Accelerated by:
Certifications:
Light Eyes is part of Apolo Cybersecurity
ENG
ENG
%402x.svg){kind=icon}
The week is marked by a worrying increase in sophisticated cyberattacks on individuals and companies: from invisible phishing campaigns exploiting the Apple Calendar to records in fraud and crypto phishing, not to mention critical vulnerabilities in massive apps such as WhatsApp. We review the 5 key news and their lessons for improving digital resilience to increasingly intelligent and automated threats.
One of the most talked about threats of the week was the rise of phishing through Apple's iCloud calendar. Fraudulent invitations, payment notifications, sweepstakes or “crypto phishing” events are cluttering calendars and managing to evade classic filters, exploiting legitimate resources and deceiving even advanced users. Recommendations: turn off self-acceptance of events and frequently review shared calendars.
Phishing focused on digital assets remains at record highs. More than 12 million dollars stolen in August and a 72% increase in victims that month alone. Ethereum-related fraud, smart contracts and “scam-as-a-service” tools predominate, as well as attacks on fake wallet websites and non-existent commission refunds. Training and verification before signing transactions are essential.
WhatsApp and Apple have released an urgent update for iOS and Mac after detecting a critical breach exploited with “zero-click” techniques, which allowed attackers to access conversations and private information. The exploit combined errors in WhatsApp and iOS, especially affecting journalists and high-profile users, but putting all unupdated users at risk. If you have an Apple device, apply the patch immediately.
Ransomware cases continue to multiply globally: in the last week, more than 100 new victims have been published on leak portals, including health, manufacturing and financial services entities. The speed of exploitation of newly disclosed vulnerabilities and the use of artificial intelligence by attackers set the pace of a threat that will continue this fall.
Malicious email campaigns break their own record, with more than 100 million threats detected this year and a growth of 31% compared to 2024. Email remains the primary gateway for ransomware infections, credential theft, and targeted attacks.
Do you want to know if your company or team is ready to face these attacks?
.webp)