Tag: account takeover
Cybersecurity Threat Advisory: Forg365 targets M365 accounts
A new phishing-as-a-service (PhaaS) platform, Forg365, is being distributed through Telegram, lowering the barrier to Microsoft 365 account compromise by automating AI-assisted phishing lures and exploiting device code and adversary-in-the-middle (AiTM) authentication flows. What is the threat? Forg365 provides operators...
The 2025 ITRC Consumer Impact Report: A new era of identity crime
Founded in 1999, the Identity Theft Resource Center (ITRC) is a national nonprofit dedicated to empowering and guiding consumers, victims, businesses and government agencies to minimize risk and mitigate the impact of identity compromise and crime. The ITRC provides free...
Cybersecurity Threat Advisory: AWS default IAM roles risks
Cybersecurity researchers have uncovered critical vulnerabilities arising from default Identity and Access Management (IAM) roles in Amazon Web Services (AWS). Service setups often create these roles automatically or recommend them, granting excessive permissions that expose environments to privilege escalation and...
Q&A: New Barracuda Email Protection advancements
We’re thrilled to announce exciting new advancements to Barracuda Email Protection. These updates — including flexible deployment options, enhanced security capabilities, and more — make it easier than ever for organizations of all sizes and IT environments to defend against increasingly...
