MailSecHub aggregates coverage of phishing campaigns, business email compromise, malware delivery, spoofing and email authentication (SPF, DKIM, DMARC) from top reputable sources. The pipeline polls every two hours, deduplicates and classifies each story by threat category — filter by source or topic to get to what is relevant to your environment.
A weekly briefing summarizes the most significant developments, and the same digest is delivered every Monday morning via the newsletter.
Cofense Vision now integrates with Google Workspace to detect and remove phishing threats that bypass perimeter defenses and reach Gmail inboxes. The solution helps security teams identify and remediate sophisticated phishing attacks post-delivery. This addresses the gap where advanced threats evade traditional email security controls.
Cofense launched a new Competency Dashboard within its Command Center platform to measure organizational readiness against phishing threats and track employee behavior in recognizing and reporting phishing attempts. This AI-driven enhancement aims to consolidate phishing defense visibility and employee response metrics into a unified view.
Threat actors are leveraging ChatGPT's subscription model to conduct phishing attacks, sending fake payment update notifications to users. These familiar billing lures target ChatGPT's large user base to steal credentials and sensitive information.
Threat actors impersonate university leaders in phishing emails falsely alleging sexual misconduct to trick victims into installing RATs. The social engineering lure exploits sensitive claims to enable malware delivery, providing attackers full system access and control.
Cofense discusses its AI-powered phishing defense approach, emphasizing that effective anti-phishing solutions must handle threats that bypass initial defenses. The article addresses security leaders' focus on AI effectiveness rather than mere presence in phishing defense strategies.
Phonescams impersonating major brands are distributed en masse to email inboxes daily, targeting vulnerable users with social engineering. Attackers exploit easily-accessible victims rather than pursuing difficult targets, using established fraudulent techniques adapted for modern delivery.
Threat actors are using invitation-themed phishing emails spoofing legitimate event platforms like Punchbowl and Evite to steal credentials and install malware. Cofense Intelligence reports sustained campaigns targeting users with fake login pages and remote access tools. This attack vector remains effective because users trust familiar invitation platforms.
AI-driven phishing campaigns now employ coordinated variations to evade traditional detection. Campaign-level defense strategies are necessary as threat actors generate thousands of unique email variants serving shared objectives, fundamentally changing email security approaches.
Cofense webinar highlights how AI is enabling more sophisticated, scalable phishing campaigns. Security teams must evolve detection strategies beyond individual emails to combat adaptive threat tactics.
Threat actors are conducting phishing campaigns impersonating Google Ads maintenance notices to steal user credentials. The attacks exploit familiarity and urgency by mimicking legitimate system notifications, targeting Google Ads Sync Account users with fake upgrade alerts.
Finance-themed phishing campaigns are evolving from urgent, pressure-driven tactics to mundane process-oriented messaging that mimics routine financial workflows. This shift makes phishing emails harder to detect and may indicate broader adoption among threat actors targeting organizations.
Threat actors are shifting from generic phishing campaigns to platform-aware attacks that adapt malware delivery based on the victim's device, browser, and environment. This evolution targets Windows, macOS, and other platforms with selective credential phishing, RATs, or malware payloads, requiring defenders to strengthen detection across multiple endpoints.
AI-powered phishing attacks now evade traditional email security tools through polymorphic campaigns that continuously evolve. Organizations must adopt board-level cyber resilience strategies beyond IT-focused security gateways and filters to combat adaptive threats.
Cofense webinar discusses how AI is enabling attackers to scale phishing attacks more efficiently. Security leaders must adapt their defenses as phishing becomes a more sophisticated, AI-driven threat requiring modern mitigation strategies.
Cofense discovered a phishing campaign using FIFA World Cup 2026 lures to deliver Voidrift malware. Emails are highly personalized with recipient and company details, indicating extensive reconnaissance. The campaign demonstrates sophisticated social engineering tactics targeting organizations.
The week's most important email-security news, curated and summarized — every Monday morning. No tracking, one-click unsubscribe.