Phishing

The breach affected customer and prospective customer data, including names, phone numbers, and addresses.

The malicious extensions inject iframes to display phishing content and extract other data.

Attackers abuse Teams chat to deliver malware after help desk phishing scam.

Cisco's Talos threat intelligence report found that attackers are increasingly using AI tools to boost their phishing attacks, which is the most common initial access method by hackers in the first quarter of 2026, reports Cybersecurity Dive.

North Korean threat operation HexagonalRodent, which is associated with the state-backed Famous Chollima, has exfiltrated up to $12 million worth of cryptocurrency from Web3 developers between January and March, according to The Record, a news site by cybersecurity firm Recorded Future.

Multiple web browsers, browser extensions, and cryptocurrency wallets could have their stored credentials and live session cookies compromised by a new AppleScript-based information-stealing malware spread in a macOS-targeted ClickFix campaign, reports The Register.

Threat actors have been exploiting Microsoft Teams and Quick Assist to remotely compromise systems as part of a new helpdesk impersonation campaign, Cyber Security News reports.