Help Net Security جمعه ۸ آبان ۱۴۰۵ · ۱۰:۰۰

Fake IT help desk callers got by on little more than names and email addresses

Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos IR) found across several engagements. In one case, that access ended in ransomware. They knew names and email addresses “The attackers appeared to know employee names and email addresses, as they contacted…

Malware & Threats Phishing Ransomware Incident Response & Forensics

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Help Net Security جمعه ۸ آبان ۱۴۰۵ · ۰۹:۳۰

What exactly is ISOC? And what does it mean for you?

Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly evolving threat landscape is forcing a shift in industry logic that is reflected in the emergence of this new category. For years, SIEM has dominated as an all-encompassing category. But SIEMs are no longer sufficient to collect data, support investig…

Incident Response & Forensics

Source

Help Net Security جمعه ۸ آبان ۱۴۰۵ · ۰۹:۰۰

Scammers rebuild fake shopping sites within hours of a takedown

One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address. The sites reused HTML, JavaScript and payment-page designs intended to harvest card numbers, expiry dates and security codes, according Akamai’s Fraud and Abuse Report 2026. A ticket scam used a similar setup. Several websites impersonating official ticketing and hospitality portals for a major sporting event were designed to r…

Programming & Languages Identity & Access Security

Source

Help Net Security جمعه ۸ آبان ۱۴۰۵ · ۰۸:۳۰

Smart TVs can harbor unpatched security flaws and track what you watch

Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender’s 2026 IoT Security Landscape Report. The analysis covered approximately 10.4 million protected home routers between January and September. Televisions represented 22.7% of vulnerability observations, followed by smart plugs at 22.4% linked with a known software flaw. Top vulnerable…

Vulnerabilities & Zero-Day IoT & OT Security

Source

CSO Online جمعه ۸ آبان ۱۴۰۵ · ۰۴:۲۵

PHP2Shell plus Fragnesia: A dangerous new route from web server to root

The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of a high severity Linux kernel privilege escalation flaw that attackers are chaining with PHP2Shell bugs in the wild. Identified as CVE-2026-46300, it could allow attackers to run malicious code…

Malware & Threats Vulnerabilities & Zero-Day Data Breach

Source