We have inspected this email and determined it is a phishing scam. It is disguised as an automated storage alert from cPanel Roundcube webmail, urging recipients to log in through a fraudulent link. Its purpose is to steal email login credentials. This email should be ignored and deleted without c

We have examined this email and determined that it is a phishing scam. The message impersonates ShareFile, a legitimate secure file-sharing service, and falsely claims a purchase order document has been shared with the recipient. It is designed to steal email login credentials and should be ignore

We have inspected this email and determined it is malspam. The message poses as a payment receipt notification and contains a link leading to a fraudulent webpage impersonating Adobe Acrobat, which delivers a malicious remote access trojan to the victim's device. This email should be ignored and d

We have inspected this email and determined that it is a phishing scam. Disguised as an urgent storage warning from a "System Administrator," it falsely claims the recipient's webmail account is about to be deleted and urges them to upgrade their plan. The email directs users to a fake login page

We have examined this email and determined that it is a phishing scam. The message poses as an urgent administrative notification from the recipient's email service provider, falsely claiming that DNS activation is needed to restore normal message delivery. It is designed to steal email login cred

October 08, 2026

Researchers at Lumen's Black Lotus Labs have uncovered a cryptomining campaign that uses a new malware strain, PoeLLM, to hijack exposed AI servers. The operation turns compromised machines into cryptocurrency miners, forcing them to scan the internet and launch exploits against new victims. Accord

October 06, 2026

A China-linked ransomware operation known as Warlock has breached a water utility, a telecommunications provider, a regional government body, and a university. The attackers gained initial access to each network by exploiting vulnerabilities in on-premises Microsoft SharePoint servers, a tactic the

September 22, 2026

Spain's Data Protection Agency has confirmed the country's first documented personal data breach involving an autonomous artificial intelligence agent. The Agencia Española de Protección de Datos, known as AEPD, disclosed the incident in a blog post published on September 14, 2026. An unnamed orga

September 17, 2026

Cybercriminals compromised the official, verified HBO Max Reddit account and used it to distribute malicious advertisements across the platform. Security researchers say the attackers deployed 108 malicious ads over roughly 48 hours, targeting both Windows and macOS users. The campaign relied on the

September 15, 2026

Security researchers have identified a new and dangerous strain of Android malware called Mantax Otax. The malware merges ransomware and spyware capabilities into a single, highly aggressive attack tool. Indonesian threat actors reportedly operate the campaign, targeting victims with encryption, dat