Microsoft reports a first-quarter rise in QR-code phishing
Its April review measures threats observed in Microsoft’s email-security data.
Capvise Media / Stories
Security
Privacy, identity and trust in a connected world.
110 storiesBrowse by month
Microsoft adds behavioural context to AWS security logs
The April account focuses on unusual behaviour across human and service identities.
Finding a prompt injection is different from proving it worked
Google’s April research separates suspicious page text from successful attacks.
Microsoft traces fraudulent IT-worker access from hiring to cloud activity
The April report follows identities and access across the hiring process.
Attackers pose as helpdesk staff to obtain remote assistance
Microsoft’s April investigation follows intrusions using legitimate support tools.
Sapphire Sleet uses fake updates to target macOS users
Microsoft’s April report focuses on social engineering and user-run files.
Google moves a Pixel modem DNS parser into Rust
The April engineering account targets one memory-unsafe component.
Chrome brings device-bound sessions to Windows users
DBSC binds cookie renewal to a device’s private key.
US agencies warn of attacks on industrial controllers
Internet-connected controllers in water, energy and government facilities were among the targets.
Google clarifies how Gemini in Gmail handles personal email
Google says inbox assistance is task-specific and personal emails do not train its foundation models.
CERT-EU links Commission cloud breach to Trivy compromise
The April investigation identified stolen cloud credentials and personal data exposure.
WhatsApp-delivered scripts lead to persistent Windows backdoors
Microsoft traces a campaign that began in late February.