Microsoft has disrupted the AI-powered EvilTokens phishing platform, which compromised 12,000 email accounts globally, leading to two arrests in the United Kingdom.
A coordinated effort led by Microsoft has disrupted EvilTokens, a phishing-as-a-service operation that used AI to compromise thousands of Microsoft accounts.
More than 100 fraudulent websites are impersonating popular AI assistants to sell fake subscriptions, risking sensitive enterprise data through unauthorised file uploads.
A Gartner report reveals that 41% of CISOs have experienced deepfake audio attacks, prompting calls for immediate updates to incident response protocols.
Attackers are impersonating IT helpdesk staff to trick employees into enrolling fake passkeys, allowing them to hijack Microsoft 365 identities and access cloud data.
