Pulling the latest reports from PhishTank, OpenPhish, URLhaus, FTC, FBI IC3, AARP, and partner RSS feeds. Hold tight — this usually takes a second or two.
Aggregated from PhishTank, OpenPhish, URLhaus, Google Safe Browsing, and per-source RSS feeds. Top category this week: Business email compromise. The messages look real. The links don't. Here's what's running, who it targets, and how to spot it before you tap.
A young man called crying, saying 'Grandma, I'm in trouble.' He said he was arrested and needed bail money wired immediately. He begged me not to tell his parents. I was about to go to Western Union when my neighbor suggested I call my grandson directly — he was fine, sitting at home.
Modern phishing, BEC, and account takeover attacks increasingly bypass traditional email defenses and create operational strain for security teams. This webinar explores how behavioral AI can help automate detection, investigation, and remediation to reduce alert fatigue and accelerate response times. [...]
Opens in a new tab →
Cybersecurity researchers have disclosed details of fraudulent activity targeting users across the Middle East and North Africa by employing various fraudulent Facebook accounts impersonating politicians, public figures, and trusted organizations. "These accounts promoted fake offers, including free mobile internet packages, financial compensation, and government subsidy programs," Group-IB
Opens in a new tab →
GitHub access sales, leaked repositories, and stolen API keys can all become supply-chain attack footholds. Flare explores how underground forums expose early signals tied to software supply-chain risk. [...]
Opens in a new tab →
For most of the past decade, managed detection and response was the answer to a real problem. Security teams couldn't staff around the clock, couldn't hire enough analysts, and needed someone else to handle the alert queue. MDR stepped in. It worked well enough. Until now. The threat landscape has changed faster than the MDR model can adapt. Attackers are using AI to move faster, generate more
Opens in a new tab →
Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks. [...]
Opens in a new tab →
Bug bounty research inadvertently led organizations to believe they were being breached through their ServiceNow instances.
Opens in a new tab →
On June 9, Anthropic released Claude Fable 5, the most capable model it has ever made, generally available. It also did something unusual: it shipped one model as two products, split not by capability but by a layer of safety classifiers. Fable 5 goes to the public. Its twin, Claude Mythos 5, the same underlying model with the cyber safeguards lifted, stays locked to a vetted group of cyber
Opens in a new tab →
Paste a URL, an email address, or a phone number. We cross-reference live threat feeds and return a verdict in plain English, with the reasons behind it.
30 REQ / MIN · RATE-LIMITED BY IP