A Check on P2P Scams

There are so many payment apps out there; PayPal, Venmo, and Zelle, for instance and perhaps you’ve probably wondered: Are these apps actually safe? The short answer—yes, if you’re careful. While most P2P apps use encryption to protect your data, scammers are constantly looking for new ways to trick users into giving up their money. And because these apps are often linked directly to your bank account, one mistake can be very costly. But just knowing how to spot potential scams and fraud can help you use them safely. READ FULL STORY

Watch Out For Scammers Pretending To Be FDIC Or OIG Officials

Scammers are increasingly pretending to be officials from the Federal Deposit Insurance Corporation (FDIC) or the FDIC Office of Inspector General (OIG). Reaching you by phone, email, text, or even via social media and demanding money or personal information. According to an alert from the FDIC OIG, these impersonation scams often use official-sounding names, real official-looking seals or logos, and urgent or threatening language to seem legitimate. READ FULL STORY

Scary Mac Attack Locks Browsers

A scareware attack is targeting Mac users, tricking them into believing their computer has been locked by Apple. Cybercriminals use a browser-based pop-up scam that mimics Apple’s official "Find My Mac" lock screen. Researchers at LayerX Labs have been tracking this for a while now. For this ruse, a fake lock screen appears after users visit compromised or malicious websites, creating panic and pressuring them into taking immediate action. READ FULL STORY

Think Your Business Is Too Small For Hackers? It’s Time To Think Again

There’s a false sense of security when SMB owners believe hackers aren’t interested in a small company. The assumption is that bad actors will just move on to bigger and better targets with much more to steal. Unfortunately, that really couldn't be more wrong. There’s plenty of valuable data worth stealing from small businesses. Hijacked information like credit card details, passwords, and other PII is equally as useful and destructive, and if stolen can also lead to supply chain attacks, where info stolen from smaller businesses can be used to catch bigger fish. READ FULL STORY

The Deepfake Boss Boom: Criminals Are Renting AI-Powered Deception

Deepfake technology is becoming cheaper, easier to use, and increasingly available through criminal marketplaces. Security researchers are now reporting a 39% increase in online discussions related to "deepfake-as-a-service" offerings, where cybercriminals can purchase AI-generated voices, videos, and identities on demand. The trend is fueling a new wave of business fraud, impersonation scams, and social engineering attacks that can fool even experienced professionals. As deepfake tools become more sophisticated, organizations and individuals must rethink how they verify identities and protect themselves from increasingly convincing digital deception. READ FULL STORY

Cyber Thieves Stuff Some Chiken With Your Credentials

Thousands of Chick-fil-A customers are being reminded why reusing passwords can be risky after cybercriminals targeted customer loyalty accounts in a credential stuffing attack. Instead of breaking into Chick-fil-A's systems, attackers used usernames and passwords stolen from previous data breaches at other companies to try logging into customer accounts. The incident serves as another reminder that one reused password can put multiple online accounts at risk, even when the company itself has not been hacked. READ FULL STORY

Ransomware Attacks on FIs Are Rising-Here's Why Every Customer Should Pay Attention

When hackers target a bank, they're not just after the bank's money. They may be trying to steal customer information, disrupt online services, or pressure financial institutions into paying enormous ransoms. Security researchers say ransomware attacks against banks, credit unions, and financial technology companies continue to climb, fueled by increasingly organized cybercriminal groups. While your deposits remain protected in most cases, these attacks can still lead to service outages, delayed transactions, and a greater risk of scams targeting customers. Here's what you need to know. READ FULL STORY

Are Text Message Sign-In Links Safe?

Millions of people may be unknowingly exposed by “sign-in” links sent via text message. A recent study from researchers at several universities in the U.S. found that poorly secured SMS login links can be guessed or reused by attackers, opening the door to account takeovers and data theft. While it's convenient to not have to create an account and keep track of yet another password, those links often have predictable or weak security tokens at the end of their URLs. Attackers with only basic tools can guess or tweak these tokens to access other users’ accounts.  READ FULL STORY

81 Million Login Attempts Later: Why Reusing Passwords Is Still So Dangerous

More than 81 million login attempts targeted Microsoft 365 accounts in just two weeks, according to security researchers tracking a massive password-spraying campaign. Rather than trying to crack a single account, cybercriminals tested stolen usernames and commonly used passwords across millions of accounts, hoping someone had reused an old password. The attack succeeded against dozens of organizations, proving once again that weak or recycled passwords remain one of the easiest ways for criminals to break into online accounts. READ FULL STORY

Microsoft Just Fixed 400+ Security Holes. Yes, You Should Update Windows.

If your Windows computer has been asking you to install an update, this is one request you probably should not ignore. Microsoft's latest security update fixes more than 400 vulnerabilities, including dozens of serious flaws and one that attackers are already exploiting. You do not need to understand CVE numbers, hacking techniques or cybersecurity jargon to protect yourself. For everyday Windows users, the most important message is remarkably simple: update your computer, restart it when asked and do not give cybercriminals an open door that Microsoft has already provided a key to close. READ FULL STORY

Why Local Government Hacks Matter to Everyone

Paying property taxes, filing court paperwork, renewing permits, or simply calling a county office are everyday tasks most of us take for granted. But a recent cyberattack against Delaware County, Pennsylvania, shows how quickly those services can grind to a halt when hackers target local government. While officials continue investigating what information may have been accessed, the incident is another reminder that cyberattacks don't just affect big corporations. They can disrupt the public services millions of Americans rely on every day and may put sensitive personal information at risk. READ FULL STORY

Drivers’ License Numbers Speed Off Into Hackers’ Hands in Massive Data Breach

Millions of Americans are learning that some of their most important personal information may have sped off into the hands of cybercriminals. Insurance provider AssuranceAmerica has confirmed that hackers ran off with the driver’s license numbers and personal information of nearly 7 million people after breaking into the company’s network. If you have ever had an auto insurance policy with AssuranceAmerica, now is the time to watch for suspicious emails, monitor your financial accounts, and be alert for identity theft attempts that could use your stolen information. READ FULL STORY