Security tips, product updates, and threat intelligence. RSS feed
About 378,000 reported phishing sites blocked for free and checked on your device, a warning on fake virus pages before you call the number, and a fix for plain http:// pages.
Read more →A heads-up when a site you sign in to has had a data breach, and a private check that tells you if the password you type has already leaked. Powered by Have I Been Pwned.
Read more →Microsoft and UK police take down EvilTokens, Revolut customers get phishing texts days after a breach, fake Bitrefill checkouts turn up in search results, and a Zoom/DocuSign wave hits inboxes.
Read more →An SMS says you owe a traffic fine. The link opens a copy of the Parivahan site that only takes cards, or asks you to install "RTO Challan.apk". How the scam works and how to check a challan safely.
Read more →No fake login page, no stolen password. The victim signs in on the real Google or Microsoft page and clicks Allow, and a malicious app keeps access even after a password change.
Read more →A technique from AI prompt-injection research turned up in a phishing campaign that peaked at 2.37 million messages a day. The words look normal to you, but the filter reads something different.
Read more →Callers pose as the IT helpdesk, push an urgent "security migration", and send employees to login portals that capture passwords and MFA codes as they are typed. Ransom demands reach $3 million.
Read more →A pages-checked count on the toolbar, a weekly safety report, a what-to-do-now guide for bad clicks, detection for common Indian scam pages, and rupee pricing.
Read more →Pay in two clicks with no account, a one-time heads-up on the day the trial ends, two checks that never expire, and a fix for paid status carrying over to a new account.
Read more →Lookalike and homograph domain detection, live re-scanning on SPA navigation and DOM changes, deeper secret scanning, and a more accessible warning modal.
Read more →The EvilTokens wave ships its page as encrypted code that only decrypts inside your browser, so URL and email scanners see nothing. Why the browser is the real blind spot.
Read more →Okta warns of a vishing campaign that calls employees, walks them through a fake Microsoft Entra passkey setup, and quietly registers the attacker's own passkey on the real account.
Read more →A 24-billion-record credential database built from infostealer logs and enriched with live CVE data was found exposed. Why it fuels credential stuffing - and what actually helps.
Read more →The GitBait campaign abused GitHub Pages to host fake banking portals, borrowing a trusted domain's reputation to steal logins and card details. Why trusted-host phishing works.
Read more →A look at why OAuth consent and redirect abuse is rising, and how to spot risky authorization flows.
Read more →Extensions injecting ads and redirects can push users into phishing pages; how to audit extensions and reduce risk.
Read more →Understanding MFA fatigue and steps to reduce exposure, including phishing-resistant second factors and browser signals.
Read more →Why supply-chain or provider-abuse phishing via SMS is growing, and what to check in the browser after clicking links.
Read more →A practical mitigation guide for consent settings, redirect review, user education, browser checks, and response steps.
Read more →A recent europa.eu breach tied to a compromised cloud account is a reminder that public-facing infrastructure can still expose directories, keys, and documents with real downstream risk.
Read more →CareCloud's SEC filing shows why a short-lived healthcare breach can still become material when patient information may have been reachable or exfiltrated.
Read more →What security creators should look for in affiliate products and why narrower browser-security SaaS can be easier to recommend credibly.
Read more →A practical look at browser-security affiliate programs, what audiences actually care about, and why phishing-focused tools are easier to explain honestly.
Read more →How creators can write affiliate content that still feels credible, especially in privacy, security, and technical niches.
Read more →Microsoft says attackers are abusing legitimate identity-provider redirects to move users from trusted login URLs to phishing pages and malware.
Read more →The FBI says criminals are using real permit details and urgent payment lures to make city and county phishing emails feel routine.
Read more →A fake purchase-order attachment reported this month shows how a browser page can hide inside a so-called PDF and steal business credentials.
Read more →Researchers say a fake Google security page is abusing PWA installation and browser permissions to steal OTPs, contacts, and more.
Read more →A recent report says a fake Meet update page can push users into attacker-controlled device management without starting with a password prompt.
Read more →Nearly 900 Starbucks employees were reportedly affected after phishing sites impersonated the company's HR portal. Here is why HR logins are such a high-value target.
Read more →Why ordinary users and teams keep getting hurt by browser-level risk, and why the modern web is very good at looking trustworthy while doing something dangerous underneath.
Read more →Fake verification pages are increasingly telling users to paste commands into Run or PowerShell. Here is why that is dangerous and what to do if you already did it.
Read more →A lot of scam pages only want one thing from you: notification permission. Here is what happens after that click and how to undo it.
Read more →A practical response guide for suspicious QR scans, including what matters if you only opened the page, entered a password, or made a payment.
Read more →Mobile screens hide context attackers want you to miss. Here is why suspicious pages often feel more convincing on phones.
Read more →Why extension permissions matter more than most users think, and how session theft risk fits into the broader browser-security picture.
Read more →Modern phishing pages are built to feel familiar in the first two seconds. Here is why they work and what still gives them away.
Read more →Polished phishing emails are the dangerous ones. Learn the signs that still matter when a message looks professional.
Read more →Why a dangerous page can still look normal before any browser warning appears, and why attackers rely on that delay.
Read more →The lock icon helps, but it does not eliminate every risk on public Wi-Fi. Here is what still matters.
Read more →One stolen Microsoft 365 login can expose an entire workday. Here is what to check before entering your password.
Read more →You clicked the link. You entered your password. Now what? A step-by-step guide to limiting the damage — from changing passwords to freezing accounts.
Read more →Before you enter your password, check these 7 things. Most phishing pages fail at least two of them — if you know what to look for.
Read more →If you're storing JWTs in localStorage, every script on the page can read them. That's not a bug — it's how localStorage was designed. Here's why it matters and what to do instead.
Read more →API keys are the passwords of the modern web. When they leak, attackers get direct access to your cloud infrastructure, payment systems, and user data. Here's everything you need to know.
Read more →What to do next depends on what happened: whether you only clicked, entered a password, shared payment details or downloaded a file. A step-by-step triage.
Read more →Still getting the warning after a virus scan? It is almost always a site allowed to send notifications. Exact steps for Chrome, Edge, Firefox, Safari, Android and iPhone.
Read more →A practical guide to protecting elderly parents from phishing, tech support scams and fake virus popups — without being condescending about it.
Read more →Comparison hub
All comparison pages in one crawlable hub for buyers and researchers.
Threat guide
How phishing works, real examples, and how to protect yourself.
Threat guide
How HTTPS gets silently downgraded and why HSTS isn't enough.
Threat guide
Invisible card skimmers injected into legitimate checkout pages.
Threat guide
Clickjacking, credential theft, and crypto mining via invisible iframes.
Comparison
20 on-device checks alongside Google's blocklist.
Comparison
Page analysis vs blocklist blocking — detailed breakdown.
Comparison
Page analysis compared with reputation and enterprise-friendly protection.
Comparison
Site reputation vs live browser-side analysis of phishing behavior.
Feature
Detect exposed API keys and credentials on any web page.
Feature
Catch leaked session tokens before attackers can use them.
Feature
Catch silent protocol downgrades from HTTPS to HTTP.
Feature
Find invisible iframes used for credential theft and clickjacking.
Threat guide
How attackers steal active sessions and what you can do about it.
Threat guide
Why reused passwords turn one breach into dozens.
Comparison
Ad blocking vs phishing detection — different tools, different jobs.
Comparison
Download and destination warnings versus on-page phishing analysis.
Comparison
Safe-search reputation help versus local browser threat analysis.
Last updated: