Sam's News — email-security — 2026-09-10¶

Security¶

7.5 Trezor Users Targeted by Phishing After Third-Party Email Breach¶

Trezor experienced a second breach of a third-party service within a month, with attackers using its domain for phishing attacks.

Sources: unchainedcrypto.com RSS, tradingview.com RSS, yellow.com RSS

7 Microsoft warns of AI-assisted business email compromise campaigns targeting finance teams¶

Microsoft identified an AI-assisted business email compromise campaign targeting finance departments between August 3–5, with threat actors impersonating CEOs and fabricating invoices to solicit ACH transfers averaging nearly $50,000 per target.

Over 1 million emails sent
Target payment: ~$50,000 per ACH transfer
Detected August 3–5, 2026
Used generative AI to personalize messages and improve templates
Impersonated CEOs, ServiceNow, and included fake invoices

Sources: Microsoft Security Blog AI Web Searched

6.5 Sexual misconduct claims weaponized in phishing attacks¶

False allegations of sexual misconduct are being used as phishing lures in targeted email campaigns.

Sources: securityboulevard.com RSS

6.5 Google Alerts hijacked in large-scale phishing campaign targeting users¶

Threat actors have hijacked Google Alerts to deliver phishing messages at scale.

Sources: TechRepublic RSS

6.5 Phishing attacks now spoofing legitimate wallet security warnings to steal credentials¶

Cybercriminals are sending phishing emails that masquerade as legitimate wallet security warnings from actual addresses to compromise users.

Sources: cryptoticker.io RSS

6.5 Trezor hardware wallet users warned of phishing email spoofing STM32 security advisory¶

A phishing email targeting Trezor users falsely claims to reference an STM32 entropy vulnerability to trick users into compromising their wallets.

Sources: cryptoticker.io RSS

A phishing email has exposed Social Security numbers in a data breach affecting Roanoke.

Sources: shattered.io RSS

5 Miami University Alerts Students to SMS Phishing Campaign¶

Miami University has warned its student body of an active SMS phishing campaign targeting the institution.

Sources: Intelligent CISO RSS

5 Microsoft Defender detects AI-themed phishing and malware attacks¶

Microsoft demonstrated how Defender identifies and blocks AI-themed phishing, malware, and multi-stage attacks.

Sources: Microsoft Security Blog RSS

5 Guide to detecting phishing emails spoofing legitimate sender addresses in wallet security warnings¶

Security guidance on how to identify phishing emails that impersonate legitimate wallet security notifications using spoofed sender addresses.

Sources: CryptoTicker RSS