Tag

#social engineering

2026-06-04 8 min read threat intel

Nobody Broke the Encryption: Inside the 2026 Vishing Breach Wave

Charter, Carnival, DentaQuest — millions of records gone this spring, and not one attacker touched the cryptography. They phoned an employee. Why the centralized account, not the cipher, is the real attack surface.

data-breach social-engineering centralization shinyhunters vishing

2026-06-01 9 min read threat intel

The Phishers Stopped Attacking Signal's Crypto and Started Attacking Its Users

In May 2026 Signal shipped anti-impersonation warnings, and a phishing campaign began tricking journalists into pasting their 64-character recovery key into chat. When the cipher is unbreakable, the attack moves to recovery and device-linking. What that means for anyone who designs a PIN.

signal phishing social-engineering recovery-key account-security