Fake Claude AI Chats and Google Ads Are Now Delivering Malware

Searching Google for a Claude AI download on your Mac could now land you in the middle of a malware trap that looks surprisingly legitimate. Security researchers are warning that attackers are abusing Google Ads and even real shared Claude AI chats to trick macOS users into running dangerous Terminal commands. Victims often remain on legitimate-looking Claude pages while being guided through fake setup instructions that quietly install malware capable of stealing passwords, browser sessions, crypto wallets, and sensitive Mac Keychain data. READ FULL STORY

Phishing Scams Exploit Pricey Auto-Subscription Fears

With email among the top productivity tools in our everyday lives, we know cybercriminals have adopted it for their benefit, too. And now, according to an alert by the National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA), there’s a new and highly lucrative email phishing campaign making the rounds. Both agencies are sounding the alarm about a particular version of this phish, wanting the public to know how it works. READ FULL STORY

The Deepfake Boss Boom: Criminals Are Renting AI-Powered Deception

Deepfake technology is becoming cheaper, easier to use, and increasingly available through criminal marketplaces. Security researchers are now reporting a 39% increase in online discussions related to "deepfake-as-a-service" offerings, where cybercriminals can purchase AI-generated voices, videos, and identities on demand. The trend is fueling a new wave of business fraud, impersonation scams, and social engineering attacks that can fool even experienced professionals. As deepfake tools become more sophisticated, organizations and individuals must rethink how they verify identities and protect themselves from increasingly convincing digital deception. READ FULL STORY

Cyber Thieves Stuff Some Chiken With Your Credentials

Thousands of Chick-fil-A customers are being reminded why reusing passwords can be risky after cybercriminals targeted customer loyalty accounts in a credential stuffing attack. Instead of breaking into Chick-fil-A's systems, attackers used usernames and passwords stolen from previous data breaches at other companies to try logging into customer accounts. The incident serves as another reminder that one reused password can put multiple online accounts at risk, even when the company itself has not been hacked. READ FULL STORY

A Quick Look at a Verizon’s Data Breach Investigations Report

Cybercriminals aren't just getting smarter. They're getting richer. Verizon's latest Data Breach Investigations Report reveals ransomware continues to dominate, third-party breaches are surging, and artificial intelligence is creating new opportunities for accidental data leaks and more convincing attacks. From healthcare and financial institutions to retailers and government agencies, no industry is immune. The report also reinforces a simple truth: Technology alone isn't enough to stop today's threats. As hackers continue to exploit human behavior, awareness and cybersecurity education remain among the most effective defenses for businesses and consumers alike. READ FULL STORY

Amazon Text Scam Recalls Your Login Credentials

Amazon shoppers are being targeted by a phishing scam posing as a product recall alert. Instead of claiming you'll be charged, the message promises a refund and urges the buyer to click a link to apply to get the money back. However, as you can probably guess, it’s designed to steal your login credentials, which may get the phisher to your payment methods too. Read on to find out how this clever Amazon Recall scam works and what steps to take if you receive one of these messages. READ FULL STORY

Critical Malware Threat Targets Gmail and Outlook

Recently, a critical email threat targeting Gmail and Outlook users has come to light. Security researchers have identified malware campaigns distributing VIP Keylogger and 0bj3ctivityStealer threats, which can compromise these users. They are designed to steal PII and other information by gathering keystrokes and taking screenshots. HP Wolf Security is warning of a malware threat that hides inside images that are delivered to the inboxes of Gmail and Outlook users. READ FULL STORY

Why Local Government Hacks Matter to Everyone

Paying property taxes, filing court paperwork, renewing permits, or simply calling a county office are everyday tasks most of us take for granted. But a recent cyberattack against Delaware County, Pennsylvania, shows how quickly those services can grind to a halt when hackers target local government. While officials continue investigating what information may have been accessed, the incident is another reminder that cyberattacks don't just affect big corporations. They can disrupt the public services millions of Americans rely on every day and may put sensitive personal information at risk. READ FULL STORY

Drivers’ License Numbers Speed Off Into Hackers’ Hands in Massive Data Breach

Millions of Americans are learning that some of their most important personal information may have sped off into the hands of cybercriminals. Insurance provider AssuranceAmerica has confirmed that hackers ran off with the driver’s license numbers and personal information of nearly 7 million people after breaking into the company’s network. If you have ever had an auto insurance policy with AssuranceAmerica, now is the time to watch for suspicious emails, monitor your financial accounts, and be alert for identity theft attempts that could use your stolen information. READ FULL STORY

AI Generated Fraud Takeover

As cybercrime is known to do, attacks trend over time, creating new and improved assaults. Fighting back against trending fraud attacks requires everyone, including organization leaders and those overseeing security to be prepared for the latest threats. And with artificial intelligence (AI) now playing a significant role with these crimes, awareness can be an invaluable fraud prevention tool. AI-generated deepfakes make “authorized fraud” a must know of trending crimes. Phishing emails orchestrate 91% of all cyberattacks, with many starting and ending with fraud. READ FULL STORY

Revealed: We Are Still Terrible At Creating Passwords

Ah, passwords. Those tiny digital keys that can either protect your online kingdom or leave the door wide open for cyber-villains. Unfortunately, 2024 showed us that people are still using shockingly bad passwords. Spoiler alert: "123456," "password," and the oh-so-creative "qwerty123" remain top offenders. In fact, “123456” takes the top spot year after year. Hackers are practically throwing a party when they see passwords like these! Seriously, folks? You can do better than that. READ FULL STORY

Did Your Kid Lose Their Phone? Not Likely

It’s an everyday scene. It’s prime time for TV and you’re sitting comfortably in your favorite chair. Suddenly, your phone alerts you to a new text. You pick it up and it’s a text from an unknown number that says, "Hi Mom, I lost my phone. Text me back at this number.” You’re perplexed. What do you do? Well, you stop right there. Why? That message probably isn’t from your kid. It’s part of a sneaky scam that’s been making the rounds for a while, and unfortunately, it’s still working. READ FULL STORY