نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
LevelBlue SpiderLabs

BlackApex, SPY, and Counting: The Emerging Wave of Vibe-Coded Phishing Kits

Anyone who has signed in to a streaming app on a smart TV by typing a short code into a phone has used a device code flow. Microsoft supports the same mechanism for Microsoft 365 accounts, and attackers have turned it against the people it was designed to help. Through 2026, ready-made Phishing-as-a-Service (PhaaS) kits such as EvilTokens, Kali365, and Tycoon2FA have put the technique within reach of almost anyone wi…

فیشینگ
خواندن متن کامل در LevelBlue SpiderLabs درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
SecurityWeek

Passkeys Are Better Than Passwords. But They Are Not Enough.

For decades, passwords have been one of cybersecurity’s most persistent weaknesses. Users forget them, reuse them, share them, and surrender them to convincing phishing sites. Attackers steal credentials, automate credential stuffing, and increasingly use artificial intelligence to make social engineering more effective. What are passkeys? Passkeys promise to eliminate much of this problem. Built on […] The post Pass…

فیشینگ امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین
منبع
CSO Online

We are not ready for what AI has done to red teaming

Something shifted in offensive security over the last eighteen months that most organizations haven’t fully absorbed yet. It isn’t that attackers got smarter. It’s that the economics of attack changed entirely — and those of us who run red teams have had a front-row seat to the transformation. The conversation about AI in cybersecurity tends to fixate on defense: better anomaly detection, faster triage, and AI-assist…

آسیب‌پذیری و روز صفر فیشینگ امنیت هوش مصنوعی
منبع
Help Net Security

Fake IT help desk callers got by on little more than names and email addresses

Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos IR) found across several engagements. In one case, that access ended in ransomware. They knew names and email addresses “The attackers appeared to know employee names and email addresses, as they contacted…

بدافزار و آلودگی فیشینگ باج‌افزار
منبع