Cybersecurity Research

Read our researchers' latest original findings and threat analysis

Categories:

Featured Article

SVG Phishing Email Attachments (Mini-Report 2025)

The meteoric rise of SVG Phishing Email Attachments and the decline of malicious QR Codes are one big finding in this H1 2025 Phishing Trends Mini-Report. Most-targeted industries are another.

Read the article

Topics:

SVG Phishing Email Attachments (Mini-Report 2025)

The meteoric rise of SVG Phishing Email Attachments and the decline of malicious QR Codes are one big finding in this H1 2025 Phishing Trends Mini-Report. Most-targeted industries are another.

Adobe Acrobat Scam Emails: Insights From Our Threat Team

This phishing campaign preys on people's curiosity by sending them an unexpected notification about a signed agreement that appears to come from Adobe Acrobat Sign.

AI-Powered Phishing Outperforms Elite Cybercriminals in 2025

Hoxhunt research proves AI agents can outperform elite red teams in phishing. Generative AI can be used in cybersecurity for good or evil. We can use AI spear phishing agents for defense.

Top 3 Phishing Factors: Time, Desktop, Mobile

Original Hoxhunt research shows stark differences between threat reporting and click rates between the top 3 phishing factors of time of day and desktop vs. mobile device.

What CISOs & Security Awareness teams can learn from the 2024 Verizon DBIR

Petri Kuivala, long-time CISO and Advisor at Hoxhunt, has read every Verizon Data Breach Investigations Report (DBIR) going back 17 years. Get his perspective on the latest 2024 report.

Recreating the NSA's QuantumInsert attack technique

Pontus K. hacked together a DIY variation of the NSA's QuantumInsert attack technique. Be very afraid. Until ISPs fix some loopholes, it's a lethal potential attack.

Adobe Acrobat Scam Emails: Insights From Our Threat Team

This phishing campaign preys on people's curiosity by sending them an unexpected notification about a signed agreement that appears to come from Adobe Acrobat Sign.

Threat feed week 14: IT and HR Impersonations, and more phishing attacks

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Threat feed week 13:Starbucks, Microsoft, PayPal, Apple Pay, and more phishing attacks

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Threat feed week 10: EasyPark, eBay, Microsoft, Disney+ and other phishing scams

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Threat feed week 9: UPS, PostNord, Danske Bank, and more impersonations

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Threat feed week 8: National Bank of Greece, Posti, and S-Pankki Impersonations

Hoxhunt's Threat Feed is a summary of the past week's live phishing campaigns and email threats, delivered to your inbox every Friday.

Top 3 Phishing Factors: Time, Desktop, Mobile

Original Hoxhunt research shows stark differences between threat reporting and click rates between the top 3 phishing factors of time of day and desktop vs. mobile device.

Practical phishing and cybersecurity behavior trends for awareness leaders

Petri Kuivala is a CISO who made sure the Phishing and Cybersecurity Behavior Trends report avoids FUD and gives practical insights to awareness leaders

Threat Intelligence Report: Adversary-in-the-Middle and other phishing trends

Hoxhunt's Threat Intelligence Report shows concerning spike in MFA and session harvesting (AiTM) and illustrates other trends in phishing and human risk. Download the full report for free.

Insights From the Hoxhunt Cybersecurity Human Risk Benchmark

22% Of Phishing Attacks Used QR Codes in October. We Did a Benchmark Study To See if Users Were Able to Spot Phishing Attacks Using Them. Read the Results.

How I Used HOXINSERT in an Attack Vector Against OWA And Windows

Find Out How Our Offensive Security Engineer Used Their Version of QUANTUMINSERT, HOXINSERT, Against The Outlook Web App.

How I Created My Version of NSA’s AotS QUANTUMINSERT Attack

Learn About the AotS Technique, QUANTUMINSERT, Used by the NSA’s Tailored Access Operations (TAO). Then, Find Out How Our Offensive Security Engineer Created Their Own Variant Called HOXINSERT.

Many cybersecurity trends and takeaways for 2022 revolve around Ukraine

From the cyber war spilling out of Ukraine to the evolution of AI and the rise of Zero Trust architecture and Security Behavior Change Programs, 2022 contained multiple inflection points

Gone Phishin' Volume 7: Early to mid October, 2022

Some of the news highlights for the last two weeks in the wild, wild world of cybersecurity.

Gone Phishin' Volume 6: Mid-to-late September, 2022

It's another action-packed edition of our Gone Phishin' column, where we keep you updated on the biggest, bestest stories in cybersecurity of the last two weeks.

GTA 6 leaks and Uber hacked through social engineering

Over the course of three days, two massive American companies were rocked by two equally massive leaks using one simple phishing technique.

Gone Phishin' Volume 5: early-to-mid September 2022

Your bi-weekly update on the biggest news in phishing, hacking, and cybersecurity.

Gone Phishin': Volume 4 - Late August, 2022

Your bi-weekly round up of the latest news you can use about phishing, hacks, and other attacks.

See also :

Resource Hub Home