Storing Passwords In Your Browser…It’s Convenient, BUT Very Risky Too

Most of us know that password fatigue can lead to security mishaps and that creating a safe and secure entrance into our personal or work accounts can be a real challenge. Fortunately, security experts also know that safe password use has long been a problem, one that can lead to epic malware infections like ransomware, banking trojans, and more. Popular browsers like Chrome, Firefox, Safari, and Opera offer the option to store passwords for you, but hackers using the malware “RedLine Stealer” can hijack those stored passwords in a heartbeat. READ FULL STORY

It’s Healthcare Open Enrollment Season. Don’t Sign Up With a Scammer

It's the time of year when millions of people are comparing healthcare plans, checking prices, and trying to figure out what healthcare coverage makes the most sense for the coming year. Whether you’re reviewing Medicare options or browsing Affordable Care Act (ACA) plans, you’ve got until mid-December to lock in your choices. But while you’re doing your homework, cybercriminals are doing theirs — and they’re already flooding inboxes, texts, and phone lines with scams designed to steal your personal and financial information. READ FULL STORY

LockBit Threatening to Leak U.S. Bank Customer Data. U.S. Bank Claims They Don’t Have Any

U.S. Bank is caught in an unusual ransomware situation, and it is a good reminder that your bank doesn't necessarily have to be hacked for your information to be at risk. The ransomware group LockBit recently claimed it breached U.S. Bank and stole data, threatening to publish the information on September 3 unless the bank pays a ransom. U.S. Bank says its own systems, networks and data repositories were not compromised and that the incident appears to involve a "fourth party" outside the bank's environment. For customers, however, the distinction may not provide much comfort. READ FULL STORY

October Is Cybersecurity Awareness Month: 7 Simple Ways to Keep Hackers Out October is Cyberse

October is Cybersecurity Awareness Month, and it's the perfect excuse to check whether your online habits are helping protect you or making a cybercriminal's job easier. From stronger passwords and two-factor authentication to spotting suspicious messages, updating devices, securing home Wi-Fi, and backing up important files, these simple steps can make a real difference. You don't need to be a tech expert to stay safer online. Think of these tips as a timely refresher to help keep your accounts, money, and personal information out of the wrong hands. READ FULL STORY

When What You See Is Not What You Get

Although it may sound strange, bad actors are exploiting what we see – or what we think we see. Always looking for new ways to gain our confidence, cybercriminals are counting on us being human to make this con work. Trust, fear, and concern are some of the emotions being exploited, which is nothing new for hackers. But what is new is taking advantage of our assumption that when we see a trusted website, it’s worthy of our trust…Well, maybe not so much anymore. READ FULL STORY

Invoice Phishing’s Hidden Agenda

There’s a not-so-new cybercrime hitting inboxes everywhere and it’s using phishing invoices to install a variety of malware, including an info-stealer. While some of us regularly get invoices in our inbox for this or that, we should all be aware of this invoice-themed phishing attack that’s likely to show up to collect payment in your email soon. This invoice phishing attack, like most others, takes advantage of something we cannot avoid: Being human. READ FULL STORY

Who Needs the Key If You’re Just Going to Open the Door for Attackers

Cybercriminals are finding a clever way around one of our favorite security defenses: passwords and multi-factor authentication. The FBI’s Internet Crime Complaint Center is warning about a rise in OAuth consent phishing attacks, where criminals trick victims into granting a malicious app access to their email, files or other account information. The frightening part? You may never give the attacker your password at all. We have been told for years to protect our passwords and turn on multi-factor authentication. Good advice that is still valid, but the FBI is warning about a phishing trick that can sometimes sidestep both. READ FULL STORY

Avoiding Insurance Fraud And Fraudsters

Insurance fraud is a problem everywhere and it makes things more expensive for those of us playing by the rules. With this fraud in particular, whether it’s for our health, car, or home, fraudsters are scamming like never before. Suspecting a sketchy seller and policy in an open marketplace can help prevent a potential nightmare. Knowing tell-tale signs of insurance fraud when we see it is smart shopping, and the information below will help. READ FULL STORY

Your Financial Institution Is Calling. Or Is It?

A phone call that looks like it’s coming from your financial institution could be the opening move in a fast-moving chess game the FBI is warning about. Using spoofed numbers and convincing scripts, criminals create a sense of urgency, claiming your account is under attack. The next move includes a carefully guided attempt to extract passwords, verification codes, or even push you to move your own money straight into their hands. Knowing when to hang up could be the difference between staying secure and watching your account drained in a flash. READ FULL STORY

Hackers Are Targeting AI to Infect the Apps You Trust

Artificial intelligence is helping developers write software faster than ever before. Unfortunately, cybercriminals have noticed. Security researchers recently uncovered a growing wave of attacks that target AI coding assistants and software developers with poisoned code designed to quietly slip malware into legitimate applications. While the attacks aren't aimed directly at everyday consumers, the software you download, the apps you use, and even future updates could be affected if malicious code makes its way into trusted products. Here's what you need to know. READ FULL STORY

Your Shared Financial, Legal, or Healthcare Documents Could Be at Risk

An emergency cybersecurity warning has organizations across the country shutting down file-sharing servers to protect sensitive data from a credible cyber threat. While this isn't a household name like Facebook or Gmail, millions of Americans interact with ShareFile without even realizing it. It's commonly used by banks, accountants, law firms, insurance agencies, healthcare providers, and mortgage companies to exchange tax returns, financial records, medical documents, and other sensitive files. Here's what happened, why experts are taking this threat so seriously, and what you should do if you've recently shared documents through a ShareFile portal. READ FULL STORY

Your Health Data May Have Been Hunted

A cyberattack involving legacy systems belonging to Exact Sciences (now owned by Abbot) has put potentially sensitive patient information in the hands of cybercriminals. The ShinyHunters group claims it stole and later published data that includes millions of email addresses along with names, addresses, phone numbers and health-related information. Abbott says it is investigating the incident and has not confirmed exactly what information was taken. For patients and healthcare providers, this is another reminder that medical information can remain exposed long after the systems that originally collected it are considered "legacy." Your Health Data May Have Been Hunted READ FULL STORY