Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Attackers Abuse Grok to Spread Phishing Links

Threat actors are abusing X’s generative AI bot Grok to spread phishing links, according to researchers at ESET. The attackers achieve this by tricking Grok into thinking it’s answering a question, and providing a link in its answer. “In this attack campaign, threat actors circumvent X’s ban on links in promoted posts (designed to fight malvertising) by running video card posts featuring clickbait videos,” ESET says.

Sendmarc appoints Dan Levinson as Customer Success Director in North America

Sendmarc has announced the appointment of Dan Levinson as Customer Success Director - North America, furthering the company's regional expansion and commitment to providing expert, locally aligned support to organizations across the continent. Levinson will lead the development of customer success programs that help businesses strengthen their email security and achieve full compliance with Domain-based Message Authentication, Reporting, and Conformance (DMARC).

The Best SMTP Provider for Fast-Growing FinTech Startups

FinTech startups are rewriting the rules of finance. Neobanks are replacing traditional branches with mobile apps. Payment processors are making cross-border transactions instant. Lending platforms use algorithms instead of loan officers. Buy-now-pay-later services are disrupting credit cards. Crypto exchanges operate 24/7 without banking hours. Your email infrastructure needs to work like enterprise systems from day one, but scale at startup speed. This article explains why Mailtrap Email Delivery Platform is the best SMTP provider for fast-growing FinTech startups.

Phishing Remains the Top Initial Access Vector in Cyberattacks Across Europe

Phishing was the initial access vector for 60% of cyberattacks across Europe between July 2024 and June 2025, according to the European Union Agency for Cybersecurity (ENISA). “With regards to the primary method for initial intrusion, phishing (including vishing, malspam and malvertising) is identified as the leading vector, accounting for about 60% of observed cases,” the agency says.

CSAM Week 3: Don't Take the Phishing Bait

Phishing remains one of the most persistent cyber threats in the digital age. These attacks trick individuals into revealing sensitive information—like passwords, account numbers, or personal details—through emails, texts, or calls that appear to be legitimate.‍ Despite major advances in cybersecurity, attackers continue to refine their tactics.

Multitasking Employees Are Particularly Vulnerable to Phishing Attacks

Employees who multitask are significantly more vulnerable to phishing attacks, according to a study from the University at Albany published in the European Journal of Information Systems. “In real-world settings, users are frequently engaged in other digital tasks when a suspicious message appears, requiring them to momentarily interrupt their workflow,” the researchers write.

New Phishing Campaign Uses AI Tools to Evade Detection

Microsoft warns that a recent phishing campaign used AI technology to obfuscate its payload and evade security filters. “Appearing to be aided by a large language model (LLM), the activity obfuscated its behavior within an SVG file, leveraging business terminology and a synthetic structure to disguise its malicious intent,” the researchers write.

Security Leaders Cite AI-Driven Phishing Attacks as a Top Concern

A new report has found that nearly 40% of security leaders believe their organizations are least prepared for phishing and other social engineering attacks, Help Net Security reports. According to the report from VikingCloud, these concerns are driven by the increasing use of AI tools to assist in cyberattacks. “Generative or agentic AI-driven phishing attacks (51%) are leadership teams’ top concern when it comes to new cyberattack techniques,” the report says.