Sublime has observed an increase in QR code credential phishing attacks over the past several weeks. We've enabled a new scanner to decode QR codes embedded in message bodies or attachments, and pushed new coverage to prevent these attacks: github.com/sublime-securi…

k bye threads.net/@amitchell516

This is so sick. Email -> Attached EML -> Embedded image -> OCR -> NLU to identify a financial request. Outlook/many clients will render an attached EML in the *original* message, making this an effective evasion technique. We've seen this in the wild recently. h/t Aiden Mitchell

Can confirm, it just works. Now it looks like I have a FortiGate at home :p maybe tomorrow it'll look like I have a Sophos firewall

Average age of last reboot time on core switches.

If you're running Sublime Security, you can prevent this at your email perimeter. delivr.to put out a detection for the WinRAR vuln when the CVE initially dropped: share.sublime.security/feeds/delivr-t…

why make employees suffer with these useless assessments, when you could invest in better email security punishing employees for failing phishing tests is not the answer...

Canada 🤝 United States Pick New Speakers

Yeah, I won’t believe it until I see it, what with Google’s history of killing things at random.

Please, everyone, use an ad blocker.

EML attachments are a clever way to bypass traditional analysis because they automatically get rendered and embedded in the original message, without user interaction, by most mail clients: sublime.security/blog/hidden-cr… h/t Aiden Mitchell

Scammers are using distribution lists to hide their tracks while blasting a wide range of targets in this new variant of Living Off the Land (LOTL) + callback phishing attacks. We’ve seen it with trusted brands like Microsoft, Venmo, and PayPal. Learn how the scam works:

🚨 Detection coverage for CVE-2025-21298: 🤝 h/t to our friends at delivr.to for their excellent detection work: github.com/delivr-to/dete… 💪 🔍 Sublime Security 's existing rule flags this too: sublime.security/feeds/core/det…

Park in FSD doesn't work at all, lol

Can someone add me to the US DOT group chat? I just want to talk about trains.