Cybersecurity researchers have discovered a large-scale phishing campaign using fake CAPTCHA images in PDFs to deliver malware. The files, hosted on Webflow’s content delivery network, redirect victims to harmful websites. Over 1,150 organizations and more than 7,000 users have been affected since 2024, primarily in North America, Asia, and Southern Europe. The attackers upload the files to legitimate online libraries and PDF repositories, directing users to them through SEO tactics.

MedCity Pivot Podcast: Being Clear About Cybersecurity
The current season of a cybersecurity podcast recently featured David Bardan, general manager of the healthcare business at Clear, a company that specialises in confirming