Microsoft updated its warning about a serious Windows security flaw called CVE-2026-32202, which affects the Windows Shell and has already been used in real attacks. Although the issue has now been fixed, it could allow attackers to trick users into opening a malicious file and gain access to some private information. Microsoft explained that the flaw involves a failure in protection against spoofing attacks. If exploited, an attacker could view certain sensitive data but would not be able to change it or block access. The company also admitted that some earlier details about the vulnerability, including its severity and exploit status, were incorrect and had to be corrected later.

The flaw was discovered by security researcher Maor Dahan, who said it was caused by an incomplete fix for an earlier vulnerability (CVE-2026-21510), which had been used along with another flaw (CVE-2026-21513) by a hacking group known as APT28. These attacks targeted Ukraine and European Union...

Cybersecurity experts are warning of a widespread email scam targeting Microsoft 365 accounts across more than 340 organizations in the U.S., Canada, Australia, New Zealand, and Germany. First spotted on February 19, 2026, the campaign has been rapidly spreading.

How it works:

• Attackers send convincing fake emails to trick users.
• Victims are directed to pages that appear to be official Microsoft login screens, where they are asked to enter a code.
• Once entered, these codes give the attackers ongoing access to accounts—even if passwords are changed.

Industries affected include construction, healthcare, legal services, finance, real estate, and government.

Experts say the scam is particularly dangerous because it uses real Microsoft login systems, making it hard to spot. Organizations and individuals are advised to take precautions.

How to...

Cybersecurity researchers have discovered a new phishing tool called Sneaky 2FA, which targets Microsoft 365 accounts to steal login credentials and two-factor authentication (2FA) codes. This phishing kit has been active since at least October 2024, and it was first spotted in December 2024 by the French cybersecurity company, Sekoia. The kit has been used on nearly 100 different websites, suggesting that cybercriminals are starting to use it more widely.

The Sneaky 2FA phishing kit is sold as a service, known as Phishing-as-a-Service (PhaaS), by a group called Sneaky Log. They offer this tool through a bot on Telegram. Buyers receive a version of the tool that’s disguised to hide its source code, which they can then use to carry out phishing attacks on their own.

The phishing attacks are designed to trick people into thinking they are receiving an email about a payment receipt. The email contains a link to a fake Microsoft 365 login page, where...

Securi-Trivia: Weekly Quiz (July - Week 3) 

Hello and welcome to this week's Securi-Trivia! This quiz is designed to test your knowledge and reinforce the cybersecurity tips we send out every day. Each week, we'll ask you 10 multiple-choice questions based on the daily tips and awareness we've sent out during the week. The questions will cover a range of topics, including understanding data security and more. To pass the quiz and receive dreampoints, you'll need to get at least an 80% passing score.

Remember, staying safe online is a shared responsibility. Answer the questions to test your knowledge. Make sure to read each question carefully. Don't worry if you don't get them all right on the first try - you can retake the quiz as many times as you like!

Click this link to take the quiz: https://securitytips.cloudstaff.com/quizzes/view/148 

  Hello and welcome to this week's Securi-Trivia! This quiz is designed to test your knowledge and reinforce the cybersecurity tips we send out every day. Each week, we'll ask you 10 multiple-choice questions based on the daily tips and awareness we've sent out during the week. The questions will cover a range of topics, including understanding data security and more. To pass the quiz and receive dreampoints, you'll need to get at least an 80% passing score.

Remember, staying safe online is a shared responsibility. Answer the questions to test your knowledge. Don't worry if you don't get them all right on the first try - you can retake the quiz as many times as you like!

Click this link to take the quiz: https://securitytips.cloudstaff.com/quizzes/view/141

Hello and welcome to this week's Securi-Trivia! This quiz is designed to test your knowledge and reinforce the cybersecurity tips we send out every day. Each week, we'll ask you 10 multiple-choice questions based on the daily tips and awareness we've sent out during the week. The questions will cover a range of topics, including understanding data security and more. To pass the quiz and receive dreampoints, you'll need to get at least an 80% passing score.

Remember, staying safe online is a shared responsibility. Answer the questions to test your knowledge. Don't worry if you don't get them all right on the first try - you can retake the quiz as many times as you like!

Click this link to take the quiz: https://securitytips.cloudstaff.com/quizzes/view/138 

Hello and welcome to this week's Securi-Trivia! This quiz is designed to test your knowledge and reinforce the cybersecurity tips we send out every day. Each week, we'll ask you 10 multiple-choice questions based on the daily tips and awareness we've sent out during the week. The questions will cover a range of topics, including understanding data security and more. To pass the quiz and receive dreampoints, you'll need to get at least an 80% passing score.

Remember, staying safe online is a shared responsibility. Answer the questions to test your knowledge. Don't worry if you don't get them all right on the first try - you can retake the quiz as many times as you like!

Click this link to take the quiz: https://securitytips.cloudstaff.com/quizzes/view/130 

Hello and welcome to this week's Securi-Trivia! This quiz is designed to test your knowledge and reinforce the cybersecurity tips we send out every day. Each week, we'll ask you 10 multiple-choice questions based on the daily tips and awareness we've sent out during the week. The questions will cover a range of topics, including understanding data security and more. To pass the quiz and receive dreampoints, you'll need to get at least an 80% passing score.

Remember, staying safe online is a shared responsibility. Answer the questions to test your knowledge. Don't worry if you don't get them all right on the first try - you can retake the quiz as many times as you like!

Click this link to take the quiz: https://securitytips.cloudstaff.com/quizzes/view/117 

Hello and welcome to this week's Securi-Trivia! This quiz is designed to test your knowledge and reinforce the cybersecurity tips we send out every day. Each week, we'll ask you 10 multiple-choice questions based on the daily tips and awareness we've sent out during the week. The questions will cover a range of topics, including understanding data security and more. To pass the quiz and receive dreampoints, you'll need to get at least an 80% passing score.

Remember, staying safe online is a shared responsibility. Answer the questions to test your knowledge. Don't worry if you don't get them all right on the first try - you can retake the quiz as many times as you like!

Click this link to take the quiz: https://securitytips.cloudstaff.com/quizzes/view/107

Welcome to the 2023 Cybersecurity Awareness Quiz! Test your knowledge on crucial cybersecurity topics in today's digital era. From identifying phishing attempts to securing passwords and recognizing social engineering tactics, this quiz covers essential aspects of online safety. Evaluate your understanding of malware, data protection, network and device security, and incident response. Whether you're an individual or a professional, this quiz aims to enhance your cybersecurity awareness and equip you with practical knowledge to stay secure in our evolving digital landscape. 

Earn 500 DreamPoints by passing this quiz. Good luck!

Login to Security Tips and click on this link to take the quiz: https://securitytips.cloudstaff.com/quizzes/view/106