That Update You've Been Ignoring Might Be the Most Important One

Software updates can be annoying. They arrive when you're busy, ask you to restart your device, and sometimes seem to do nothing more exciting than change an icon or add another emoji. But those updates can also close security holes that criminals are actively looking for. Apple's most recent iOS 26.6.1 update is a perfect example. Released August 17, it provides security fixes for iPhones and iPads. Apple routinely releases these updates because attackers are constantly looking for weaknesses in the software we use every day. READ FULL STORY

When What You See Is Not What You Get

Although it may sound strange, bad actors are exploiting what we see – or what we think we see. Always looking for new ways to gain our confidence, cybercriminals are counting on us being human to make this con work. Trust, fear, and concern are some of the emotions being exploited, which is nothing new for hackers. But what is new is taking advantage of our assumption that when we see a trusted website, it’s worthy of our trust…Well, maybe not so much anymore. READ FULL STORY

Invoice Phishing’s Hidden Agenda

There’s a not-so-new cybercrime hitting inboxes everywhere and it’s using phishing invoices to install a variety of malware, including an info-stealer. While some of us regularly get invoices in our inbox for this or that, we should all be aware of this invoice-themed phishing attack that’s likely to show up to collect payment in your email soon. This invoice phishing attack, like most others, takes advantage of something we cannot avoid: Being human. READ FULL STORY

Who Needs the Key If You’re Just Going to Open the Door for Attackers

Cybercriminals are finding a clever way around one of our favorite security defenses: passwords and multi-factor authentication. The FBI’s Internet Crime Complaint Center is warning about a rise in OAuth consent phishing attacks, where criminals trick victims into granting a malicious app access to their email, files or other account information. The frightening part? You may never give the attacker your password at all. We have been told for years to protect our passwords and turn on multi-factor authentication. Good advice that is still valid, but the FBI is warning about a phishing trick that can sometimes sidestep both. READ FULL STORY

Watch Out for Passport Renewal Scams Before Your International Getaway

While summer travel season is in full swing, any time is a good time to travel internationally. That’s unless your passport has expired or is expiring soon. Many Americans are discovering their passports are indeed in that predicament. Unfortunately, scammers know travelers are often in a hurry and use that urgency to their advantage. Fake passport renewal websites, fraudulent expedited processing services, phishing emails, and identity theft schemes are all targeting people trying to prepare for international trips. Before entering personal information or paying renewal fees online, travelers should understand the warning signs of passport fraud and the steps they can take to protect their money, personal data, and travel plans. READ FULL STORY

Keeping Your Information More Private and Out of the Hands of Attackers

It’s no secret, especially after the recent revelation of the NPD breach, that our information is everywhere online. This is true whether we intentionally allowed it or not. There are numerous websites that collect information about us and post it online. Many are “people search” sites. If you’ve ever looked up an unfamiliar phone number, some of these likely showed up. Well-known lookup sites have all kinds of information on all of us. The challenge is to keep this information from making you a victim of a phishing attack or identity theft. READ FULL STORY

Avoiding Insurance Fraud And Fraudsters

Insurance fraud is a problem everywhere and it makes things more expensive for those of us playing by the rules. With this fraud in particular, whether it’s for our health, car, or home, fraudsters are scamming like never before. Suspecting a sketchy seller and policy in an open marketplace can help prevent a potential nightmare. Knowing tell-tale signs of insurance fraud when we see it is smart shopping, and the information below will help. READ FULL STORY

Your Health Data May Have Been Hunted

A cyberattack involving legacy systems belonging to Exact Sciences (now owned by Abbot) has put potentially sensitive patient information in the hands of cybercriminals. The ShinyHunters group claims it stole and later published data that includes millions of email addresses along with names, addresses, phone numbers and health-related information. Abbott says it is investigating the incident and has not confirmed exactly what information was taken. For patients and healthcare providers, this is another reminder that medical information can remain exposed long after the systems that originally collected it are considered "legacy." Your Health Data May Have Been Hunted READ FULL STORY

Hackers Flush Out Users’ Google Credentials

Hackers have begun employing a new annoyance technique to steal Google account passwords. This tactic, called credential flushing, relies on getting malware onto a device that locks the system into “kiosk mode.” In this mode, users are prevented from doing anything else without providing their account credentials. Once the victim provides them, hackers can log into the victim’s Google account and steal personal information or further compromise their online security. READ FULL STORY

Simple Habits That Make You a Tougher Target for Cybercrooks

It’s already well into the new year and a fresh year usually brings fresh goals—exercise more, spend less, maybe try a new hobby. But one resolution that deserves a permanent spot on everyone’s list is tightening up your personal cybersecurity. Cyberthreats don’t take holidays, and scammers aren’t slowing down. In fact, they’re getting bolder, trickier, and faster at finding new ways to get into your accounts and steal your money or data. READ FULL STORY

Are You A Money Mule? What You Need To Know

Criminals of all kinds traffic in stolen money and need middlemen to relocate the funds. From romance scams to phishing attacks and more, there’s plenty of fraudsters with hijacked money needing laundering—and that’s where money mules come in handy. Unfortunately, sometimes those people are unaware of what they are doing, but that doesn’t mean they can’t be punished for it. Check out the red flags of avoiding becoming a money mule—and a criminal. READ FULL STORY

Social Media Brings Out The Worst Scammers

Social media attacks are a favorite of those pesky cybercriminals. One might wonder why. Well, it’s because it’s easy pickin's going for those accounts. Researchers at Arkose Labs found that of 1.2 billion social media interactions, 53% of the logins were fraudulent and 25% of new accounts were phony. Millions of people use one form of social media or another, whether it’s Facebook, Instagram, Snapchat, LinkedIn, or something else. That leaves a barrel full of phish used for targets for hackers and scammers. READ FULL STORY