After examining this email, we determined it is a phishing scam. The message poses as an automated security alert from cPanel, falsely claiming that a recent security breach triggered automatic two-factor authentication on the recipient's webmail account. The goal is to direct recipients to a fake

We have examined this email and concluded it is a scam. The message is designed to look like an urgent security alert from the recipient's own IT department, claiming their workstation has been infected with a trojan and their network access suspended. Rather than linking to a fake website, it dir

We have examined this email and concluded that it is a scam. The message is disguised as an automated maintenance alert from a fictitious mail service, urging recipients to access a fake "official mail portal." The scammers behind it aim to steal email account credentials from unsuspecting users.

We have inspected this email and determined it is a phishing scam. It poses as an official alert from the United States Postal Service regarding a POBOL PO Box membership and is designed to steal the recipient's email account login credentials. This email should be ignored. The email prese

We have examined this email and concluded that it is a phishing scam. The message is presented as a request to review a report and includes a link that supposedly opens a PDF document. In reality, the link leads to a fake sign-in page built to steal email account login credentials. This email shou

October 08, 2026

Researchers at Lumen's Black Lotus Labs have uncovered a cryptomining campaign that uses a new malware strain, PoeLLM, to hijack exposed AI servers. The operation turns compromised machines into cryptocurrency miners, forcing them to scan the internet and launch exploits against new victims. Accord

October 06, 2026

A China-linked ransomware operation known as Warlock has breached a water utility, a telecommunications provider, a regional government body, and a university. The attackers gained initial access to each network by exploiting vulnerabilities in on-premises Microsoft SharePoint servers, a tactic the

September 22, 2026

Spain's Data Protection Agency has confirmed the country's first documented personal data breach involving an autonomous artificial intelligence agent. The Agencia Española de Protección de Datos, known as AEPD, disclosed the incident in a blog post published on September 14, 2026. An unnamed orga

September 17, 2026

Cybercriminals compromised the official, verified HBO Max Reddit account and used it to distribute malicious advertisements across the platform. Security researchers say the attackers deployed 108 malicious ads over roughly 48 hours, targeting both Windows and macOS users. The campaign relied on the

September 15, 2026

Security researchers have identified a new and dangerous strain of Android malware called Mantax Otax. The malware merges ransomware and spyware capabilities into a single, highly aggressive attack tool. Indonesian threat actors reportedly operate the campaign, targeting victims with encryption, dat