Phishing

The attack methods exploit inconsistencies in how Windows Explorer prioritizes conflicting target paths within LNK files.

The first known malicious Microsoft Outlook add-in has been discovered in the wild, marking a new frontier in supply chain attacks.

In December 2025, threat researchers at Binary Defense investigated an incident where an attacker successfully rerouted a physician's salary.

The trend involves users sharing AI-generated caricatures based on prompts like "create a caricature of me and my job based on everything you know about me."

The arrested suspect is the third individual apprehended in connection with JokerOTP.

The fraudulent website, impersonating the legitimate 7-Zip project at 7zip[.]com, mimics the original site's structure and text.

The phishing campaign, first detected in mid-December 2025, months before Pride Month, targets organizations globally, with the UK and United States being heavily impacted.