NEURALSHIELD

When the Password Is Not the Prize: The Microsoft 365 Token Grab Hidden Inside Kali365

A phishing kit linked to Telegram distribution is pushing attackers toward session theft, turning a successful sign-in into a longer-lived foothold inside cloud accounts.

When Login Flows Become the Payload: The New Microsoft 365 Phishing Trap

A reported phishing service named Kali365 points to a harder problem than stolen passwords: cloud identity abuse that can ride on legitimate OAuth and device-code sign-in paths.

The Invitation Trap: How a Fake Event Message Can Open the Door to Account Takeover

A phishing campaign aimed at U.S. organizations shows how a believable invitation can be used to capture credentials, relay one-time passwords, and potentially blend into legitimate remote-support traffic.

The Click That Looks Safe: How a Word-Like Lure Can Turn Trusted Remote Access Into an Entry Point

A document-themed phishing campaign highlights a familiar but under-discussed problem: when approved remote access software is part of the normal IT stack, attackers can try to hide inside that trust.

When a Public Payment Brand Becomes the Bait

PagoPA-themed phishing shows how trust, urgency, and familiar logos can be combined into a durable fraud machine aimed at Italian citizens.

The Inbox Trap: Why One Phish Can Turn Into a Scoping Emergency

A single suspicious email is often less a mail problem than a race to prove what it touched, who else it reached, and whether the damage stayed contained.

Physical Phishing Letters Push Ledger Users Toward Fake Recovery Pages

A mailed scam in Italy turns the mailbox into an attack vector, using QR codes and brand impersonation to chase the one secret that can restore a crypto wallet.

When the Login Prompt Becomes the Trap: Tycoon 2FA’s Shift to Device-Code Phishing

A familiar phishing ecosystem appears to have moved from fake sign-in pages to a more subtle weakness: abusing a legitimate OAuth flow to sidestep multi-factor protections.

The Login That Looked Legit: How Device Code Phishing Turns Microsoft 365 Into a Token Trap

Attackers are abusing a standard cross-device sign-in path to steal Microsoft 365 tokens, sidestep ordinary MFA expectations, and turn a trusted identity workflow into a foothold for mailbox abuse.

Families Get a New Front Line Against Digital Deception

A free CAPY hub from KnowBe4 brings short cyber-safety lessons into the home, with deepfakes, grooming, and scams at the center of the training message.

The New Office Intrusion: When a Perfect Voice Becomes a Fraud Weapon

Deepfake impersonation is turning ordinary business workflows into high-value targets, where one convincing call can pressure staff into making irreversible decisions.

The Human Weak Spot AI Loves to Exploit

Digital security now depends on more than tools and passwords: trust, verification, and decision design have become the frontline against social engineering and AI-assisted impersonation.

AI Website Builders Are Turning Phishing Into a Push-Button Crime

A new abuse pattern around prompt-to-site tools shows how fast, polished phishing pages can now be assembled with far less effort than traditional web fraud.

La estafa del peaje que convierte un mensaje rutinario en una trampa

Los defensores cibernéticos italianos están alertando sobre una ola de phishing en WhatsApp basada en un supuesto peaje de autopista impagado, un señuelo que se apoya en la urgencia, la confianza y un miedo muy común: deber dinero.

Cuando la IA convierte el phishing en una línea de producción de rápido movimiento

La parte riesgosa no es una brecha dramática de la plataforma; es la posibilidad de que herramientas web legítimas asistidas por IA se reutilicen para generar rápidamente páginas de phishing convincentes con apariencia de marca.

Cyber Showdown in Rome: 2026 Forum ICT Security Gears Up for a New Era of Digital Defense

Italy’s premier cybersecurity gathering returns, promising deep dives into AI, post-quantum threats, and the human factor behind digital risk.

Behind the Patch: Unmasking the Hidden Dangers in Next.js

A critical look at the latest security updates shaking the Next.js developer community.

AI Gatekeepers: Inside Italy’s Bold New Standard for Artificial Intelligence Professionals

As AI moves from experiment to enterprise backbone, Italy’s UNI 11621-8 sets out to separate true experts from the “AI guru” pretenders.

AI Deregulation Showdown: Tech Giants and EU Lawmakers Clash Over the Future of Artificial Intelligence

Morse Code Mayhem: How Hackers Outsmarted AI to Swipe $200,000 in Crypto

A Morse code prompt injection tricked two autonomous AI bots into draining millions in tokens-raising urgent questions about the risks of AI-controlled wallets in Web3.