Cyber resilience fundamentals are becoming more important as attackers find and exploit weaknesses faster. Organisations across Australia and New Zealand face more convincing phishing attacks, vishing techniques, and growing use of AI by threat actors. Open and closed source evidence suggests certain threat actor groups are using their own access to AI models. They can use these models to identify…
By Shachar Gritzman, Senior Security Researcher, Island. The NovaCookies phishing service is a commercial adversary-in-the-middle (AiTM) service that relays Microsoft 365 sign-ins to capture authenticated sessions. Meanwhile, trusted delivery chains, Microsoft and Google redirect hops, disposable infrastructure, and adaptive anti-analysis controls help its campaigns reach the lure. Executive Summary Advertised at $320 a month, the NovaCookies phishing service packages real-time…
Security teams have never had more visibility into their environments. Modern security platforms generate thousands of alerts every day, artificial intelligence (AI) can identify suspicious activity in seconds, and organisations collect more telemetry than ever before. Yet attackers continue to outpace defenders. According to LevelBlue’s Q2 2026 TTP Briefing, business email compromise (BEC) accounted for 45 percent of incidents investigated…
AI Obituary Scams: A Growing Cyber Risk to Businesses AI obituary scams are becoming a serious cybersecurity threat. Criminals now use artificial intelligence to create fake memorial pages that target grieving families and unsuspecting employees. These scams spread quickly across fraudulent websites and often lead visitors to phishing pages, malware downloads, and other cyber threats. As AI obituary scams become…
Cyber swatting is a growing cybercrime that puts people, families, and businesses at risk. Attackers make false emergency reports to law enforcement, triggering an armed police response to a victim’s home or workplace. What began in online gaming communities now affects corporate executives, public figures, journalists, streamers, and private citizens. A swatting incident can create panic, cause emotional trauma, and…
FortiGuard Labs research shows how threat actors are using tournament demand to launch scams and steal credentials. FIFA cyber threats are already emerging ahead of the FIFA World Cup 2026 as cybercriminals launch phishing campaigns, fake ticket scams, malware attacks, and credential theft operations targeting fans and organisations worldwide. Starting June 11, the FIFA World Cup 2026 will unite fans,…
As technology becomes a larger part of everyday life, students are spending more time online than any previous generation. They use the internet for learning, communication, entertainment, and social interaction. While these opportunities bring significant benefits, they also expose young people to growing cyber risks. Teaching cybersecurity in schools is no longer optional. It is an essential life skill that…
Modern social engineering tactics are no longer crude phishing emails filled with spelling mistakes. Instead, they combine artificial intelligence, social media intelligence, and psychological manipulation to create precise and believable attacks. As a result, deception now feels personal. Attackers research their targets, replicate trusted voices, and craft tailored communication. Consequently, traditional red flags are disappearing. What Are Modern Social Engineering…
Expansion of YubiKey as a Service subscription and YubiEnterprise Delivery supports rising demand for streamlined, cost-effective phishing-resistant deployments Yubico (NASDAQ STOCKHOLM: YUBICO), the leading provider of hardware authentication security keys, today announced the expanded availability of YubiKey as a Service to all countries in the European Union (EU). This allows organisations to be more agile and flexible in their adoption of…
While artificial intelligence (AI) is widely heralded for revolutionizing healthcare, logistics, and even cybersecurity itself, it has also become a powerful weapon in the hands of cybercriminals. The rise of AI-driven malware and phishing attacks marks a new frontier in digital threats, one where automation, adaptation, and realism combine to make malicious campaigns more effective than ever before. Cyber News…
