81 Million Login Attempts Later: Why Reusing Passwords Is Still So Dangerous

More than 81 million login attempts targeted Microsoft 365 accounts in just two weeks, according to security researchers tracking a massive password-spraying campaign. Rather than trying to crack a single account, cybercriminals tested stolen usernames and commonly used passwords across millions of accounts, hoping someone had reused an old password. The attack succeeded against dozens of organizations, proving once again that weak or recycled passwords remain one of the easiest ways for criminals to break into online accounts. READ FULL STORY

Revealed: We Are Still Terrible At Creating Passwords

Ah, passwords. Those tiny digital keys that can either protect your online kingdom or leave the door wide open for cyber-villains. Unfortunately, 2024 showed us that people are still using shockingly bad passwords. Spoiler alert: "123456," "password," and the oh-so-creative "qwerty123" remain top offenders. In fact, “123456” takes the top spot year after year. Hackers are practically throwing a party when they see passwords like these! Seriously, folks? You can do better than that. READ FULL STORY

Did Your Kid Lose Their Phone? Not Likely

It’s an everyday scene. It’s prime time for TV and you’re sitting comfortably in your favorite chair. Suddenly, your phone alerts you to a new text. You pick it up and it’s a text from an unknown number that says, "Hi Mom, I lost my phone. Text me back at this number.” You’re perplexed. What do you do? Well, you stop right there. Why? That message probably isn’t from your kid. It’s part of a sneaky scam that’s been making the rounds for a while, and unfortunately, it’s still working. READ FULL STORY

Someone May Have Flown Away with Your Personal Info

If you've flown with Frontier Airlines, your personal information may be at risk. The airline recently disclosed a data breach that may have exposed sensitive customer information, including Social Security numbers, although many details about the incident remain unclear. Even if you haven't received a notification, now is a good time to keep an eye on your financial accounts and credit reports. Here's what happened, what information may have been exposed, and the simple steps you can take today to help protect yourself from identity theft and fraud. READ FULL STORY

Nearly 7 Million Records Exposed: What the AssuranceAmerica Breach Means for You

Millions of drivers may soon receive an unsettling letter after AssuranceAmerica disclosed a massive data breach involving nearly 7 million people. Hackers accessed a wide range of personal information, including driver's license numbers, insurance policy details, and, in some cases, Social Security numbers. Even if financial information was not exposed, this type of data can be extremely valuable to identity thieves and scammers. If you receive a breach notification, taking a few simple steps now can help reduce your risk of fraud in the months and years ahead. READ FULL STORY

Shell Out Some Cash For Your Free Trip To The Beach

It’s summer! And from the temperatures most of the U.S. is experiencing, that’s not a surprise to anyone. With summer comes wonderful, relaxing, exciting vacations for so many of us. And wouldn’t it make your summer even better if you won a 5-day, 4-night vacation in the Bahamas? Well, it seems that you certainly have an opportunity to win it, but is it too good to be true? Let’s take a look at one in particular that has gotten a lot of traction in the forums on the travel website, TripAdvisor. READ FULL STORY

Should I, Could I Freeze My Credit Report?

Having your private information or identity stolen is no picnic. It takes quite a long time to make it right, so one of the best ways to help ensure that neither happens in the first place is to protect it as much as you can. In light of the recent Capital One data breach, many may be considering putting a freeze on their credit reports and that is a great idea. However, it's a good idea to be sure to know what that means before taking that action. READ FULL STORY

Why That Local Call Might Be a Scam

Your phone rings and the number looks oddly familiar. Same area code, same first few digits. It could be a neighbor, a nearby business, or someone in your community. So you answer. Instead of a real person, you’re greeted by a robotic voice pitching a prize, warning about suspicious activity, or claiming there’s a problem with your account. Welcome to the world of “neighbor spoofing,” a tactic scammers use to make their calls look local and trustworthy. The trick works more often than you might think, but knowing how it operates can help you avoid getting pulled into the conversation. READ FULL STORY

LastPass Hit Again: What Users Need to Know About the Latest Breach

Millions of people trust password managers to protect their online accounts, but LastPass users are once again facing questions about the security of their personal information. The company recently disclosed that customer data was exposed during a breach involving one of its third-party service providers. While encrypted password vaults were not reported stolen in this latest incident, cybercriminals obtained customer support records and personal information that could be used in future phishing attacks. READ FULL STORY

FBI Warns Your Wi-Fi May Not Be Just Yours Anymore

Your home internet connection might be quietly working a second job, and not for you. The FBI is warning that cybercriminals are hijacking everyday devices like routers, smart TVs, phones, and even digital picture frames to mask illegal activity. Known as residential proxy networks, these schemes can make it look like crimes are coming from your home and could get you into trouble. Here’s what that means, how it happens, and how to shut it down. READ FULL STORY

New Disturbing and “Deadly” Phishing Attack Targets LastPass Users

In what may be one of the more twisted phishing campaigns we’ve seen lately, users of the password manager LastPass are being told a “death certificate has been uploaded” in their name. But clearly, they are alive. This attack has been ongoing and is expected to continue. According to some reports, the phishers are even calling victims on the phone, using social engineering techniques and getting the login details. So how can you make sure you're in charge of your password manager account? READ FULL STORY

Scattered Spider’s Web Of Lies, Deception And Ransomware

Warnings from the FBI and CISA came in loud and clear recently…Scattered Spider’s cyberattacks are more hazardous and crippling than ever before. Their high-profile, financially motivated attacks rely on social engineering for data theft, extortion, and ransomware attacks. And when both security agencies release a joint advisory warning to us about this threat group, it’s smart to listen. These threat actors made headlines for crippling financial attacks against several large organizations recently and they've increased the stakes playing their games. READ FULL STORY