Latest News About Phishing

Here are the latest phishing news highlights from reputable tech and security outlets:

• FBI warns of Kali365 phishing service targeting Microsoft 365 accounts, abusing OAuth device codes to steal session tokens and bypass MFA. This underscores how modern phishing kits are weaponizing OAuth flows to evade controls [source coverage: BleepingComputer reporting May 25, 2026].
• New vishing platforms using AI voice agents automate credential harvesting, raising the stakes for social-engineering attacks in the voice channel. Analysts note fully automated voice phishing campaigns are evolving and expanding attack surfaces [source coverage: BleepingComputer reports April 16, 2026].
• Law enforcement action: FBI and international partners dismantled a phishing kit developer operation (W3LL) in a coordinated takedown, illustrating ongoing enforcement against phishing infrastructure [source coverage: BleepingComputer reporting April 13, 2026].
• AI-enabled phishing and credential stealing continue to rise across campaigns, with researchers observing increases in phishing activity attributed to AI-assisted tooling and automation [source coverage: multiple outlets around May 2026].
• Security vendors and researchers are highlighting improvements in browser-based defense and safer authentication approaches, including efforts to curb credential theft and reduce successful MFA bypass attempts [source coverage: ongoing industry reporting through May 2026].

What this means for users in Dallas, TX:

• Be particularly cautious of OAuth consent prompts appearing in phishing emails or messages, as attackers increasingly leverage legitimate-looking OAuth flows to hijack accounts.
• Expect more voice-based (vishing) phishing attempts, including calls or AI-generated voice messages pretending to be representatives of trusted organizations.
• Keep MFA enabled with phishing-resistant factors where possible (e.g., hardware security keys), and be wary of any login prompts you did not initiate.

If you’d like, I can tailor a quick security brief for your home or business network in Dallas, or pull more detailed summaries from specific outlets (e.g., FBI alerts, Infosecurity Magazine, Rapid7) with direct links. I can also provide a short checklist to spot and report phishing attempts or help you draft user-awareness tips for a small team.