Stay informed with our latest blog posts.
Two critical unauthenticated RCE flaws in PHP core, dubbed PHP2Shell, leaked a day early. What happened, why EOL PHP 5 and 7 installs are the real problem, and what to do now.
Read more: Another Day, Another Core RCE: Welcome to PHP2Shell (CVE-2026-109618 & CVE-2026-109619)
Attackers took over Danfoss refrigeration controllers in hundreds of French supermarkets and heated fridges to 50°C. What failed, which models are affected and how to protect them.
Read more: French Supermarket Fridge Hack: What Happened and How to Prevent It
Police in Japan say a couple hid a mini PC behind a hotel fridge and used the hotel Wi-Fi to send 480,000 credit card phishing emails. How the scheme worked and what it teaches.
Read more: Hidden PC in a Kobe Hotel Sent 480,000 Phishing Emails
Tampered Ledger devices sold through third-party resellers carried a hidden cellular implant that sent seed phrases to attackers. Over $100 million was drained. How to check yours.
Read more: Tampered Ledger Wallets: How the Hidden Implant Steals Seed Phrases
ASCII smuggling hides invisible Unicode tag characters inside words so email filters miss them while people read normal text. How the attack works and how to stop it.
Read more: ASCII Smuggling: How Invisible Unicode Bypasses Email Filters
In September, a threat actor claimed to have access to 38 million records from Argentina's SIPA pension system. ANSES denies a hack. Here's what we know and how the leaked data fuels phishing.
Read more: Argentina SIPA Data Leak Claim: The Phishing Risk Explained
A data breach is often the reconnaissance phase for targeted phishing. How attackers turn leaked personal data into convincing lures, and how to stop the second wave.
Read more: Data Breaches and Spear Phishing: The Second Wave Explained
Learn how to avoid copyright infringement and protect your brand from unauthorized use online. Discover practical tips, DMCA steps, and expert support from PhishFort.
Read more: How to Avoid Copyright Infringements & Trademark Infringements Online
PhishFort detects trustwället[.]com, a phishing clone of Trust Wallet. Learn how attackers steal private keys and how to protect your brand and users.
Read more: Phishing Clone: Trust Wallet Recovery Service Phishing Attack
PhishFort uncovers a large-scale DEX phishing campaign targeting IDEX, Binance DEX, and EtherFlyer. Learn how fake mobile apps stole user data and what this means for crypto security.
Read more: Unraveling a Chain of Dex Phishing Attacks
PhishFort and Fortmatic team up to protect Web3 dApps from phishing attacks. Learn how this partnership enhances crypto security, user trust, and safe authentication for decentralized apps.
Read more: Fortmatic and PhishFort Team Up!
PhishFort and Binance Labs join forces to make crypto safer. Discover how this investment strengthens phishing protection, innovation, and user trust across the global crypto ecosystem.
Read more: PhishFort Teams Up With Binance Labs
Can a hardware wallet get phished? Learn how phishing kits target Trezor and Ledger users, how these scams work, and how to protect your crypto with PhishFort's tools and train
Read more: Can a Hardware Wallet Get Phished?