Per Bleeping Computer, a sophisticated phishing operation active since mid-August 2026 has been harvesting live Google sessions from corporate users by leveraging legitimate infrastructure to bypass traditional security filters.
As detailed in The Hacker News, attackers are leveraging social engineering and insecure Active Directory Certificate Services configurations to compromise corporate environments.
The New York Knicks organization recently conducted a phishing test by sending employees emails promising free championship rings to evaluate staff awareness of cybersecurity threats, as first reported by Ars Technica.
