SlashNext

1 month ago | slashnext.com | Daniel Kelley

Phishing attacks have moved beyond simply sending emails with malicious links to incorporate more modern social engineering techniques, including the alarming trend of mixing in smishing (SMS phishing) and vishing (voice phishing). These techniques are a growing threat beyond email security and enhance cybercriminals’ capabilities to achieve their objectives using this new range of communication techniques.

2 months ago | slashnext.com | Daniel Kelley

Employees in most organizations receive countless communications daily—emails, Slack messages, or ticket updates, for example. Hidden among these routine interactions are phishing scams designed to exploit trust and compromise security. Imagine an employee receiving a text that appears to be from their bank: “Suspicious activity detected on your account. Click here to secure your account.” Or a message that mimics an IT ticket update: “Your password will expire soon.

Jan 5, 2025 | slashnext.com | Daniel Kelley

One morning, you decide to make a purchase from a seemingly reputable online store. The website displays a familiar checkout interface resembling Stripe’s payment process. You enter your payment details, feeling confident in the website’s legitimacy: Credit card number  Expiration date  CVV  Billing addressYou even enter a one-time password (OTP) sent to your phone, believing it ensures your transaction’s security.

Nov 11, 2024 | slashnext.com | Daniel Kelley

By Daniel KellySecurity ResearcherWe recently uncovered GoIssue, a tool marketed on a cybercrime forum that allows attackers to extract email addresses from GitHub profiles and send bulk emails directly to user inboxes. GoIssue signals a dangerous shift in targeted phishing that extends beyond individual developers to threaten entire organizations.

Sep 30, 2024 | slashnext.com | Barry Strauss

URL rewriting, a service designed to neutralize malicious URLs by redirecting users to a safe environment, has been a common practice in email security. However, as cyberthreats evolve, it’s becoming clear that this approach has limitations and potential vulnerabilities. Contact us to learn more. URL rewriting emerged as a creative solution about a decade ago when secure email gateways (SEGs) were the primary source of email defense.