#emails


Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

Aug 8, 2026 // 01:07

Cybersecurity researchers have called attention to an active “widespread email-driven phishing campaign” that employs adversary-in-the-middle (AitM) techniques to take control of Microsoft 365 accounts with […]

Real emails, hijacked payments: Two H1 2026 attack chains

Aug 8, 2026 // 01:05

Gen Threat Labs followed two H1 2026 campaigns where attackers used legitimate accounts, browser settings and blockchain data as part of the attack path. The […]

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Jul 12, 2026 // 15:38

Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution. […]

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

Jun 15, 2026 // 22:49

A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Microsoft 365 Copilot […]

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails

Jun 15, 2026 // 22:49

A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive research and defense […]

Robinhood account creation flaw abused to send phishing emails

Apr 28, 2026 // 02:16

Online trading platform Robinhood’s account creation process was exploited by threat actors to inject phishing messages into legitimate emails, tricking users into believing their accounts […]

Apple account change alerts abused to send phishing emails

Apr 19, 2026 // 19:38

Apple account change notifications are being abused to send fake iPhone purchase phishing scams within legitimate emails sent from Apple’s servers, increasing legitimacy and potentially […]

n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails

Apr 17, 2026 // 13:14

Threat actors have been observed weaponizing n8n, a popular artificial intelligence (AI) workflow automation platform, to facilitate sophisticated phishing campaigns and deliver malicious payloads or fingerprint devices […]

n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails

Apr 15, 2026 // 20:11

Threat actors have been observed weaponizing n8n, a popular artificial intelligence (AI) workflow automation platform, to facilitate sophisticated phishing campaigns and deliver malicious payloads or fingerprint devices […]

Canadian Tire Data Breach Update: 38 Million Emails and Personal Records Exposed

Feb 28, 2026 // 15:21

Canadian Tire Corporation (CTC) identified a significant data breach affecting an e-commerce database, which has since been linked to approximately 38.3 million unique accounts. Key Breach Details […]