Watch Out for Passport Renewal Scams Before Your International Getaway

While summer travel season is in full swing, any time is a good time to travel internationally. That’s unless your passport has expired or is expiring soon. Many Americans are discovering their passports are indeed in that predicament. Unfortunately, scammers know travelers are often in a hurry and use that urgency to their advantage. Fake passport renewal websites, fraudulent expedited processing services, phishing emails, and identity theft schemes are all targeting people trying to prepare for international trips. Before entering personal information or paying renewal fees online, travelers should understand the warning signs of passport fraud and the steps they can take to protect their money, personal data, and travel plans. READ FULL STORY

Fancy Bear Turns Your Router Into a Spy

Most people think of their router as that little box in the corner that makes the internet work. Set it and forget it. Unfortunately, Russian state-sponsored hackers see it a bit differently. Security agencies recently warned that the notorious hacking group Fancy Bear has been compromising vulnerable TP-Link routers and quietly turning them into surveillance tools. By hijacking router settings, the attackers can redirect internet traffic, steal login credentials, and spy on online activity without victims ever realizing it. The good news? A few simple security steps can make your router a much harder target. READ FULL STORY

Bug Lurks in the Firefox Browser Engine. Update Now

A security flaw in Mozilla Firefox, highlights why browser updates matter more than ever. The vulnerability involves a heap buffer overflow, a component used to process certain video content on the web. Ok, that’s a bit technical, but suffice it to say, in the worst-case scenario, attackers could potentially exploit this flaw to execute malicious code, crash the browser, or manipulate how Firefox behaves if a specially crafted media file or webpage is loaded. READ FULL STORY

This Cunning Account Takeover Robbed A “Cybersmart” User’s Account

While banking online, this person received a message saying her account had been compromised and provided her a phone number to call. A woman in New York learned the hard way that even those who know the tell-tale signs of a cyberattack can be fooled. She fell victim to an account takeover (ATO) of her financial accounts – to the tune of over $30,000. Know that all types of accounts are vulnerable to ATOs, and not just those that are financial. READ FULL STORY

Paradise Tax Trap Tries to Outsmart Caribbean Travelers

Planning a Caribbean escape any time soon? Scammers are counting on it. A growing “entry form” scam is tricking travelers into paying hefty fees for a document that’s completely free. These slick, lookalike websites appear at the top of search results, creating urgency just as vacationers rush to finalize travel plans. Before you click, pay, or share your passport details, take a beat to read and find out how this digital ambush works—and how to dodge it. READ FULL STORY

Email Warnings No Longer Guarantee Messages Are From Within

You may have seen this warning, or something like it, at the end of email messages: “CAUTION: This email originated from outside of the organization.” Such an alert intends to let you know that the message you are receiving is not coming from a colleague with an email address from within your organization. It’s supposed to serve as a warning that something in the message just may be trying to phish you. Now, those rascally rabbit cybercriminals have figured out a way to get rid of it. READ FULL STORY

Fake Claude AI Chats and Google Ads Are Now Delivering Malware

Searching Google for a Claude AI download on your Mac could now land you in the middle of a malware trap that looks surprisingly legitimate. Security researchers are warning that attackers are abusing Google Ads and even real shared Claude AI chats to trick macOS users into running dangerous Terminal commands. Victims often remain on legitimate-looking Claude pages while being guided through fake setup instructions that quietly install malware capable of stealing passwords, browser sessions, crypto wallets, and sensitive Mac Keychain data. READ FULL STORY

Watch Out for Juneteenth-Themed Scams This Holiday

As Juneteenth celebrations take place across the country, cybercriminals are taking advantage of the holiday's growing visibility. Security experts are warning consumers to be cautious of phishing emails, text messages, and social media posts that use Juneteenth-related themes to steal personal information, passwords, or financial data. Scammers often capitalize on holidays and major events because people are more likely to trust messages that appear connected to community celebrations, special promotions, or charitable causes. Juneteenth is no exception. READ FULL STORY

Understanding Multi-Factor Authentication

We all know that passwords alone just don’t cut it anymore. Between data breaches, phishing attacks, and password reuse, relying on a single password to protect your most valuable accounts is like locking your front door but leaving the windows wide open. That’s where multi-factor authentication (MFA) comes in. It adds extra layers of protection to your online accounts. While many companies are implementing passkeys, not all of them have it available. So, MFA is the next best way to protect your accounts, MFA makes it so that even if your password falls into the wrong hands, no one can get in without passing additional verification steps. READ FULL STORY

Luxury Brand Breach Reminds Us to Use Unique Credentials

Ok, so we may all not be able to don the luxury jewelry from Cartier like celebrities, but that doesn’t mean we should ignore cybersecurity news involving them. That’s because those are likely still learning opportunities for us all. In fact, a recent incident involving Cartier included customer data being stolen after a data breach of their website. This is on the heels of other data breaches of brands, not particularly luxury brands, such as Victoria’s Secret and The North Face. READ FULL STORY

That Secure Messaging App May Be the Weakest Link in Your Digital Life

Many people treat messaging apps like private, locked rooms where conversations stay safely tucked away from prying eyes. But government agencies are warning that those rooms may have more open windows than users realize. Russia-linked threat actors and other state-backed groups are increasingly targeting apps like WhatsApp, Signal, and Messenger to hijack accounts, impersonate trusted contacts, and quietly insert themselves into sensitive conversations. If your job, public profile, or access to information makes you even slightly interesting to an attacker, your messaging apps may now be one of the first places they try to get in. READ FULL STORY

Coruna Exploit Could Open Your iPhone to Hackers

A newly uncovered iPhone exploit kit called Coruna is raising alarms across the cybersecurity world. Originally believed to have been developed as a sophisticated surveillance tool, the framework has now surfaced in criminal campaigns capable of compromising thousands of Apple devices. By chaining together dozens of vulnerabilities, Coruna can quietly infiltrate vulnerable iPhones and harvest sensitive data. The discovery highlights how even tightly secured platforms like iOS can become targets when powerful cyber tools escape into the wild. READ FULL STORY