Phishing

Organizations in the U.S, Europe, and other parts of the world have been targeted with spear-phishing emails purporting to be copyright infringement notices that facilitate Noodlophile information-stealing malware deployment, reports The Hacker News.

Proofpoint also found that more than a third of URL-based malware campaigns involved remote access tools.

SquareX researchers demonstrated during DEF CON an attack technique that could allow attackers to bypass passkey-based login security using process manipulation, SecurityWeek reports.

These offers are designed to appear legitimate, often including details that mimic official communication from the company.

These emails aimed to trick recipients into providing their login credentials.

A proof-of-concept phishing template takes advantage of FIDO-incompatible browsers.