In-House vs Outsourced Phishing Takedowns
Compare in-house, per-incident and managed phishing takedowns: what each model requires, when it fits, and how to split the work in a hybrid setup.
Read more: In-House vs Outsourced Phishing Takedowns
PhishFort Blog
Our Research and Announcements
Stay informed with our latest blog posts.
Another Day, Another Core RCE: Welcome to PHP2Shell (CVE-2026-109618 & CVE-2026-109619)
Two critical unauthenticated RCE flaws in PHP core, dubbed PHP2Shell, leaked a day early. What happened, why EOL PHP 5 and 7 installs are the real problem, and what to do now.
Read more: Another Day, Another Core RCE: Welcome to PHP2Shell (CVE-2026-109618 & CVE-2026-109619)
Denmark CPR Breach: How "123456" Exposed 8.8 Million People
A leaked "123456" password on a contractor's account gave an attacker access to Denmark's CPR register and 8.8 million records. What failed and how to prevent it.
Read more: Denmark CPR Breach: How "123456" Exposed 8.8 Million People
ASCII Smuggling: How Invisible Unicode Bypasses Email Filters
ASCII smuggling hides invisible Unicode tag characters inside words so email filters miss them while people read normal text. How the attack works and how to stop it.
Read more: ASCII Smuggling: How Invisible Unicode Bypasses Email Filters
Data Breaches and Spear Phishing: The Second Wave Explained
A data breach is often the reconnaissance phase for targeted phishing. How attackers turn leaked personal data into convincing lures, and how to stop the second wave.
Read more: Data Breaches and Spear Phishing: The Second Wave Explained
Digital Risk Protection Services & Tools: The Complete 2026 Guide
What digital risk protection (DRPS) services and tools actually do, how they work, real use cases with results, and how to choose the right provider.
Read more: Digital Risk Protection Services & Tools: The Complete 2026 Guide
Executive Monitoring: Why It's Now Business-Critical
Why executive monitoring has become essential as attackers increasingly target leadership identities through impersonation, deepfakes, and social engineering.
Read more: Executive Monitoring: Why It's Now Business-Critical
Blog
More Cybersecurity posts
How to Send a DMCA Takedown Notice: Step-by-Step Guide
What the DMCA protects, how the takedown process works, the most common infringement scenarios, and how to file a notice that actually gets action.
Read more: How to Send a DMCA Takedown Notice: Step-by-Step Guide
7 Critical Browser Extension Security Risks: How to Stay Safe in 2026
Discover the hidden dangers of browser extension security risks. Learn how attackers use buy-and-infect tactics to compromise your data and how to stay safe.
Read more: 7 Critical Browser Extension Security Risks: How to Stay Safe in 2026
Why Fake Domains and Counterfeit Apps Evade Brand Protection
Fake domains and counterfeit apps evade brand protection because scans run on a schedule. Here's why continuous monitoring closes that gap.
Read more: Why Fake Domains and Counterfeit Apps Evade Brand Protection
How Cloudflare Drop Turned Trusted CDNs Into Phishing Hosts
Cloudflare Drop needs no account to publish a live site. See how trusted CDN abuse on Cloudflare, Vercel, and Netlify is fueling phishing and malware.
Read more: How Cloudflare Drop Turned Trusted CDNs Into Phishing Hosts
SpaceX & Starlink X Hack: How Verified Badge Abuse Happened
Hackers used a fake SpaceXAI-affiliated badge to hijack SpaceX and Starlink's X accounts in a social media account takeover that fueled a $125K rug pull.
Read more: SpaceX & Starlink X Hack: How Verified Badge Abuse Happened
Multimodal AI Jailbreak Attacks: The Image-Based Threat to Enterprise AI
Multimodal AI jailbreak attacks now use images, not text. Learn how visual prompt injection bypasses AI guardrails, and how to stop it.
Read more: Multimodal AI Jailbreak Attacks: The Image-Based Threat to Enterprise AI