Fidelity Customers Reminded That Stolen Data May Be Used Well Into the Future

If you have a retirement account, brokerage account, or other investment with Fidelity Investments, now is a good time to check your mailbox and email. A proposed class action settlement stemming from a 2024 data breach could provide eligible customers with reimbursement for documented losses, identity theft protection, and a cash payment. While the deadline to file a claim is approaching, many people may not even realize they qualify. Here's what happened, who may be eligible, and what you should do if you received a notification from Fidelity. READ FULL STORY

Protect Yourself From Phishing Scams: 8 Steps To Better Security

Since the mid 1990’s, email phishing scams have been on the rise. Like most cybercrimes, hackers have improved and refined their phishing methods over time. Now, there’s been a massive increase in targets due to the continuing coronavirus epidemic. Email phishing continues to be the method of choice for many cybercriminals to enter your device, steal your data, identity, finances, and more. A study by Tessian finds that 96% of phishing attacks arrive via email, showing the threat is very real. READ FULL STORY

Fake Claude AI Chats and Google Ads Are Now Delivering Malware

Searching Google for a Claude AI download on your Mac could now land you in the middle of a malware trap that looks surprisingly legitimate. Security researchers are warning that attackers are abusing Google Ads and even real shared Claude AI chats to trick macOS users into running dangerous Terminal commands. Victims often remain on legitimate-looking Claude pages while being guided through fake setup instructions that quietly install malware capable of stealing passwords, browser sessions, crypto wallets, and sensitive Mac Keychain data. READ FULL STORY

Did Your Browser Crash? A Helpful Hacker Will Help You Fix It

Your computer suddenly freezes. The browser crashes, and a warning message pops up saying your system has been compromised. Before you can even figure out what’s happening, the phone rings and someone claiming to be from tech support offers to help fix the problem. It sounds convenient, even reassuring. Unfortunately, that helpful voice on the line could be part of a growing scam where hackers intentionally crash a user’s browser and then swoop in pretending to save the day. Knowing how the trick works can help you avoid handing over your company’s information to a criminal. READ FULL STORY

Scary Mac Attack Locks Browsers

A scareware attack is targeting Mac users, tricking them into believing their computer has been locked by Apple. Cybercriminals use a browser-based pop-up scam that mimics Apple’s official "Find My Mac" lock screen. Researchers at LayerX Labs have been tracking this for a while now. For this ruse, a fake lock screen appears after users visit compromised or malicious websites, creating panic and pressuring them into taking immediate action. READ FULL STORY

Think Your Business Is Too Small For Hackers? It’s Time To Think Again

There’s a false sense of security when SMB owners believe hackers aren’t interested in a small company. The assumption is that bad actors will just move on to bigger and better targets with much more to steal. Unfortunately, that really couldn't be more wrong. There’s plenty of valuable data worth stealing from small businesses. Hijacked information like credit card details, passwords, and other PII is equally as useful and destructive, and if stolen can also lead to supply chain attacks, where info stolen from smaller businesses can be used to catch bigger fish. READ FULL STORY

Phishing Scams Exploit Pricey Auto-Subscription Fears

With email among the top productivity tools in our everyday lives, we know cybercriminals have adopted it for their benefit, too. And now, according to an alert by the National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA), there’s a new and highly lucrative email phishing campaign making the rounds. Both agencies are sounding the alarm about a particular version of this phish, wanting the public to know how it works. READ FULL STORY

A Quick Look at a Verizon’s Data Breach Investigations Report

Cybercriminals aren't just getting smarter. They're getting richer. Verizon's latest Data Breach Investigations Report reveals ransomware continues to dominate, third-party breaches are surging, and artificial intelligence is creating new opportunities for accidental data leaks and more convincing attacks. From healthcare and financial institutions to retailers and government agencies, no industry is immune. The report also reinforces a simple truth: Technology alone isn't enough to stop today's threats. As hackers continue to exploit human behavior, awareness and cybersecurity education remain among the most effective defenses for businesses and consumers alike. READ FULL STORY

Amazon Text Scam Recalls Your Login Credentials

Amazon shoppers are being targeted by a phishing scam posing as a product recall alert. Instead of claiming you'll be charged, the message promises a refund and urges the buyer to click a link to apply to get the money back. However, as you can probably guess, it’s designed to steal your login credentials, which may get the phisher to your payment methods too. Read on to find out how this clever Amazon Recall scam works and what steps to take if you receive one of these messages. READ FULL STORY

Critical Malware Threat Targets Gmail and Outlook

Recently, a critical email threat targeting Gmail and Outlook users has come to light. Security researchers have identified malware campaigns distributing VIP Keylogger and 0bj3ctivityStealer threats, which can compromise these users. They are designed to steal PII and other information by gathering keystrokes and taking screenshots. HP Wolf Security is warning of a malware threat that hides inside images that are delivered to the inboxes of Gmail and Outlook users. READ FULL STORY

Are Text Message Sign-In Links Safe?

Millions of people may be unknowingly exposed by “sign-in” links sent via text message. A recent study from researchers at several universities in the U.S. found that poorly secured SMS login links can be guessed or reused by attackers, opening the door to account takeovers and data theft. While it's convenient to not have to create an account and keep track of yet another password, those links often have predictable or weak security tokens at the end of their URLs. Attackers with only basic tools can guess or tweak these tokens to access other users’ accounts.  READ FULL STORY

81 Million Login Attempts Later: Why Reusing Passwords Is Still So Dangerous

More than 81 million login attempts targeted Microsoft 365 accounts in just two weeks, according to security researchers tracking a massive password-spraying campaign. Rather than trying to crack a single account, cybercriminals tested stolen usernames and commonly used passwords across millions of accounts, hoping someone had reused an old password. The attack succeeded against dozens of organizations, proving once again that weak or recycled passwords remain one of the easiest ways for criminals to break into online accounts. READ FULL STORY