Sam's News — email-security — 2026-10-13¶
Security¶
7.5 Google AitM phishing kit uses WebSockets to bypass multi-factor authentication in real time¶
Security researchers identified an advanced phishing campaign targeting Taiwan-based institutions using AI-generated emails and a sophisticated WebSocket-based adversary-in-the-middle framework that intercepts credentials and MFA challenges in real time. The threat actor used QR code injection and targeted organizations including Taiwan's European Union Centre and Institute of International Relations.
- AI-assisted content generation created personalized phishing emails impersonating legitimate Taiwanese institutions
- WebSocket architecture enabled real-time interception of MFA challenges and credentials
- QR code phishing (quishing) modified legitimate event posters with malicious codes
- Developer's primary language likely Simplified Chinese based on UI analysis
- Campaign targeted research organizations; no confirmed successful compromises
Sources: Cisco Talos AI Web Searched, CyberSecurityNews Web Search
7 Healthcare Sector Faces Ongoing Cyberattack Threats Disrupting Patient Care¶
Healthcare systems continue experiencing significant cyberattacks that disrupt patient care, clinical operations, and clinician productivity. Proofpoint's 2026 report documents the persistent threat to healthcare IT infrastructure and patient safety.
- Attacks disrupt patient care delivery and clinical workflows
- Threats target healthcare IT infrastructure, clinicians, and patient data
Sources: Proofpoint AI Web Searched, Proofpoint — Threat Insight RSS
4 TELECO Advocates AI-Powered Phishing Defense During Cybersecurity Awareness Month¶
TELECO released guidance for businesses on deploying AI-driven phishing detection to strengthen email defenses.
Sources: mykxlg.com RSS