Cybersecurity Research

Read our researchers' latest original findings and weekly threat feeds

Subscribe to the weekly Hoxhunt threat feed email

Categories:

Resource Hub

Topics:

Threat Feed Week 47

Week 47 Threat Feed | Black Friday, Cash Awards, Donations, and Impersonations, Including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and More

Threat Feed Week 46

Week 46 Threat Feed | Microsoft, QuickBooks, Outlook, Chase Bank Impersonations, QR Codes, and Crypto Phishing Emails

Threat Feed Week 45

Week 45 Threat Feed | Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, Law Firms, and Telecommunications Impersonations

Threat Feed Week 44

Week 44 Threat Feed | Microsoft, DocuSign, McAfee, Cryptocurrency, Debt Collections, Postal Service, Telecommunication, Banking, Insurance, and Police Impersonations

Threat Feed Week 43

Week 43 Threat Feed | DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg Police, and German Postal Service Impersonations

Threat Feed Week 42

Week 42 Threat Feed | PayPal, Outlook, Microsoft, DocuSign, McAfee, Santander, Other Impersonations, and Bitcoin Extortion

Threat Feed Week 47

Week 47 Threat Feed | Black Friday, Cash Awards, Donations, and Impersonations, Including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and More

Threat Feed Week 46

Week 46 Threat Feed | Microsoft, QuickBooks, Outlook, Chase Bank Impersonations, QR Codes, and Crypto Phishing Emails

Threat Feed Week 45

Week 45 Threat Feed | Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, Law Firms, and Telecommunications Impersonations

Threat Feed Week 44

Week 44 Threat Feed | Microsoft, DocuSign, McAfee, Cryptocurrency, Debt Collections, Postal Service, Telecommunication, Banking, Insurance, and Police Impersonations

Threat Feed Week 43

Week 43 Threat Feed | DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg Police, and German Postal Service Impersonations

Threat Feed Week 42

Week 42 Threat Feed | PayPal, Outlook, Microsoft, DocuSign, McAfee, Santander, Other Impersonations, and Bitcoin Extortion

Insights From the Hoxhunt Cybersecurity Human Risk Benchmark

22% Of Phishing Attacks Used QR Codes in October. We Did a Benchmark Study To See if Users Were Able to Spot Phishing Attacks Using Them. Read the Results.

How I Used HOXINSERT in an Attack Vector Against OWA And Windows

Find Out How Our Offensive Security Engineer Used Their Version of QUANTUMINSERT, HOXINSERT, Against The Outlook Web App.

How I Created My Version of NSA’s AotS QUANTUMINSERT Attack

Learn About the AotS Technique, QUANTUMINSERT, Used by the NSA’s Tailored Access Operations (TAO). Then, Find Out How Our Offensive Security Engineer Created Their Own Variant Called HOXINSERT.

Adding Customization Features To Phishing Pages With Cloudflare Workers

Learn How Malicious Actors Use Cloudflare Workers To Build an On-The-Fly Custom Feature for Phishing Web Pages. Find Out How Our Offensive Security Engineer Figured It Out.

Insights into human cyber-risk in critical infrastructure

Key takeaways of the Human Risk Report

Human Cyber-Risk Report – Critical Infrastructure

See How Security Behavior Change Helps Stop Human Cyber-Risk in Critical Infrastructure. This Report Reveals Insights from an Analysis of 15M Phishing Simulations & Email Attacks by 1.6M People.

Many cybersecurity trends and takeaways for 2022 revolve around Ukraine

From the cyber war spilling out of Ukraine to the evolution of AI and the rise of Zero Trust architecture and Security Behavior Change Programs, 2022 contained multiple inflection points

Gone Phishin' Volume 7: Early to mid October, 2022

Some of the news highlights for the last two weeks in the wild, wild world of cybersecurity.

Gone Phishin' Volume 6: Mid-to-late September, 2022

It's another action-packed edition of our Gone Phishin' column, where we keep you updated on the biggest, bestest stories in cybersecurity of the last two weeks.

GTA 6 leaks and Uber hacked through social engineering

Over the course of three days, two massive American companies were rocked by two equally massive leaks using one simple phishing technique.

Gone Phishin' Volume 5: early-to-mid September 2022

Your bi-weekly update on the biggest news in phishing, hacking, and cybersecurity.

Gone Phishin': Volume 4 - Late August, 2022

Your bi-weekly round up of the latest news you can use about phishing, hacks, and other attacks.

Cybersecurity Research

Featured Article

Insights From the Hoxhunt Cybersecurity Human Risk Benchmark

Threat Feed Week 47

Threat Feed Week 46

Threat Feed Week 45

Threat Feed Week 44

Threat Feed Week 43

Threat Feed Week 42

Threat Feed Week 47

Threat Feed Week 46

Threat Feed Week 45

Threat Feed Week 44

Threat Feed Week 43

Threat Feed Week 42

Insights From the Hoxhunt Cybersecurity Human Risk Benchmark

How I Used HOXINSERT in an Attack Vector Against OWA And Windows

How I Created My Version of NSA’s AotS QUANTUMINSERT Attack

Adding Customization Features To Phishing Pages With Cloudflare Workers

Insights into human cyber-risk in critical infrastructure

Human Cyber-Risk Report – Critical Infrastructure

Many cybersecurity trends and takeaways for 2022 revolve around Ukraine

Gone Phishin' Volume 7: Early to mid October, 2022

Gone Phishin' Volume 6: Mid-to-late September, 2022

GTA 6 leaks and Uber hacked through social engineering

Gone Phishin' Volume 5: early-to-mid September 2022

Gone Phishin': Volume 4 - Late August, 2022