Sam's News β email-security β 2026-09-14¶
Security¶
6.5 Security briefing: passkey phishing, Anthropic report, airline vulnerability¶
Cybersecurity roundup covering passkey phishing attacks, Anthropic's security report, and airline cyber loopholes.
Sources: cisoseries.com RSS
6.5 Business Email Compromise attacks escalate through AI-powered personalization¶
Cybercriminals are leveraging AI to craft highly targeted business email compromise campaigns, dramatically increasing their sophistication and success rates.
Sources: The Fast Mode RSS
6.5 Revolut data breach exposes financial information and passport documents¶
Fintech firm Revolut disclosed a significant data breach that compromised customer financial data and passport information after a threat actor impersonated a government agency.
Sources: BleepingComputer RSS, LRT RSS
6.5 Passkey-themed phishing campaign targets and compromises Microsoft cloud accounts¶
A phishing campaign exploiting passkey concepts successfully compromised Microsoft Cloud accounts.
- Active since May 2026
- Attacks begin with phone/message impersonation of IT helpdesk
- Identity compromise enables cloud reconnaissance and data exfiltration
- SharePoint, OneDrive, email collection via REST APIs
- Proxy-associated infrastructure used for automated collection
Sources: LinkedIn RSS Update to: Microsoft cloud accounts hijacked through passkey phishing and email fraud