Phishing Scam Falsely Claims Google Subpoena Access To Your Email

Google has been in the news a lot lately…and we mean A LOT. We’ve seen browser extension warnings, password recovery warnings, a slick scam that claims to be from Google Technical Support, and several others. Now, a new phishing scam is making the rounds, targeting users with alarming messages that claim Google has received a subpoena to access their email account. It’s getting difficult to keep up with all of these. This scam uses Google’s own tools to make it even more realistic and to allow the emails to bypass authentication checks and still land in your in box, rather than your spam box. READ FULL STORY

This Cunning Account Takeover Robbed A “Cybersmart” User’s Account

While banking online, this person received a message saying her account had been compromised and provided her a phone number to call. A woman in New York learned the hard way that even those who know the tell-tale signs of a cyberattack can be fooled. She fell victim to an account takeover (ATO) of her financial accounts – to the tune of over $30,000. Know that all types of accounts are vulnerable to ATOs, and not just those that are financial. READ FULL STORY

Spectrum Breach Exposes Vulnerability in Our Voices

A single phone call may have opened the door to one of the largest reported telecom data breaches of 2026, so far. Charter Communications, the company behind Spectrum internet, cable, and mobile services, has confirmed a cybersecurity incident after the notorious hacking group ShinyHunters claimed to have stolen millions of customer records. Charter disputes the scope of the theft and says sensitive customer information was not exposed. However, this is another incident highlighting how social engineering attacks continue to thwart even the most sophisticated security systems and strategies. READ FULL STORY

Paradise Tax Trap Tries to Outsmart Caribbean Travelers

Planning a Caribbean escape any time soon? Scammers are counting on it. A growing “entry form” scam is tricking travelers into paying hefty fees for a document that’s completely free. These slick, lookalike websites appear at the top of search results, creating urgency just as vacationers rush to finalize travel plans. Before you click, pay, or share your passport details, take a beat to read and find out how this digital ambush works—and how to dodge it. READ FULL STORY

Fake Claude AI Chats and Google Ads Are Now Delivering Malware

Searching Google for a Claude AI download on your Mac could now land you in the middle of a malware trap that looks surprisingly legitimate. Security researchers are warning that attackers are abusing Google Ads and even real shared Claude AI chats to trick macOS users into running dangerous Terminal commands. Victims often remain on legitimate-looking Claude pages while being guided through fake setup instructions that quietly install malware capable of stealing passwords, browser sessions, crypto wallets, and sensitive Mac Keychain data. READ FULL STORY

World Cup Fever is in the Air—Watch for Soccer-Related Scams

The FIFA World Cup attracts billions of fans around the globe, but it also attracts cybercriminals looking to score against unsuspecting victims. From counterfeit tickets and fake streaming sites to fraudulent travel packages and phishing emails, scammers use the excitement surrounding the tournament to steal money, personal information, and account credentials. Before you buy tickets, book travel, or stream a match, learn the most common. World Cup scams and the simple steps that can help keep you from becoming the next victim. READ FULL STORY

Social Media Brings Out The Worst Scammers

Social media attacks are a favorite of those pesky cybercriminals. One might wonder why. Well, it’s because it’s easy pickin's going for those accounts. Researchers at Arkose Labs found that of 1.2 billion social media interactions, 53% of the logins were fraudulent and 25% of new accounts were phony. Millions of people use one form of social media or another, whether it’s Facebook, Instagram, Snapchat, LinkedIn, or something else. That leaves a barrel full of phish used for targets for hackers and scammers. READ FULL STORY

Luxury Brand Breach Reminds Us to Use Unique Credentials

Ok, so we may all not be able to don the luxury jewelry from Cartier like celebrities, but that doesn’t mean we should ignore cybersecurity news involving them. That’s because those are likely still learning opportunities for us all. In fact, a recent incident involving Cartier included customer data being stolen after a data breach of their website. This is on the heels of other data breaches of brands, not particularly luxury brands, such as Victoria’s Secret and The North Face. READ FULL STORY

That Secure Messaging App May Be the Weakest Link in Your Digital Life

Many people treat messaging apps like private, locked rooms where conversations stay safely tucked away from prying eyes. But government agencies are warning that those rooms may have more open windows than users realize. Russia-linked threat actors and other state-backed groups are increasingly targeting apps like WhatsApp, Signal, and Messenger to hijack accounts, impersonate trusted contacts, and quietly insert themselves into sensitive conversations. If your job, public profile, or access to information makes you even slightly interesting to an attacker, your messaging apps may now be one of the first places they try to get in. READ FULL STORY

Coruna Exploit Could Open Your iPhone to Hackers

A newly uncovered iPhone exploit kit called Coruna is raising alarms across the cybersecurity world. Originally believed to have been developed as a sophisticated surveillance tool, the framework has now surfaced in criminal campaigns capable of compromising thousands of Apple devices. By chaining together dozens of vulnerabilities, Coruna can quietly infiltrate vulnerable iPhones and harvest sensitive data. The discovery highlights how even tightly secured platforms like iOS can become targets when powerful cyber tools escape into the wild. READ FULL STORY

A Single Slip Unlocked 900,000 Records From Identity Protection Company

It didn’t take malware, zero-days, or Hollywood-style hacking rigs. Just one convincing voice on the phone. In a breach that feels less like a cyberattack and more like a con artist’s magic trick, identity protection firm Aura lost control of roughly 900,000 records after an employee was duped into opening the digital front door. The incident is a stark reminder that even the strongest security systems can crumble when human trust is weaponized. READ FULL STORY

Users Get Tricked Into Falsely Updating Google Services

The TrickMo Android banking trojan has re-emerged in a new form, disguised as a fake Google Chrome app for Android. Once installed, this malicious app prompts users to update Google Play Services, tricking them into downloading TrickMo under the guise of "Google Services." By doing so, it gains access to critical permissions, including those for the device's accessibility settings, which it then exploits to perform various malicious activities. READ FULL STORY