Inside ClickFix: How Fake Prompts Took Over the Web

A security professional working in the threat hunting domain recently identified a suspicious URL specifically targeting macOS users. The campaign appears to leverage a macOS variant of the well-known ClickFix technique, making it particularly noteworthy. Cognisys researchers accepted this challenge to understand this malicious code.

Discover the cascading risks of malicious Connected Apps in Salesforce. Learn how to assess business impact, secure your org, and protect critical infrastructure.

Real social engineering engagement stories: an open SMTP relay let testers phish from the company's own domain, plus vishing lessons and practical tips to strengthen organizational defenses.

Social engineering remains the top way attackers gain entry. This article lists ten questions spanning phishing, vishing, and physical pentesting that help organizations get more from their testing.

NetSPI updates its social engineering offerings with adversarial techniques mimicking real-world phishing and vishing, giving organizations a realistic assessment of human-layer defenses.

For Cybersecurity Awareness Month's 20th anniversary, NetSPI shares four tactics for defending against social engineering, plus education resources and a Monster Mash video on phishing prevention.