The FTC is warning that phishing emails disguised as Evite and Paperless Post invitations are hijacking email accounts and, in one case, draining a bank account, often forwarded by real friends whose accounts were compromised first.
Category: Threats
Post
Gujarat Banking and Insurance Data Sold Openly on the Dark Web for Three Months, Report Says
Bhaskar English reports that Gujarat residents' banking and insurance data has been sold openly on the dark web for three months, a claim that lands amid a wider 2026 pattern of Indian financial sector leaks including Bank of Baroda's terabyte scale breach.
Post
IEH Corporation Discloses Microsoft 365 Phishing Breach at Defense Connector Maker
A phished employee credential gave an attacker access to a Brooklyn defense supplier's Microsoft 365 mailbox, exposing engineering files and export-controlled data tied to Patriot and THAAD programs, IEH told the SEC.
Post
CZ Warns of Phishing Risk After Trezor’s Shipping Partner Exposes 13,689 Customers
Binance founder Changpeng Zhao warned that a data breach at Trezor's shipping partner ShipMonk, which exposed 13,689 customers' names and addresses, hands attackers a ready-made list for phishing and physical targeting.
Post
Hudson Valley Guide Traces Four Small Business Breaches to the Same Preventable Gaps
A Hudson Valley MSP's new guide traces four small business ransomware and phishing incidents back to unpatched firewalls, missing MFA, and spoofed domains, a pattern CISOs should recognize from breaches at companies many times their size.