EvilTokens: device-code phishing and more than 12,000 compromised inboxes
Microsoft details a platform abusing device-code sign-in and using AI to tailor lures and analyse compromised mailboxes.
Read the analysisSECURCHECK · CYBER NEWS
Phishing and scams
Impersonated messages, malicious links and independent checks.
PUBLIC SERVICES · VERIFIED GUIDE
Read the overview Data breaches in France: follow the facts
A sourced overview of tax, education and training incidents, with a clear distinction between confirmed exposure and claims.
Monthly overviewCyber incidents in September 2026
Brevo SSO incident: phishing sent through trusted email channels
Brevo says a SAML SSO scoping flaw exposed access to 138 customer accounts, six used to send phishing. What the supply-chain risk means.
Read the analysis
Trezor and Brevo: subscribers targeted by a fake security email
Following an incident at email provider Brevo, Trezor reports 347,149 exported addresses and a malicious email requesting wallet recovery words.
Read the analysis
AI-assisted card skimmers: the two-step fake checkout trap
Sansec's February investigation into a compromised PrestaShop store shows a fake card form before the real checkout; AI can speed up localisation of deceptive overlays.
Read the analysisWe distinguish confirmed facts from claims and update articles when primary sources publish new information. These reports are not a real-time incident feed.