Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Phishing Attacks Target YouTubers With Phony Sponsorships

A phishing campaign is targeting YouTubers with phony sponsorship offers, according to researchers at ESET. The emails are personalized to each target, making specific references to their channels, and are designed to trick users into granting access to their Google accounts. “One such recent campaign impersonates Hollyland, a legitimate manufacturer of wireless transmission and audiovisual equipment,” ESET says.

Email Security Best Practices for Marketing Teams

A marketing campaign can reach thousands of subscribers in minutes. That reach makes email valuable, but it also makes marketing infrastructure an attractive target. Attackers may impersonate a trusted brand, steal access to campaign tools, or exploit an overlooked integration to send deceptive messages.

Warning: Phishing Attacks Are Using AI-Themed Ad Lures

A phishing campaign is using AI-themed lures to target employees who operate advertising accounts, according to a new report from Island. The campaign is launched from a phishing platform that poses as a portfolio of AI advertising tools, using branding from Gemini, Claude, ChatGPT, Perplexity, and Muse. The platform’s operator added a fake Muse Ads lure eight days after Meta launched its Muse AI agent.

Emails as Events: First Look at LimaCharlie Email Security

LimaCharlie CEO and founder Maxime Lamothe-Brassard gives the first public demo of LimaCharlie Email Security, which treats every message as an event in the same platform as your endpoint, cloud, and identity telemetry. Email Security connects to Microsoft 365 and Google Workspace through the provider API, with no MX record changes. Every verdict shows the signals and scoring behind it, every action is audited, and everything you see in the UI is available through the API, CLI, and MCP server so AI agents can work with it directly.

The Video Game Market on Its Way to $300 Billion

According to industry experts, annual revenue in the gaming industry is projected to exceed $300 billion by 2028. This represents more than double the figures recorded in 2019. The key growth drivers remain the expansion of online services and the rapidly growing global player base. However, alongside money and audiences, the industry is also attracting those who seek to profit through illegal means.

The Rise of Legitimate-Service Phishing: 1 in 10 Phishing Emails Now Comes From a Platform You Trust

A legitimate sender does not mean legitimate content. Attackers have abused legitimate services such as DocuSign, SharePoint, Adobe Sign, Dropbox and Google Drive to exploit that trust for years. KnowBe4's Phishing Threat Trends Report Vol. 7, released April 2026, flagged this shift at the industry level: 22% of all phishing attacks are now sent through a legitimate platform, with attackers moving from impersonating a brand to abusing that brand's actual infrastructure.

Introducing LimaCharlie Email Security: One Phish, Start to Finish

Introducing LimaCharlie Email Security. It connects to Microsoft 365 or Google Workspace through the provider's API, with no MX change and nothing in the delivery path, and shows the signals behind its verdicts. This walkthrough follows one malicious email from its 94/100 verdict through how the score compounds, a benign contrast with its measured processing timeline, the evidence, link analysis, response at the provider, hunting across the organization, groups and campaigns, user reports, the rule that caught it, policy, and email as telemetry for detection and response rules.

Threat Actors Abuse Trusted Accounts and Internal Tools to Launch Convincing BEC Attacks

Attackers are continually finding new ways to refine business email compromise (BEC) attacks, according to Douglas McKee, Director of Vulnerability Intelligence at Rapid7. When attackers compromise trusted tools and accounts, they can manipulate victims’ view of reality. One way attackers can achieve this is through what McKee calls “calendar warfare,” in which attackers use calendar meetings to trick users into falling for attacks.

Announcing LimaCharlie Email Security: Natively Integrated Into Your SecOps Stack

Co-founder & CCO LimaCharlie Email Security is generally available today. It protects Microsoft 365 and Google Workspace mailboxes from inside the same tenant, permission model, and data lake as the rest of LimaCharlie. A phishing email and the endpoint activity it causes can now be detected, investigated, and remediated in one place.