Voice-based phishing was at the root of multiple attack sprees Mandiant responded to last year, reflecting a concerning shift in tactics.

Kwamaine Jerell Ford allegedly impersonated an adult film star and tricked his high-profile victims into sharing their iCloud credentials and MFA codes under false pretenses.

The average time from intrusion to network movement in 2025 was 29 minutes, a 65% increase in speed from the year prior.

Palo Alto Network’s incident response firm said identity-based attacks are exploding as poor security controls stretch across a widening mosaic of integrated tools and systems.

Officials accused the teenage boy of working with Scattered Spider, which attacked MGM Resorts and Caesars Entertainment in 2023.

Unit 42 said social engineering — the method of choice for groups as diverse as Scattered Spider and North Korean tech workers — was the top initial…

Google Threat Intelligence Group said about 20 organizations have been hit by a cybercrime group it tracks as UNC6040.

The 20-year bureau pro wants to see what it’s like to fight ransomware from the private sector.

The latest smishing scam follows a familiar process as ones the industry has seen over the past decade.

As enforcement and attribution have improved, scammers are ditching static infrastructure and drawn-out schemes for shorter campaigns that use disposable assets.