[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

3 clusters · 21 sources · 7 days · First seen · Last updated

Evolution of sophisticated cybersecurity threats

Overview

Cybersecurity threats are evolving toward more sophisticated methods designed to bypass traditional security measures like biometrics and multi-factor authentication. Early reports highlight the ‘BitB’ or ‘browser in the browser’ phishing technique, which uses fake browser windows within legitimate sites to mimic authentic login pop-ups. Additionally, attackers are injecting malicious code into mobile banking applications to manipulate transfers and bypass facial recognition.

As the threat landscape shifts, there is a growing trend of moving away from technical system breaches toward the exploitation of identities and legitimate credentials. Attackers are increasingly utilizing social engineering—including phishing, smishing, and vishing—to target human habits. Notable methods include device-code phishing, where criminals misuse native authorization flows in cloud environments to trick users into completing authentication processes for sessions initiated by the attacker.

Recent data underscores this shift toward identity-based attacks. The 2025 Data Breach Investigations Report indicates that 22% of analyzed breaches involving an identified initial access vector involved the misuse of credentials. Furthermore, third-party involvement in data breaches reached 30%, doubling from the previous year. Experts warn that valid passwords do not guarantee protection, as risks often stem from compromised accounts or employees with excessive permissions.

Alonso Ramírez, regional Cybersecurity Manager at GBM, emphasizes that organizations must move beyond preventing unauthorized access to monitoring what actions users perform with valid credentials. This is critical as the attack surface expands toward mobile channels and cloud-based workplace services like Zoom, Outlook, and Teams.

Entities

WOM · Google · Kaspersky · Outlook · Safari

Timeline

  1. [TECHNOLOGY] 2 sources
    Cybersecurity risks increase as credential misuse and third-party access drive data breaches

    The 2025 Data Breach Investigations Report shows that credential misuse and third-party access are rising risks, with third-party involvement in breaches doubling to 30% over the previous year.

  2. [TECHNOLOGY] 3 sources
    Cyberattacks shift from technical breaches to identity theft

    Cyberattacks are increasingly bypassing technical defenses by using legitimate logins, social engineering, and device-code phishing to exploit identities and cloud services.

  3. [TECHNOLOGY] 15 sources
    Cybersecurity threats evolve with BitB phishing and mobile app exploits

    Cybercriminals are using advanced 'browser in the browser' (BitB) phishing and mobile app code injection to bypass biometrics and steal credentials, highlighting a critical need for improved digital security.

Sources

cloudcomputing-insider.de · deultimominuto.net · elnuevodiario.com.do · fmm-magazin.de · ictk.ch · impactoinformativo.com.ar · laregion.es · limite42.com · mentepost.com · noticiasdemalaga.es · noticiaspv.com.mx · notiulti.com · panamaamerica.com.pa · radioconaguante.com.ar · radiotvsierras.com · santafederf.com.ar · schweiznews.ch · temucotelevision.cl · tierramarillano.cl · tn.com.ar · tolhuinprimero.com

This summary has been updated 1 time: see revision history