, and Apple Mail that auto-adds ICS files to a user's calendar before they accept or decline them.