CyberPulse Cybersecurity News, with Source Links
FA
LevelBlue SpiderLabs

BlackApex, SPY, and Counting: The Emerging Wave of Vibe-Coded Phishing Kits

Anyone who has signed in to a streaming app on a smart TV by typing a short code into a phone has used a device code flow. Microsoft supports the same mechanism for Microsoft 365 accounts, and attackers have turned it against the people it was designed to help. Through 2026, ready-made Phishing-as-a-Service (PhaaS) kits such as EvilTokens, Kali365, and Tycoon2FA have put the technique within reach of almost anyone wi…

Phishing
Read the full article at LevelBlue SpiderLabs Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
SecurityWeek

Passkeys Are Better Than Passwords. But They Are Not Enough.

For decades, passwords have been one of cybersecurity’s most persistent weaknesses. Users forget them, reuse them, share them, and surrender them to convincing phishing sites. Attackers steal credentials, automate credential stuffing, and increasingly use artificial intelligence to make social engineering more effective. What are passkeys? Passkeys promise to eliminate much of this problem. Built on […] The post Pass…

Phishing AI Security AI & Machine Learning
Source
CSO Online

We are not ready for what AI has done to red teaming

Something shifted in offensive security over the last eighteen months that most organizations haven’t fully absorbed yet. It isn’t that attackers got smarter. It’s that the economics of attack changed entirely — and those of us who run red teams have had a front-row seat to the transformation. The conversation about AI in cybersecurity tends to fixate on defense: better anomaly detection, faster triage, and AI-assist…

Vulnerabilities & Zero-Day Phishing AI Security
Source
Help Net Security

Fake IT help desk callers got by on little more than names and email addresses

Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos IR) found across several engagements. In one case, that access ended in ransomware. They knew names and email addresses “The attackers appeared to know employee names and email addresses, as they contacted…

Malware & Threats Phishing Ransomware
Source