Topic
Cyberattack techniques that manipulate victims via calls, texts, or fake support/police contacts into revealing credentials or installing malware.
Microsoft accounted for 33% of the brand-impersonation phishing attempts Check Point Research tracked in Q3 2026, up from 23% in Q2. Its examples include fake Antigravity and Apple pages that get visitors to run terminal commands themselves.
Reality
Health-ISAC warned members in September 2026 that ShinyHunters-linked crews extort healthcare without encrypting files, in one case taking over 1TB. A dev.to write-up of the warning points to new factor enrollments and bulk exports as the signals to watch.
Reality
Attackers who threatened millions of Asos customers got into its Snowflake-hosted data by posing as an employee's trusted contact, City AM reports. Its report names ShinyHunters for H&M alone among Asos, H&M and TFG, so a shared method across the three is unconfirmed.
Reality
TFG London identified a cybersecurity incident on Sunday 11 October that hit IT systems at Phase Eight, Hobbs and Whistles. TFG says it has no reason to believe payment information is at risk, and the Independent counts it as the second UK retailer hack in a week.
Perspective Coverage
9 publishersReality
Check Point's October 9 analysis of leaked Luna Moth files describes one operator calming the victim by phone while another runs the remote session. The files surfaced on an anonymous onion site and Check Point words its conclusion conditionally, so the call pattern is usable for training but unverified.
Reality
Air France-KLM confirmed to City AM that unauthorised access reached internal folders despite mandatory multi-factor authentication. The airline did not name an attacker, so the tie to Xuanye Group, the Asos claimant, rests on the group's own posts.
Reality
iRhythm, maker of the Zio patch, says attackers who social-engineered access to third-party-hosted apps took data on at least 360,000 patients. The records link patients' insurance numbers to their device serial numbers, enough detail for a caller to pass as the company.
Reality
Asos says hackers took detailed profiles of potentially millions of customers, after first telling investors only basic contact details may have been accessed. The revision followed the attackers' approach to the BBC, so the people holding the records set the timing of the fuller disclosure.
Reality
Luna Moth's leaked vishing playbook, which has not been verified, coaches callers to keep victims calm while a second operator works their machine, Check Point reported. The method needs no new malware, only a phone call and a legitimate remote-support tool, so the defense sits at the help desk.
Reality
Asos said hackers obtained an employee's login by posing as a trusted contact, then reached customer names and contact details on third-party platforms. The shares fell on the hackers' app alert two days before Asos explained it. For a board, that puts staff checks and disclosure speed inside the same risk.
Reality
Extortionists sent ASOS app users an apparently genuine ASOS push alert on October 6 claiming they had fully compromised the retailer's Snowflake instance. The alert is the only access anyone outside ASOS has seen; the entry route and any data taken are unknown.
Perspective Coverage
11 publishersReality
ASOS shares fell 10% after attackers used one employee's stolen login to push an extortion message through its app, a dev.to account says. That single credential was enough to reach third-party messaging tools, so those consoles need production-grade access controls.
Reality
Apparent hackers sent an extortion note through ASOS's app to UK customers, claiming to have "fully compromised" its Snowflake instance. ASOS has not confirmed a breach, so the only compromise anyone has seen is that outsiders could message its app users.
Perspective Coverage
15 publishersReality
SecurityWeek says awareness training has failed against help desk vishing, citing attacks that cost MGM an estimated $100 million. The fix it profiles is Netarx's live-call scanner for cloned voices and spoofed devices, but in both breaches it cites, callers talked help desk staff into granting access.
Reality
Scammers text people a fake Facebook Marketplace listing naming them as seller to provoke a 'that isn't me' reply, Malwarebytes reports. Any answer tells a sender who likely already has the name and number that the line is live.
Reality
Clover Health and AngMar Management Services have reported breaches affecting a combined 264,873 people to HHS. Clover's began with social engineering of staff accounts, while AngMar's took patient records it held for home health and hospice providers.
Reality
Jamf Threat Labs reported CloudSyncD, a new macOS backdoor that spreads through a fake Zoom installer and beacons to its server every 8 to 16 seconds. First caught as a VirusTotal sample that looked unfinished, it now appears in builds that connect to live infrastructure in what Jamf calls an active campaign.
Perspective Coverage
5 publishersReality
Zscaler ThreatLabz logged 20.1% fewer ransomware payments in the year to March 2026, worth $327.8M in total, while the average payment rose 5.3% to $431,995. Leak-site listings fell just 3% over the same period, so the decline is in how many victims pay.
Reality
Fraudsters posing as a verified government requester tricked Revolut into handing over sensitive records on about 640 customers. The breach defeated a human process.
Pindrop's survey of more than 250 US security leaders found 74% faced or suspected a deepfake attack in the past year. The targets are live channels such as help-desk calls, job interviews and video meetings, and identity controls were not designed to verify who is on them.
Reality
Security · August 14, 2026 · Confirmed3 publishers
Security · August 17, 2026 · Confirmed5 publishers
Security · August 18, 2026 · Confirmed2 publishers
Security · August 18, 2026 · Confirmed3 publishers
Security · August 21, 2026 · Confirmed2 publishers
Security · August 25, 2026 · Confirmed5 publishers
Security · September 2, 2026 · Confirmed2 publishers
Security · September 7, 2026 · Confirmed3 publishers
Invest · September 8, 2026 · Confirmed5 publishers
Product · September 12, 2026 · Confirmed2 publishers
Security · September 12, 2026 · Confirmed7 publishers
Security · September 23, 2026 · Confirmed2 publishers
Security · September 17, 2026 · Confirmed8 publishers
Security · September 22, 2026 · Confirmed2 publishers
Security · September 21, 2026 · Confirmed2 publishers
Leadership · September 12, 2026 · Confirmed2 publishers
Security · September 12, 2026 · Confirmed2 publishers