Click the Box to Prove You're Human to Hackers

We've all done it countless times. It's so routine that we don't think about it much. Click the "I'm not a robot" box, solve a simple puzzle, and move on. But cybercriminals are now taking advantage of that routine by creating fake CAPTCHA pages that trick users into infecting their own computers. Instead of proving you're human, victims unknowingly install malware capable of stealing passwords, banking information, cryptocurrency wallets, and other sensitive data. The scam is spreading quickly because it looks so familiar. Knowing what to watch for could be the difference between safely browsing the web and handing criminals the keys to your digital life. READ FULL STORY

Fake Refund APP Scams Steal Banking Info, Cash

Who wouldn’t love a message from their bank about a hefty refund coming their way? Most of us would, and that’s why this latest refund scam is, well, breaking the bank. It’s called “authorized push payment” (APP) fraud, and trusting consumers are handing their most sensitive banking information to fraudsters. APP scams make big promises but they’re really another form of phishing. Take a look at what to watch for with these latest scams. READ FULL STORY

Hackers Hit Dashlane Password Manager but Dash Off With Little to Show for It

A fresh security incident involving password manager Dashlane is drawing attention across the cybersecurity community after attackers launched a brute-force campaign against user accounts. While the company says its infrastructure was not breached, the attack temporarily locked users out of their accounts and, in a small number of cases, allowed attackers to obtain encrypted password vaults. The incident serves as another reminder that even security tools designed to protect credentials can become targets themselves. READ FULL STORY

Autofill Ambush — When Your Browser Gives Away More Than You Typed

That handy autofill feature in your browser is supposed to save you time. Just start typing and your email, address, or even credit card details magically appear. Convenient, right? Unfortunately, that same shortcut could also be handing over more information than you realize. Security researchers have found that hidden fields on web pages can quietly collect extra data from your browser without you ever seeing it happen. It’s a subtle trick that turns a helpful feature into a potential data leak, and knowing how it works could keep your personal information out of the wrong hands. READ FULL STORY

Watch Out for Passport Renewal Scams Before Your International Getaway

While summer travel season is in full swing, any time is a good time to travel internationally. That’s unless your passport has expired or is expiring soon. Many Americans are discovering their passports are indeed in that predicament. Unfortunately, scammers know travelers are often in a hurry and use that urgency to their advantage. Fake passport renewal websites, fraudulent expedited processing services, phishing emails, and identity theft schemes are all targeting people trying to prepare for international trips. Before entering personal information or paying renewal fees online, travelers should understand the warning signs of passport fraud and the steps they can take to protect their money, personal data, and travel plans. READ FULL STORY

Digital Wallet Security — Learn Before You Leap

It wasn’t long before the success of digital wallets led to the same idea for storing your sensitive information. But there’s a big difference between storing credit cards versus storing your driver’s license, passport, and other sensitive, personal info. After all, it’s uber-convenient keeping this information in one “identity” wallet. The reality is, the risks can outweigh the rewards and any cybercriminal can tell you that — or would they? READ FULL STORY

Phishing Scam Falsely Claims Google Subpoena Access To Your Email

Google has been in the news a lot lately…and we mean A LOT. We’ve seen browser extension warnings, password recovery warnings, a slick scam that claims to be from Google Technical Support, and several others. Now, a new phishing scam is making the rounds, targeting users with alarming messages that claim Google has received a subpoena to access their email account. It’s getting difficult to keep up with all of these. This scam uses Google’s own tools to make it even more realistic and to allow the emails to bypass authentication checks and still land in your in box, rather than your spam box. READ FULL STORY

Bug Lurks in the Firefox Browser Engine. Update Now

A security flaw in Mozilla Firefox, highlights why browser updates matter more than ever. The vulnerability involves a heap buffer overflow, a component used to process certain video content on the web. Ok, that’s a bit technical, but suffice it to say, in the worst-case scenario, attackers could potentially exploit this flaw to execute malicious code, crash the browser, or manipulate how Firefox behaves if a specially crafted media file or webpage is loaded. READ FULL STORY

This Cunning Account Takeover Robbed A “Cybersmart” User’s Account

While banking online, this person received a message saying her account had been compromised and provided her a phone number to call. A woman in New York learned the hard way that even those who know the tell-tale signs of a cyberattack can be fooled. She fell victim to an account takeover (ATO) of her financial accounts – to the tune of over $30,000. Know that all types of accounts are vulnerable to ATOs, and not just those that are financial. READ FULL STORY

Spectrum Breach Exposes Vulnerability in Our Voices

A single phone call may have opened the door to one of the largest reported telecom data breaches of 2026, so far. Charter Communications, the company behind Spectrum internet, cable, and mobile services, has confirmed a cybersecurity incident after the notorious hacking group ShinyHunters claimed to have stolen millions of customer records. Charter disputes the scope of the theft and says sensitive customer information was not exposed. However, this is another incident highlighting how social engineering attacks continue to thwart even the most sophisticated security systems and strategies. READ FULL STORY

Paradise Tax Trap Tries to Outsmart Caribbean Travelers

Planning a Caribbean escape any time soon? Scammers are counting on it. A growing “entry form” scam is tricking travelers into paying hefty fees for a document that’s completely free. These slick, lookalike websites appear at the top of search results, creating urgency just as vacationers rush to finalize travel plans. Before you click, pay, or share your passport details, take a beat to read and find out how this digital ambush works—and how to dodge it. READ FULL STORY

Email Warnings No Longer Guarantee Messages Are From Within

You may have seen this warning, or something like it, at the end of email messages: “CAUTION: This email originated from outside of the organization.” Such an alert intends to let you know that the message you are receiving is not coming from a colleague with an email address from within your organization. It’s supposed to serve as a warning that something in the message just may be trying to phish you. Now, those rascally rabbit cybercriminals have figured out a way to get rid of it. READ FULL STORY