FBI Employee Data Leak: When the Feds Get Phished

A data breach involving the FBI is raising some serious questions after the hacking group ShinyHunters claimed to steal sensitive information belonging to thousands of FBI employees and job applicants. The reportedly stolen data goes far beyond names and email addresses, with records said to include home addresses, phone numbers, Social Security numbers, family information, and details about employees working in sensitive areas. Reports also indicate that medical and psychiatric information may have been exposed. The FBI is investigating, but the full scope of the incident remains unclear. READ FULL STORY

Convincing Fake Election Messages

Think you can spot a fake election message? Cybercriminals are getting help from artificial intelligence to make scams more convincing than ever. The FBI and CISA are warning Americans about phishing emails, fraudulent text messages, AI-generated voices, and realistic videos that can be used to steal passwords, personal information, and money ahead of the 2026 midterm elections. From fake voter registration notices to bogus campaign donation requests, these schemes can fool even careful people. Learn the warning signs and the simple steps you can take to keep scammers from getting your vote, your data, or your cash. READ FULL STORY

What Everyday Internet Users Need to Know About the PHP Alert

A recently disclosed internet security flaw has cybersecurity experts on high alert, and it could put personal information at risk if website owners fail to act. The problem involves PHP, behind-the-scenes software used to run a huge portion of the internet’s websites. Researchers warn that criminals could exploit the weaknesses to break into vulnerable websites, potentially exposing sensitive information or taking control of affected systems. While the issue sounds technical, protecting yourself doesn’t have to be complicated. READ FULL STORY

Your FI’s Weak Link: Hackers Just Pick Up the Phone and Ask

You might expect hackers targeting some of America's biggest financial companies to use sophisticated malware, complicated exploits, and all sorts of high-tech wizardry. Instead, some are simply picking up the phone. Google security researchers recently uncovered a campaign in which criminals called employees at major financial and investment firms, pretending to be IT support. The goal was to convince employees to hand over login information and authentication codes. It worked well enough that dozens of prominent financial organizations were targeted. And if it works on Wall Street, you can bet the same basic trick will eventually be aimed at the rest of us. READ FULL STORY

Ways To See If Your Data Has Been Stolen

With all the data breaches, whether by intrusion or accident lately, it’s likely your information was exposed somehow to someone you didn’t intend. After all, the marketing company Exactis, exposed hundreds of traits on us in 350 million records. Yahoo let out email addresses and passwords on billions of people, and of course who can forget the massive breach of Equifax just last year. There is a lot of information that gets leaked on us and the more the bad actors have on us, the more targeted their phishing campaigns can be. Checking on whether or not your data is available in the underground can help you mitigate any fraud or identity theft. READ FULL STORY

What's Behind Man-In-The-Middle Attacks and How to Avoid Them

It’s not the game many of us played as kids, but it is a distorted take on the same idea. Man-in-the-middle (MitM) cyberattacks do put someone in the middle of two sides, but that someone is a cybercriminal. And those on either side are clueless victims. In reality, MitM attacks are anything but a game. A typical MitM attack can disrupt operations, intercept usernames and passwords, emails, banking, and other financial details. Read on about how MitM attacks play out, including ways to avoid being caught up in these crimes. READ FULL STORY

Slow Browser? It May Have Been Hijacked By Malware

Before calling your internet provider to complain about a slow browser think about this:  It’s no secret malware loves to hide in all kinds of things like adware, spyware, scareware, and fake browser updates. Finding your browser is not only slow, but also acting strangely is a sign something isn’t quite right. If after going through the internet provider's standard toolbox for troubleshooting doesn't help, it’s time to think about malware. READ FULL STORY

Storing Passwords In Your Browser…It’s Convenient, BUT Very Risky Too

Most of us know that password fatigue can lead to security mishaps and that creating a safe and secure entrance into our personal or work accounts can be a real challenge. Fortunately, security experts also know that safe password use has long been a problem, one that can lead to epic malware infections like ransomware, banking trojans, and more. Popular browsers like Chrome, Firefox, Safari, and Opera offer the option to store passwords for you, but hackers using the malware “RedLine Stealer” can hijack those stored passwords in a heartbeat. READ FULL STORY

Keep Track Of Common UPS Scams

With the popularity of online shopping, we all are getting packages delivered to our doors. While perusing the UPS website for important tracking information on a package I was expecting, I noticed there is an entire web page devoted to combatting fraud with regard to the shipment of UPS packages. We're sharing them with you too, as these types of scams are happening more and more these days, and with the impending holiday shopping season nearly upon us, they will most definitely increase in volume. READ FULL STORY

How To Protect Yourself After A Data Breach

Data breaches seem to happen like clockwork. None of them are your fault, but the responsibility to protect yourself and your personal information rests square on your shoulders. It can seem like a daunting task, but there are some fundamental actions that can be taken right now that can make you a significantly safer from falling victim to a cyberattack. In this video, Jim Stickley will cover a wide range of types of data that can be exposed and how you can protect yourself. Credit Card, SSN, personal information, and other types of data are in the wild, so you need to be prepared. READ FULL STORY

Meerkats Shapeshift to Steal Logins

Morphing Meerkat is a recently identified phishing-as-a-service (PhaaS) platform that employs advanced techniques to deceive users and steal credentials. Discovered by cybersecurity firm Infoblox, this platform exploits Domain Name System (DNS) mail exchange (MX) records to dynamically generate fake login pages, impersonating over 100 brands, including Gmail, Outlook, AOL, Office 365, and Yahoo. The attack initiates when a victim clicks on a malicious link embedded in a phishing email. READ FULL STORY

That Update You've Been Ignoring Might Be the Most Important One

Software updates can be annoying. They arrive when you're busy, ask you to restart your device, and sometimes seem to do nothing more exciting than change an icon or add another emoji. But those updates can also close security holes that criminals are actively looking for. Apple's most recent iOS 26.6.1 update is a perfect example. Released August 17, it provides security fixes for iPhones and iPads. Apple routinely releases these updates because attackers are constantly looking for weaknesses in the software we use every day. READ FULL STORY