Phishing

U.S. financial services faced a significant surge in phishing attacks during the first half of 2026, with nearly 40,000 malicious URLs identified.

A new phishing scam is targeting tourists applying for Schengen visas, with scammers sending fraudulent emails that mimic official communications from EU migration authorities.

A sophisticated scam campaign dubbed Milk Dragon is leveraging fake e-commerce websites and social media promotions to steal users' payment data.

Two vulnerabilities discovered in Apple’s iCloud Mail infrastructure allowed authenticated users to send emails that appeared to originate from any @icloud.com address, while still passing crucial email authentication checks like SPF, DKIM, and DMARC.

Microsoft's official X account was briefly compromised and used to promote a cryptocurrency scam involving a token named $CLIPPY.

Unknown attackers compromised the official Microsoft account on X, promoting a cryptocurrency token in what appeared to be a pump-and-dump scheme.

Artificial intelligence is compressing the cyber-attack lifecycle from days to minutes, posing a significant challenge for defenders, according to Microsoft's Digital Defense Report 2026.