Phishing

HackRead reports that Windows systems have been subjected to a novel ClickFix attack campaign that leverages fraudulent CAPTCHA pages in the lead up to illicit command execution.

NASA had its employees and research collaborators reported by its Office of Inspector General to have been subjected to a Chinese spear-phishing campaign aimed at procuring the agency's sensitive data, The Hacker News reports.

The attack chain begins when users land on typosquatted domains mimicking telecommunications brands.

BlackFile initiates attacks through voice phishing (vishing) calls, using spoofed numbers to impersonate IT support.

The breach affected customer and prospective customer data, including names, phone numbers, and addresses.

The malicious extensions inject iframes to display phishing content and extract other data.

Attackers abuse Teams chat to deliver malware after help desk phishing scam.

Cisco's Talos threat intelligence report found that attackers are increasingly using AI tools to boost their phishing attacks, which is the most common initial access method by hackers in the first quarter of 2026, reports Cybersecurity Dive.