Trust me, I’m legit.

This podcast/newsletter roundup highlights several ongoing cyber incidents and scams: a massive USDA loan fraud scheme perpetrated by a serial fraudster, ShinyHunters conducting targeted voice phishing and bespoke phishing kits to compromise Okta SSO and steal MFA for data theft and extortion, and an active LastPass impersonation phishing campaign designed to capture master passwords and expose stored credentials.