Social Media Ideas for Business Email Compromise

Business Email Compromise: Reducing Risk and Litigation Exposure

Business email compromise (“BEC”) attacks are one of the most significant cyber threats facing companies today, and the latest federal data show that the problem is intensifying. I...

The Impact of Email Authentication on Corporate Security and Branding

Email remains one of the most essential communication tools in the corporate world. Companies rely on email for internal communication, customer outreach, marketing campaigns, and...

Help! My best customer just received an e-mail from me, I didn’t send

In association with BeSecure Online Your biggest client just received an e-mail from you that you never sent. It looked like you. It came from your domain. Somewhere between your o...

Elon Musk, the IRS, and Your Bank Account: Anatomy of a Multi-Stage Financial Scam

This report analyzes a sophisticated IRS-themed phishing campaign that uses Elon Musk and a fake “Dogecoin Initiative” to lure victims with a promised $5,000 tax refund, then funne...

Embedded Threats: How Attackers Weaponize Legitimate Emails

Threat actors are increasingly weaponizing legitimate business emails by embedding malicious links, phone scams, and spoofed branding into customizable text fields on trusted platf...

CyberheistNews Vol 16 #26 A New Extortion Scam Uses IT Impersonation to Breach Organizations

Attackers Exfiltrate AnyDesk Configuration Data via Blat SMTP in Aerospace Phishing Campaign

A targeted spear-phishing campaign that configures AnyDesk for silent, persistent remote access and exfiltrates its configuration using the Blat SMTP utility. The campaign uses an...

Fake Invitation Phishing Campaign Steals Credentials From U.S. Organizations

A large-scale phishing campaign leveraging fake event invitations is actively targeting U.S. organizations, combining credential theft, OTP interception, and remote access tool abu...

Americans Lost $900 Million to AI-Powered Scams Last Year

The US Federal Bureau of Investigation (FBI) warns that Americans lost just under $900 million to AI-powered scams in 2025, Malwarebytes reports. Total reported losses to scams las...

Stock Exchange Executive’s Outlook Targeted in Credential Theft Attack

A prolonged and highly targeted espionage campaign has been uncovered involving the compromise of a senior executive’s Microsoft Outlook account at a major global stock exchange, h...

Cyber Fraud Limits: Read the Cyber Policy Carefully Before the Cyber Thieves Read Your Email

Cyber criminals do not need a crowbar, a ski mask, or a getaway car. They need a believable email, a rushed employee, and a business that trusts a payment instruction without indep...

Hackers Spread VIP Keylogger via Fake Business Emails

Hackers are actively deploying VIP Keylogger through phishing emails disguised as routine business documents, using multi‑layered loaders, steganography, and in‑memory executio...

Cybersecurity Threat Advisory: EvilTokens targets Microsoft 365

Recent research describes a phishing kit called EvilTokens. It is actively targeting organizations in the U.S. and Europe, especially those in finance and other high-value sectors....

Stolen Hotel Reservation Data Used in Targeted Phishing Scams

QR code email scam targets employee reviews

A phishing email disguised as an HR performance review uses a QR code to trick victims. Learn how to spot this quishing scam and stay protected.

Workplace Scams Targeting Canadians in 2026 to Beware Of

From fake CEO emails to gift card “favours” — here’s how to spot the scams quietly hitting offices across the country. Have you ever received a random text or email from your boss...

Scam Emails Impersonating the USPTO Target New Trademark Filings

Businesses Offered Guidance on Fraud Threats

VIENNA, Ohio – Molly Maids owner Katie Burkey knows what it is like to find your business accounts in someone else’s control. Her signature was sold on the dark web, and multiple u...

New Ghost Phishing Wave Is Breaking Traditional Email Security

A recent EvilTokens campaign targeting businesses across the US and Europe is exposing a new email security blind spot. This “ghost phishing” technique keeps the malicious page hid...

Cybersecurity Threat Advisory: Exchange on-premise OWA vulnerability exploited

A Microsoft Exchange Server Outlook Web Access (OWA) spoofing vulnerability, tracked as CVE‑2026‑42897, is actively being exploited in the wild. This issue affects Exchange Server...

Microsoft Exchange Server 0-Day Vulnerability Exploited in Attacks Using Weaponized Email

Microsoft has confirmed active exploitation of a new zero‑day spoofing flaw in on‑premises Exchange Server, tracked as CVE‑2026‑42897. The flaw allows attackers to execute arbitrar...

Phishing Campaign Impersonates Interpol to Deliver Ransomware

A phishing campaign is targeting small businesses across Europe, Asia, the Middle East, and the United States with emails that impersonate Interpol’s cybercrime investigation unit,...

Home Ministry’s cyber security agency cautions against ‘Boss Scam’

Home Ministry warns against a cybercrime targeting executives via malicious emails and WhatsApp messages

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial int...