Are Text Message Sign-In Links Safe?

Millions of people may be unknowingly exposed by “sign-in” links sent via text message. A recent study from researchers at several universities in the U.S. found that poorly secured SMS login links can be guessed or reused by attackers, opening the door to account takeovers and data theft. While it's convenient to not have to create an account and keep track of yet another password, those links often have predictable or weak security tokens at the end of their URLs. Attackers with only basic tools can guess or tweak these tokens to access other users’ accounts.  READ FULL STORY

AI Generated Fraud Takeover

As cybercrime is known to do, attacks trend over time, creating new and improved assaults. Fighting back against trending fraud attacks requires everyone, including organization leaders and those overseeing security to be prepared for the latest threats. And with artificial intelligence (AI) now playing a significant role with these crimes, awareness can be an invaluable fraud prevention tool. AI-generated deepfakes make “authorized fraud” a must know of trending crimes. Phishing emails orchestrate 91% of all cyberattacks, with many starting and ending with fraud. READ FULL STORY

Revealed: We Are Still Terrible At Creating Passwords

Ah, passwords. Those tiny digital keys that can either protect your online kingdom or leave the door wide open for cyber-villains. Unfortunately, 2024 showed us that people are still using shockingly bad passwords. Spoiler alert: "123456," "password," and the oh-so-creative "qwerty123" remain top offenders. In fact, “123456” takes the top spot year after year. Hackers are practically throwing a party when they see passwords like these! Seriously, folks? You can do better than that. READ FULL STORY

Did Your Kid Lose Their Phone? Not Likely

It’s an everyday scene. It’s prime time for TV and you’re sitting comfortably in your favorite chair. Suddenly, your phone alerts you to a new text. You pick it up and it’s a text from an unknown number that says, "Hi Mom, I lost my phone. Text me back at this number.” You’re perplexed. What do you do? Well, you stop right there. Why? That message probably isn’t from your kid. It’s part of a sneaky scam that’s been making the rounds for a while, and unfortunately, it’s still working. READ FULL STORY

This iPhone Exploit Can Slice Right Through Your Device’s Security Defenses

Think your iPhone is safe simply because it's an iPhone? Think again. Security researchers have uncovered a sophisticated attack called "DarkSword" that can silently compromise vulnerable iPhones just by visiting a malicious website. Once installed, it can steal everything from text messages and photos to iCloud data and cryptocurrency wallet information. The good news is Apple has already released a fix. The bad news is millions of people could still be at risk if they haven't updated their devices. READ FULL STORY

Nearly 7 Million Records Exposed: What the AssuranceAmerica Breach Means for You

Millions of drivers may soon receive an unsettling letter after AssuranceAmerica disclosed a massive data breach involving nearly 7 million people. Hackers accessed a wide range of personal information, including driver's license numbers, insurance policy details, and, in some cases, Social Security numbers. Even if financial information was not exposed, this type of data can be extremely valuable to identity thieves and scammers. If you receive a breach notification, taking a few simple steps now can help reduce your risk of fraud in the months and years ahead. READ FULL STORY

Shell Out Some Cash For Your Free Trip To The Beach

It’s summer! And from the temperatures most of the U.S. is experiencing, that’s not a surprise to anyone. With summer comes wonderful, relaxing, exciting vacations for so many of us. And wouldn’t it make your summer even better if you won a 5-day, 4-night vacation in the Bahamas? Well, it seems that you certainly have an opportunity to win it, but is it too good to be true? Let’s take a look at one in particular that has gotten a lot of traction in the forums on the travel website, TripAdvisor. READ FULL STORY

Watch Carefully Where That Click Takes You

Clicking a link seems harmless, but cybercriminals are finding new ways to turn ordinary web browsing into a dangerous detour. The FBI's Internet Crime Complaint Center (IC3) is warning that attackers are using sophisticated Traffic Distribution Systems (TDS) to secretly redirect internet users from legitimate-looking websites to fake login pages, malware downloads, and phishing sites designed to steal personal information. The redirection often happens behind the scenes, making it difficult to recognize until it's too late. Understanding how these attacks work and taking a few simple precautions can help keep your information, accounts, and finances out of the hands of cybercriminals. READ FULL STORY

Why That Local Call Might Be a Scam

Your phone rings and the number looks oddly familiar. Same area code, same first few digits. It could be a neighbor, a nearby business, or someone in your community. So you answer. Instead of a real person, you’re greeted by a robotic voice pitching a prize, warning about suspicious activity, or claiming there’s a problem with your account. Welcome to the world of “neighbor spoofing,” a tactic scammers use to make their calls look local and trustworthy. The trick works more often than you might think, but knowing how it operates can help you avoid getting pulled into the conversation. READ FULL STORY

LastPass Hit Again: What Users Need to Know About the Latest Breach

Millions of people trust password managers to protect their online accounts, but LastPass users are once again facing questions about the security of their personal information. The company recently disclosed that customer data was exposed during a breach involving one of its third-party service providers. While encrypted password vaults were not reported stolen in this latest incident, cybercriminals obtained customer support records and personal information that could be used in future phishing attacks. READ FULL STORY

FBI Warns Your Wi-Fi May Not Be Just Yours Anymore

Your home internet connection might be quietly working a second job, and not for you. The FBI is warning that cybercriminals are hijacking everyday devices like routers, smart TVs, phones, and even digital picture frames to mask illegal activity. Known as residential proxy networks, these schemes can make it look like crimes are coming from your home and could get you into trouble. Here’s what that means, how it happens, and how to shut it down. READ FULL STORY

New Disturbing and “Deadly” Phishing Attack Targets LastPass Users

In what may be one of the more twisted phishing campaigns we’ve seen lately, users of the password manager LastPass are being told a “death certificate has been uploaded” in their name. But clearly, they are alive. This attack has been ongoing and is expected to continue. According to some reports, the phishers are even calling victims on the phone, using social engineering techniques and getting the login details. So how can you make sure you're in charge of your password manager account? READ FULL STORY