Smooth-talking Hackers Charm Their Way Into Apollo Global Management

When you think about a cyberattack against a $900 billion investment company, you might picture sophisticated hackers exploiting some obscure computer vulnerability. That's not what happened at Apollo Global Management. Attackers used social engineering to gain access to the company's cloud systems, potentially exposing names, dates of birth, addresses, contact information and Social Security numbers. The incident is part of a broader campaign targeting financial companies, and it offers an important lesson for all of us: sometimes the easiest way into a well-protected computer system is simply convincing someone to open the door. READ FULL STORY

Meerkats Shapeshift to Steal Logins

Morphing Meerkat is a recently identified phishing-as-a-service (PhaaS) platform that employs advanced techniques to deceive users and steal credentials. Discovered by cybersecurity firm Infoblox, this platform exploits Domain Name System (DNS) mail exchange (MX) records to dynamically generate fake login pages, impersonating over 100 brands, including Gmail, Outlook, AOL, Office 365, and Yahoo. The attack initiates when a victim clicks on a malicious link embedded in a phishing email. READ FULL STORY

That Update You've Been Ignoring Might Be the Most Important One

Software updates can be annoying. They arrive when you're busy, ask you to restart your device, and sometimes seem to do nothing more exciting than change an icon or add another emoji. But those updates can also close security holes that criminals are actively looking for. Apple's most recent iOS 26.6.1 update is a perfect example. Released August 17, it provides security fixes for iPhones and iPads. Apple routinely releases these updates because attackers are constantly looking for weaknesses in the software we use every day. READ FULL STORY

It’s Healthcare Open Enrollment Season. Don’t Sign Up With a Scammer

It's the time of year when millions of people are comparing healthcare plans, checking prices, and trying to figure out what healthcare coverage makes the most sense for the coming year. Whether you’re reviewing Medicare options or browsing Affordable Care Act (ACA) plans, you’ve got until mid-December to lock in your choices. But while you’re doing your homework, cybercriminals are doing theirs — and they’re already flooding inboxes, texts, and phone lines with scams designed to steal your personal and financial information. READ FULL STORY

October Is Cybersecurity Awareness Month: 7 Simple Ways to Keep Hackers Out October is Cyberse

October is Cybersecurity Awareness Month, and it's the perfect excuse to check whether your online habits are helping protect you or making a cybercriminal's job easier. From stronger passwords and two-factor authentication to spotting suspicious messages, updating devices, securing home Wi-Fi, and backing up important files, these simple steps can make a real difference. You don't need to be a tech expert to stay safer online. Think of these tips as a timely refresher to help keep your accounts, money, and personal information out of the wrong hands. READ FULL STORY

ClickFix Attacks Help You Hack Your Own PC

PC users beware—ClickFix attacks are here. Global cybersecurity company ESET’s did some research on the topic. Its research finds ClickFix incidents are now a close second to phishing—and that’s saying something. They also found these two-faced attacks multiplied a crushing 500%+ during that same year. And they are pretty crafty in their trickery too. It’s been an invaluable hacking tool for decades since phishing tactics keep reinventing themself as technology marches on. These start with phishing, of course, and these attacks are getting more sophisticated by the day, and with help from AI. READ FULL STORY

When What You See Is Not What You Get

Although it may sound strange, bad actors are exploiting what we see – or what we think we see. Always looking for new ways to gain our confidence, cybercriminals are counting on us being human to make this con work. Trust, fear, and concern are some of the emotions being exploited, which is nothing new for hackers. But what is new is taking advantage of our assumption that when we see a trusted website, it’s worthy of our trust…Well, maybe not so much anymore. READ FULL STORY

Watch Out for Passport Renewal Scams Before Your International Getaway

While summer travel season is in full swing, any time is a good time to travel internationally. That’s unless your passport has expired or is expiring soon. Many Americans are discovering their passports are indeed in that predicament. Unfortunately, scammers know travelers are often in a hurry and use that urgency to their advantage. Fake passport renewal websites, fraudulent expedited processing services, phishing emails, and identity theft schemes are all targeting people trying to prepare for international trips. Before entering personal information or paying renewal fees online, travelers should understand the warning signs of passport fraud and the steps they can take to protect their money, personal data, and travel plans. READ FULL STORY

Keeping Your Information More Private and Out of the Hands of Attackers

It’s no secret, especially after the recent revelation of the NPD breach, that our information is everywhere online. This is true whether we intentionally allowed it or not. There are numerous websites that collect information about us and post it online. Many are “people search” sites. If you’ve ever looked up an unfamiliar phone number, some of these likely showed up. Well-known lookup sites have all kinds of information on all of us. The challenge is to keep this information from making you a victim of a phishing attack or identity theft. READ FULL STORY

Microsoft’s Record-Breaking Patch Tuesday

Microsoft's September Patch Tuesday came with a number that is hard to ignore. Nearly 1,000 security vulnerabilities addressed in a single month. It was the company's largest Patch Tuesday release on record, and the news wasn't simply about quantity. More than 100 vulnerabilities were rated critical, while two of the flaws were already being actively exploited by attackers. For everyday Windows users, the story is another reminder that those seemingly annoying update notifications are doing an important job. Keeping Windows and other Microsoft software updated can close security holes before criminals get the chance to use them. READ FULL STORY

Avoiding Insurance Fraud And Fraudsters

Insurance fraud is a problem everywhere and it makes things more expensive for those of us playing by the rules. With this fraud in particular, whether it’s for our health, car, or home, fraudsters are scamming like never before. Suspecting a sketchy seller and policy in an open marketplace can help prevent a potential nightmare. Knowing tell-tale signs of insurance fraud when we see it is smart shopping, and the information below will help. READ FULL STORY

Your Financial Institution Is Calling. Or Is It?

A phone call that looks like it’s coming from your financial institution could be the opening move in a fast-moving chess game the FBI is warning about. Using spoofed numbers and convincing scripts, criminals create a sense of urgency, claiming your account is under attack. The next move includes a carefully guided attempt to extract passwords, verification codes, or even push you to move your own money straight into their hands. Knowing when to hang up could be the difference between staying secure and watching your account drained in a flash. READ FULL STORY