Legacy email security systems are excellent at stopping known threats. If a malicious link has been flagged before, or if a sending domain is on a global blacklist, the email gets blocked. But what happens when an attacker uses generative AI to instantly script dozens of highly convincing lookalike domains, pairs them with short-lived disposable domain infrastructure, crafts a hyper realistic fake...

A sophisticated phishing kit named Mirage2FA uses obfuscated HTML and JavaScript to target Microsoft 365 users with multi-factor authentication (MFA) evasion techniques. This attack leverages short-lived domains and local browser execution to steal credentials and potentially intercept MFA codes.

Fortra’s May 2026 Patch Priority Index ranks the month’s most important vulnerabilities by real-world enterprise risk rather than severity score alone. It emphasizes prioritizing internet-facing and network-accessible systems first — especially Palo Alto GlobalProtect, Windows DNS, and Microsoft Exchange — while tracking cloud-side remediated issues separately when no customer patching is required.

FIRE research reveals phishing campaigns abusing Outlook Groups and Microsoft 365 features to blend into workflows and drive credential theft, token capture, and data exposure.

If everything is a zero-day, nothing is. Learn why the term is being misused and why it matters for vulnerability reporting and real-world security risks.

Executive SummaryFortra Intelligence and Research Experts (FIRE) have identified an active phishing campaign targeting high-capital organizations, particularly those operating within the banking sector. The campaign uses evasive techniques to distribute Phantom Stealer, a commercially available Malware-as-a-Service (MaaS) infostealer used to steal credentials, financial data, and sensitive...