Cyber ​​Security Hub

The habit of identifying phishing emails based on suspicious sender addresses or misspelled domain names is quickly becoming obsolete. Recently, sophisticated phishing campaigns have shifted toward exploiting the actual infrastructure, servers, and native features of the world’s two most ubiquitous tech platforms: Google and Microsoft.

Microsoft recently issued a warning about a large-scale spam and phishing campaign in which attackers leverage hidden Unicode characters to sophisticatedly bypass email security filtering systems.

A vulnerability affecting Apple's Hide My Email feature could allow attackers to uncover the real email address behind an anonymized alias. According to reports, the issue was disclosed to Apple more than a year ago but remains unpatched. Independent testing by 404 Media also confirmed that the flaw was still exploitable at the time of publication.

Since April 2026, a sophisticated phishing campaign has been targeting hotels across Asia and Europe. The attackers abuse trusted services including Calendly and Google to distribute a ZIP archive containing the TonRAT malware, which is executed through the legitimate Node.js v24.13.0 runtime

Recently, security experts issued a serious warning regarding a sophisticated attack campaign aimed at hijacking user accounts through the LinkedIn platform. If you or your business are using this platform, it is time to heighten your vigilance to protect yourselves.

Many longtime users of the Google ecosystem often face an awkward predicament: email addresses created years ago during their "childhood" are no longer suitable for a professional work environment. The good news is that Google has officially launched a feature that allows users to change their email address while keeping all critical data intact.