Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AIDevice Code Phishing Up 1,500% in 2026; Vishing Doubles
Social engineering attacks are experiencing dramatic growth, with device code phishing surging 1,500% in 2026 and vishing incidents doubling. These evolving attack techniques enable threat actors to circumvent established security controls while minimizing their digital footprint, presenting significant challenges for enterprise security teams.
AIUNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign
Google Mandiant and GTIG have identified UNC3753, a financially motivated threat actor conducting a sophisticated data theft extortion campaign targeting U.S. professional, legal, and financial services organizations from January to May 2026. The campaign notably combines vishing (voice phishing) tactics with physical intrusion methods to compromise target organizations.