Your Hotel's Wi-Fi May Be Working Against You

Hotel Wi-Fi has always come with a little baggage. Now there is another reason to be careful. ReliaQuest has uncovered a campaign in which attackers are taking control of Wi-Fi equipment at hotels, conference centers, and other public venues, then quietly redirecting guests to fake Microsoft 365 login pages. The scary part? You may not click a phishing email, download an attachment, or do anything obviously wrong. Simply connecting to the Wi-Fi could put your work account in the crosshairs. READ FULL STORY

That Update You've Been Ignoring Might Be the Most Important One

Software updates can be annoying. They arrive when you're busy, ask you to restart your device, and sometimes seem to do nothing more exciting than change an icon or add another emoji. But those updates can also close security holes that criminals are actively looking for. Apple's most recent iOS 26.6.1 update is a perfect example. Released August 17, it provides security fixes for iPhones and iPads. Apple routinely releases these updates because attackers are constantly looking for weaknesses in the software we use every day. READ FULL STORY

It’s Healthcare Open Enrollment Season. Don’t Sign Up With a Scammer

It's the time of year when millions of people are comparing healthcare plans, checking prices, and trying to figure out what healthcare coverage makes the most sense for the coming year. Whether you’re reviewing Medicare options or browsing Affordable Care Act (ACA) plans, you’ve got until mid-December to lock in your choices. But while you’re doing your homework, cybercriminals are doing theirs — and they’re already flooding inboxes, texts, and phone lines with scams designed to steal your personal and financial information. READ FULL STORY

LockBit Threatening to Leak U.S. Bank Customer Data. U.S. Bank Claims They Don’t Have Any

U.S. Bank is caught in an unusual ransomware situation, and it is a good reminder that your bank doesn't necessarily have to be hacked for your information to be at risk. The ransomware group LockBit recently claimed it breached U.S. Bank and stole data, threatening to publish the information on September 3 unless the bank pays a ransom. U.S. Bank says its own systems, networks and data repositories were not compromised and that the incident appears to involve a "fourth party" outside the bank's environment. For customers, however, the distinction may not provide much comfort. READ FULL STORY

ClickFix Attacks Help You Hack Your Own PC

PC users beware—ClickFix attacks are here. Global cybersecurity company ESET’s did some research on the topic. Its research finds ClickFix incidents are now a close second to phishing—and that’s saying something. They also found these two-faced attacks multiplied a crushing 500%+ during that same year. And they are pretty crafty in their trickery too. It’s been an invaluable hacking tool for decades since phishing tactics keep reinventing themself as technology marches on. These start with phishing, of course, and these attacks are getting more sophisticated by the day, and with help from AI. READ FULL STORY

When What You See Is Not What You Get

Although it may sound strange, bad actors are exploiting what we see – or what we think we see. Always looking for new ways to gain our confidence, cybercriminals are counting on us being human to make this con work. Trust, fear, and concern are some of the emotions being exploited, which is nothing new for hackers. But what is new is taking advantage of our assumption that when we see a trusted website, it’s worthy of our trust…Well, maybe not so much anymore. READ FULL STORY

Invoice Phishing’s Hidden Agenda

There’s a not-so-new cybercrime hitting inboxes everywhere and it’s using phishing invoices to install a variety of malware, including an info-stealer. While some of us regularly get invoices in our inbox for this or that, we should all be aware of this invoice-themed phishing attack that’s likely to show up to collect payment in your email soon. This invoice phishing attack, like most others, takes advantage of something we cannot avoid: Being human. READ FULL STORY

Keeping Your Information More Private and Out of the Hands of Attackers

It’s no secret, especially after the recent revelation of the NPD breach, that our information is everywhere online. This is true whether we intentionally allowed it or not. There are numerous websites that collect information about us and post it online. Many are “people search” sites. If you’ve ever looked up an unfamiliar phone number, some of these likely showed up. Well-known lookup sites have all kinds of information on all of us. The challenge is to keep this information from making you a victim of a phishing attack or identity theft. READ FULL STORY

Microsoft’s Record-Breaking Patch Tuesday

Microsoft's September Patch Tuesday came with a number that is hard to ignore. Nearly 1,000 security vulnerabilities addressed in a single month. It was the company's largest Patch Tuesday release on record, and the news wasn't simply about quantity. More than 100 vulnerabilities were rated critical, while two of the flaws were already being actively exploited by attackers. For everyday Windows users, the story is another reminder that those seemingly annoying update notifications are doing an important job. Keeping Windows and other Microsoft software updated can close security holes before criminals get the chance to use them. READ FULL STORY

Avoiding Insurance Fraud And Fraudsters

Insurance fraud is a problem everywhere and it makes things more expensive for those of us playing by the rules. With this fraud in particular, whether it’s for our health, car, or home, fraudsters are scamming like never before. Suspecting a sketchy seller and policy in an open marketplace can help prevent a potential nightmare. Knowing tell-tale signs of insurance fraud when we see it is smart shopping, and the information below will help. READ FULL STORY

Your Financial Institution Is Calling. Or Is It?

A phone call that looks like it’s coming from your financial institution could be the opening move in a fast-moving chess game the FBI is warning about. Using spoofed numbers and convincing scripts, criminals create a sense of urgency, claiming your account is under attack. The next move includes a carefully guided attempt to extract passwords, verification codes, or even push you to move your own money straight into their hands. Knowing when to hang up could be the difference between staying secure and watching your account drained in a flash. READ FULL STORY

Hackers Are Targeting AI to Infect the Apps You Trust

Artificial intelligence is helping developers write software faster than ever before. Unfortunately, cybercriminals have noticed. Security researchers recently uncovered a growing wave of attacks that target AI coding assistants and software developers with poisoned code designed to quietly slip malware into legitimate applications. While the attacks aren't aimed directly at everyday consumers, the software you download, the apps you use, and even future updates could be affected if malicious code makes its way into trusted products. Here's what you need to know. READ FULL STORY