⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The second quarter of 2026 saw significant disruptions in the phishing landscape following Microsoft’s Digital Crimes Unit-led takedown of the Tycoon2FA phishing-as-a-service (PhaaS) platform in March. Phishing volume linked to Tycoon2FA plummeted by 92% compared to pre-disruption levels, with QR code phishing and CAPTCHA-gated phishing tactics notably declining.
Microsoft's Q2 2026 email threat report highlights a significant disruption of the Tycoon2FA phishing kit, which reduced credential theft operations. The report also notes a rise in QR code phishing attacks that bypass traditional email filters, alongside increasingly sophisticated CAPTCHA-gated phishing tactics designed to evade automated detection.
Unit 42 reveals a Russian cyberespionage campaign that injects JavaScript into Zimbra webmail servers to steal credentials, highlighting a global threat to webmail systems.
Unit 42's report details a Russian cyberespionage campaign that targets Zimbra webmail servers worldwide. The attackers employ JavaScript injection techniques to steal user credentials, posing a persistent threat to email security across multiple organizations.
Unit 42 reveals a Russian cyberespionage campaign that injects JavaScript into Zimbra webmail servers to steal credentials, highlighting a global threat to webmail systems.
Unit 42's report details a Russian cyberespionage campaign that targets Zimbra webmail servers worldwide. The attackers employ JavaScript injection techniques to steal user credentials, posing a persistent threat to email security across multiple organizations.