phishing — Cybersecurity News

UAT-11985 Exploits Fake Event Invites to Phish Taiwan Research Affiliates via Google AitM

RedSide Security October 17, 2026 Cyber Attacks 36 views

UAT-11985 APT targets Taiwan research affiliates with fake event invites leading to Google AitM phishing that bypasses MFA and steals session cookies.

Wazza Phishkit: A New Generation of Phishing Infrastructure Targeting Banks, Governments, and Manufacturers

RedSide Security October 08, 2026 Cyber Attacks 112 views

ANY.RUN has uncovered Wazza, a new phishing kit that adds traffic filtering, session management, and anti-analysis controls to target banks, governments, and manufacturers across the US, EU, and Australia.

Fake AI Ad Portals Target Business Accounts, Steal Credentials and MFA Codes

RedSide Security October 06, 2026 Cybercrime 52 views

A human-operated phishing platform is impersonating advertising products for ChatGPT, Gemini, Claude, and other AI chatbots to harvest business credentials and MFA codes.

FIFA World Cup 2026 Fans Targeted by Massive Wave of Ticket Scams, Malware, and Phishing Attacks

RedSide Security June 05, 2026 Cybercrime 241 views

Cybercriminals are aggressively targeting FIFA World Cup 2026 fans through thousands of fake websites, phishing campaigns, malicious streaming applications, and banking malware. Security researchers warn that ticket fraud, account takeovers, identity theft, and financial scams are expected to surge as the tournament approaches.

Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions

RedSide Security May 27, 2026 CVE 202 views

GitHub Breached - Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos

RedSide Security May 20, 2026 Data Leaks & Breaches 253 views

GitHub is investigating unauthorized access to its internal repositories following a supply chain attack linked to the threat actor **TeamPCP**, who reportedly listed GitHub source code and internal data for sale on a cybercrime forum. The incident is part of an ongoing malware campaign targeting open-source ecosystems, including a compromised Microsoft Python package and a self-replicating infostealer known as Mini Shai-Hulud.

Lazarus Group’s ‘Graphalgo’ Fake Recruiter Campaign Exploits GitHub, npm, and PyPI to Distribute Malware

RedSide Security February 12, 2026 Cybercrime 387 views

Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

RedSide Security January 25, 2026 Cybercrime 220 views

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

RedSide Security January 21, 2026 Cybercrime 276 views

Microsoft Warns Misconfigured Email Routing Can Enable Internal Domain Phishing

RedSide Security January 08, 2026 Cybercrime 215 views