Watch Out For Scammers Pretending To Be FDIC Or OIG Officials

Scammers are increasingly pretending to be officials from the Federal Deposit Insurance Corporation (FDIC) or the FDIC Office of Inspector General (OIG). Reaching you by phone, email, text, or even via social media and demanding money or personal information. According to an alert from the FDIC OIG, these impersonation scams often use official-sounding names, real official-looking seals or logos, and urgent or threatening language to seem legitimate. READ FULL STORY

Cyber Thieves Stuff Some Chiken With Your Credentials

Thousands of Chick-fil-A customers are being reminded why reusing passwords can be risky after cybercriminals targeted customer loyalty accounts in a credential stuffing attack. Instead of breaking into Chick-fil-A's systems, attackers used usernames and passwords stolen from previous data breaches at other companies to try logging into customer accounts. The incident serves as another reminder that one reused password can put multiple online accounts at risk, even when the company itself has not been hacked. READ FULL STORY

Ransomware Attacks on FIs Are Rising-Here's Why Every Customer Should Pay Attention

When hackers target a bank, they're not just after the bank's money. They may be trying to steal customer information, disrupt online services, or pressure financial institutions into paying enormous ransoms. Security researchers say ransomware attacks against banks, credit unions, and financial technology companies continue to climb, fueled by increasingly organized cybercriminal groups. While your deposits remain protected in most cases, these attacks can still lead to service outages, delayed transactions, and a greater risk of scams targeting customers. Here's what you need to know. READ FULL STORY

A Quick Look at a Verizon’s Data Breach Investigations Report

Cybercriminals aren't just getting smarter. They're getting richer. Verizon's latest Data Breach Investigations Report reveals ransomware continues to dominate, third-party breaches are surging, and artificial intelligence is creating new opportunities for accidental data leaks and more convincing attacks. From healthcare and financial institutions to retailers and government agencies, no industry is immune. The report also reinforces a simple truth: Technology alone isn't enough to stop today's threats. As hackers continue to exploit human behavior, awareness and cybersecurity education remain among the most effective defenses for businesses and consumers alike. READ FULL STORY

Critical Malware Threat Targets Gmail and Outlook

Recently, a critical email threat targeting Gmail and Outlook users has come to light. Security researchers have identified malware campaigns distributing VIP Keylogger and 0bj3ctivityStealer threats, which can compromise these users. They are designed to steal PII and other information by gathering keystrokes and taking screenshots. HP Wolf Security is warning of a malware threat that hides inside images that are delivered to the inboxes of Gmail and Outlook users. READ FULL STORY

Are Text Message Sign-In Links Safe?

Millions of people may be unknowingly exposed by “sign-in” links sent via text message. A recent study from researchers at several universities in the U.S. found that poorly secured SMS login links can be guessed or reused by attackers, opening the door to account takeovers and data theft. While it's convenient to not have to create an account and keep track of yet another password, those links often have predictable or weak security tokens at the end of their URLs. Attackers with only basic tools can guess or tweak these tokens to access other users’ accounts.  READ FULL STORY

81 Million Login Attempts Later: Why Reusing Passwords Is Still So Dangerous

More than 81 million login attempts targeted Microsoft 365 accounts in just two weeks, according to security researchers tracking a massive password-spraying campaign. Rather than trying to crack a single account, cybercriminals tested stolen usernames and commonly used passwords across millions of accounts, hoping someone had reused an old password. The attack succeeded against dozens of organizations, proving once again that weak or recycled passwords remain one of the easiest ways for criminals to break into online accounts. READ FULL STORY

AI Generated Fraud Takeover

As cybercrime is known to do, attacks trend over time, creating new and improved assaults. Fighting back against trending fraud attacks requires everyone, including organization leaders and those overseeing security to be prepared for the latest threats. And with artificial intelligence (AI) now playing a significant role with these crimes, awareness can be an invaluable fraud prevention tool. AI-generated deepfakes make “authorized fraud” a must know of trending crimes. Phishing emails orchestrate 91% of all cyberattacks, with many starting and ending with fraud. READ FULL STORY

Revealed: We Are Still Terrible At Creating Passwords

Ah, passwords. Those tiny digital keys that can either protect your online kingdom or leave the door wide open for cyber-villains. Unfortunately, 2024 showed us that people are still using shockingly bad passwords. Spoiler alert: "123456," "password," and the oh-so-creative "qwerty123" remain top offenders. In fact, “123456” takes the top spot year after year. Hackers are practically throwing a party when they see passwords like these! Seriously, folks? You can do better than that. READ FULL STORY

Did Your Kid Lose Their Phone? Not Likely

It’s an everyday scene. It’s prime time for TV and you’re sitting comfortably in your favorite chair. Suddenly, your phone alerts you to a new text. You pick it up and it’s a text from an unknown number that says, "Hi Mom, I lost my phone. Text me back at this number.” You’re perplexed. What do you do? Well, you stop right there. Why? That message probably isn’t from your kid. It’s part of a sneaky scam that’s been making the rounds for a while, and unfortunately, it’s still working. READ FULL STORY

Someone May Have Flown Away with Your Personal Info

If you've flown with Frontier Airlines, your personal information may be at risk. The airline recently disclosed a data breach that may have exposed sensitive customer information, including Social Security numbers, although many details about the incident remain unclear. Even if you haven't received a notification, now is a good time to keep an eye on your financial accounts and credit reports. Here's what happened, what information may have been exposed, and the simple steps you can take today to help protect yourself from identity theft and fraud. READ FULL STORY

This iPhone Exploit Can Slice Right Through Your Device’s Security Defenses

Think your iPhone is safe simply because it's an iPhone? Think again. Security researchers have uncovered a sophisticated attack called "DarkSword" that can silently compromise vulnerable iPhones just by visiting a malicious website. Once installed, it can steal everything from text messages and photos to iCloud data and cryptocurrency wallet information. The good news is Apple has already released a fix. The bad news is millions of people could still be at risk if they haven't updated their devices. READ FULL STORY