Attackers have been leveraging the Google AppSheet service to target Google Workspace users with fake trademark notices as part of a new phishing scheme, Hackread reports.
Kazakhstan state-owned oil and gas firm KazMunayGas has disclosed conducting an internal phishing drill as it denied having its systems compromised by the Russia-linked NoisyBear threat operation as reported by Seqrite Labs, according to The Record, a news site by cybersecurity firm Recorded Future.
Malicious emails masquerading as purchase notifications have been sent using Apple servers through the exploitation of iCloud Calendar email invitations as part of a new callback phishing campaign, according to BleepingComputer.
Google has repudiated the legitimacy of an alert it allegedly issued last week warning of the compromise of 2.5 billion Gmail users' accounts due to a Salesforce breach, according to The Hill.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.