Identity & MFA Attacks News

Passkeys are phishing-resistant at sign-in, but not at enrollment. See how the Pink vishing campaign hijacks Microsoft Entra passkey registration and how to train your team to stop it.

Voice phishing is now a leading breach entry point. Inside the ShinyHunters vishing playbook hitting Salesforce customers and how to defend your help desk.

Credential theft and social engineering attacks are scaling rapidly. Discover the latest threats and how to strengthen your human firewall against modern phishing.

Explore the latest phishing threats, including MFA bypass kits, fake CAPTCHA malware, and AI-driven scams, and how organizations can reduce social engineering risk.

Social engineering is accelerating in 2026, with attackers shifting from malware to manipulating people through voice calls, phishing emails, and AI-powered deception. From enterprise vishing campaigns stealing SSO and MFA credentials to global cyberespionage operations and large-scale breaches triggered by a single employee interaction, trust exploitation remains the primary entry point. As emerging economies and cloud-driven organizations expand their digital footprint, identity deception, impersonation, and voice-based attacks are becoming dominant threats—proving that the human element is still the most targeted vulnerability in cybersecurity.

Deep dive into password manager phishing campaigns targeting LastPass, 1Password, and Bitwarden, including MFA bypass tactics and modern mitigation strategies.

A breakdown of 2026’s top social engineering threats, including phishing, vishing, AiTM attacks, and credential exposure—and how to reduce risk.

October is Cybersecurity Awareness Month 2025—a reminder that protecting data starts with everyday actions. This year’s theme focuses on using strong passwords, turning on MFA, recognizing phishing, and updating software. Learn how PhishingBox helps organizations turn awareness into action through phishing simulations, training courses, and reinforcement emails. Download the 2025 Cybersecurity Awareness Month Guide to plan your campaign and strengthen your organization’s security culture.

Review why financial services firms face persistent phishing attacks and how training can reduce account takeover risk.