Hackers Use Fake Google Calendar Invitations to Steal Business Accounts and Sensitive Information

Cybercriminals are using fake Google Calendar invitations to trick employees into giving away access to their Google accounts. A recent phishing campaign has been targeting businesses by sending invitations that appear to come from people or organizations the recipients already know. Once someone clicks on the invitation and enters their login information, attackers can steal […]

Critical Zoom Workplace Vulnerability Could Allow Remote Privilege Escalation on Windows Systems

Zoom has released important security updates after discovering two vulnerabilities in its Zoom Workplace application for Windows computers. One of these security issues is considered critical because it could allow hackers to gain greater control over an affected computer without needing a username, password, or permission from the user. The two vulnerabilities, identified as CVE-2026-108186 […]

American Organizations Targeted in Skyw4lker Phishing Campaign That Steals Microsoft 365 Accounts

American businesses and organizations are facing a phishing campaign known as Skyw4lker, which uses convincing business documents and legitimate Microsoft login systems to gain access to company accounts. The campaign has focused on organizations in manufacturing, technology, and healthcare, using methods that can make the attacks difficult to recognize. Instead of relying on fake login […]

Hackers Used a Cisco Security Flaw to Install Malware Designed to Steal Encryption Keys

A serious security weakness in Cisco networking equipment has allowed hackers to break into systems that manage connections between different locations of an organization. Once inside, the attackers installed malicious software designed to steal the digital keys that protect information traveling between those locations. The discovery raises concerns for businesses, government agencies, and other organizations […]

Fake AI Scams Are Spreading Across U.S. Businesses, Putting Accounts and Sensitive Data at Risk

Cybercriminals are increasingly pretending to be popular artificial intelligence (AI) tools to trick employees into downloading harmful software, giving away passwords, and exposing business accounts. These scams often imitate familiar services such as ChatGPT, Claude, Google Gemini, and Microsoft GitHub Copilot. According to cybersecurity research from ANY.RUN, 1,258 public security investigations were linked to fake […]

Microsoft Disrupts Three Phishing Scams Linked to More Than One Billion Fraudulent Messages

Microsoft and its partners have taken action against a major cybercrime network responsible for helping criminals send more than one billion fraudulent emails and text messages since January 2026. The messages targeted more than 75,000 organizations worldwide, including businesses, healthcare providers, and financial institutions. The operation focused on shutting down three phishing tools known as […]