Latest security news

Thu, 10 Sept 2026

1. 05:00
   Cybercriminals are building phishing pages that exist only inside victims’ browsers

   A phishing campaign routes victims through genuine Microsoft OAuth and Teams infrastructure before showing them a fake login page built entirely inside their own browser, according to researchers at Barracuda. “Instead of delivering a phishing page from a web server, the malicious content is assembled inside the victim’s browser using a blob URL — a temporary browser-generated URL that points to content stored locally in memory rather than on a website,” researchers explained. The attack … More →

   Help Net Security·Microsoft, Barracuda