Record · corpus.blog/posts/01a0fb44-61f6-73c9-91f4-3518bf773ca1

Browser threat landscape: mid-year update 2026

pushsecurity.com · published 10 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at pushsecurity.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 49
Words captured: 2,612

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.securityweek.com/panera-bread-data-breach-linked-to-shinyhunters-sso-campaign/

securityweek.com

https://www.bleepingcomputer.com/news/security/match-group-breach-exposes-data-from-hinge-tinder-okcupid-and-match/

bleepingcomputer.com

https://cloud.google.com/blog/topics/threat-intelligence/expansion-shinyhunters-saas-data-theft

cloud.google.com

https://www.bleepingcomputer.com/news/security/shinyhunters-extortion-gang-claims-odido-breach-affecting-millions/

bleepingcomputer.com

https://www.bleepingcomputer.com/news/security/adt-confirms-data-breach-after-shinyhunters-leak-threat/

bleepingcomputer.com

https://www.bleepingcomputer.com/news/security/charter-communications-data-breach-affects-49-million-accounts/

bleepingcomputer.com

https://www.theregister.com/2026/04/24/shinyhunters_claim_cruise_giant_carnivals/

theregister.com

https://www.theregister.com/2026/04/28/pitney_bowes_is_the_latest/

theregister.com

https://www.bleepingcomputer.com/news/security/ad-tech-firm-optimizely-confirms-data-breach-after-vishing-attack/

bleepingcomputer.com

https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift

cloud.google.com

https://hackread.com/pink-extortion-microsoft-365-cloud-data-vishing-scams/

hackread.com

https://cloud.google.com/blog/topics/threat-intelligence/unc6671-targets-financial-services-and-enterprise-cloud-environments

cloud.google.com

https://www.bleepingcomputer.com/news/security/new-helix-vishing-group-emerges-in-sharepoint-data-theft-attacks/

bleepingcomputer.com

https://www.bleepingcomputer.com/news/security/kongtuke-hackers-now-use-microsoft-teams-for-corporate-breaches/

bleepingcomputer.com

Hackers target travelers through hotel and public Wi‑Fi networks

microsoft.com

https://cloud.google.com/blog/topics/threat-intelligence/chinese-language-phishing-services/

cloud.google.com

https://www.microsoft.com/en-us/security/blog/2025/02/13/storm-2372-conducts-device-code-phishing-campaign/

microsoft.com

https://thehackernews.com/2026/05/the-new-phishing-click-how-oauth-consent.html

thehackernews.com

https://www.huntress.com/blog/kali365-device-code-phishing-kit

huntress.com

https://blog.talosintelligence.com/artoken-inside-an-eviltokens-affiliate-panel-targeting-microsoft-365/

blog.talosintelligence.com

https://cybersecuritynews.com/top-10-phishing-kits-used-by-hackers/

cybersecuritynews.com

https://www.cloudsek.com/blog/bluekit-phishing-as-a-service-phaas

cloudsek.com

https://abnormal.ai/blog/blacksite-aitm-phishing-kit-cloaked-gg

abnormal.ai

https://threatactix.com/2026/07/02/a-rare-look-inside-the-command-and-control-panel-behind-modern-phishing-operations/

threatactix.com

https://zerobec.com/blog/sneaky-2fa-returns-trusted-sender-tenant-branded-microsoft-365-replay

zerobec.com

https://blog.barracuda.com/2026/06/29/email-threat-radar-june-2026

blog.barracuda.com

https://sublime.security/blog/flowerstorm-unleashes-the-krakvm-phaas-operators-turn-to-vm-based-obfuscation/

sublime.security

https://securitylabs.datadoghq.com/articles/behind-the-console-aws-aitm-phishing-kit-and-beyond/

securitylabs.datadoghq.com

https://blog.sekoia.io/unveiling-errtraffic-inside-a-growing-clickfix-malware-distribution-framework/

blog.sekoia.io

ClickFix: The Gift That Keeps On Giving Read at the source ↗

kqlquery.com

https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/

bleepingcomputer.com

Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks Read at the source ↗

blog.xlab.qianxin.com

https://thehackernews.com/2026/07/bluenoroff-zoom-phishing-kit-profiles.html

thehackernews.com

https://socradar.io/blog/dprk-clickfake-pylangghost-golangghost-rats/

socradar.io

https://www.darkreading.com/cyberattacks-data-breaches/silent-ransom-us-law-firms-extortion-attacks

darkreading.com

https://www.crowdstrike.com/en-us/adversaries/chatty-spider/

crowdstrike.com

https://www.theinsurer.com/ti/news/exclusive-weil-gotshal-paid-double-digit-millions-in-suppression-payment-to-luna-2026-05-27/

theinsurer.com

https://www.ic3.gov/CSA/2026/260526.pdf

ic3.gov

https://www.okta.com/blog/threat-intelligence/behind-the-scenes-of-a-vishing-operation/

okta.com

https://www.zscaler.com/blogs/security-research/helpdesk-hijackers-teams-vishing-quick-assist-and-gogrpc-backdoor

zscaler.com

https://www.bleepingcomputer.com/news/security/vimeo-data-breach-exposes-personal-information-of-119-000-people/

bleepingcomputer.com

https://www.bleepingcomputer.com/news/security/klue-oauth-breach-victim-list-grows-as-icarus-hackers-claim-attack/

bleepingcomputer.com

https://www.huntress.com/blog/railway-paas-m365-token-replay-campaign

huntress.com

https://thehackernews.com/2026/07/exposed-server-reveals-ai-assisted.html

thehackernews.com

https://thehackernews.com/2026/07/misconfigured-server-reveals-three.html

thehackernews.com

https://www.varonis.com/blog/dolphin-x-stealer

varonis.com

https://www.huntress.com/blog/fakeagent-claude-desktop-malvertising-ends-in-dotnet-rat

huntress.com

https://www.huntress.com/blog/macsync-stealer-rat-reverse-engineering

huntress.com

https://www.linkedin.com/in/daniel-g-/

linkedin.com

Elsewhere on pushsecurity.com (13)

https://pushsecurity.com/blog/scattered-lapsus-hunters

pushsecurity.com

The three attack techniques behind ShinyHunters' 2026 campaigns Read at the source ↗

pushsecurity.com

https://pushsecurity.com/blog/scattered-spider-defending-against-help-desk-scams

pushsecurity.com

https://pushsecurity.com/blog/unpacking-the-latest-slh-campaign

pushsecurity.com

Device code phishing attacks have skyrocketed: here’s what you need to know Read at the source ↗

pushsecurity.com

Unpacking the Vercel breach: A cautionary tale for Shadow AI and OAuth sprawl Read at the source ↗

pushsecurity.com

Device code phishing attacks have skyrocketed: here’s what you need to know Read at the source ↗

pushsecurity.com

https://pushsecurity.com/blog/mfa-downgrade-attacks

pushsecurity.com

We infiltrated a criminal phishing panel: here’s what we found Read at the source ↗

pushsecurity.com

Unpacking the Vercel breach: A cautionary tale for Shadow AI and OAuth sprawl Read at the source ↗

pushsecurity.com

We infiltrated a criminal phishing panel: here’s what we found Read at the source ↗

pushsecurity.com

LLMShare: how attackers are turning AI chatbot pages into malware delivery platforms Read at the source ↗

pushsecurity.com

The Pyramid of Pain in the AI era: Why technique-level detection matters more than ever Read at the source ↗

pushsecurity.com