Fraud & Scams

Suspicious Letters Containing White Powder Mailed to State and Local Election Officials, Media Organizations, and Public and Private Polling Companies

Critical Vulnerability Alert: PHP Core

Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters

Phishing attacks are increasingly using legitimate calendar invites to bypass security filters, according to researchers at Netcra…

Resident Evil maker Capcom warns of phishing after 11.7 million records exposed

Exposed email addresses could put CAPCOM ID users at risk of phishing. Passwords were also changed without permission on 196 accou…

FBI Warns of Phishing Attacks Ahead of the US Midterm Elections

The U.S. FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have issued joint advisories warning of election-them…

Crime Stoppers chapter freezes tips after breach breaks anonymity promise

A Crime Stoppers chapter has stopped accepting tips after a breach exposed information about anonymous tipsters.

Facebook’s misleading privacy claims land Meta a $25 billion penalty

Users were misled about who could access their personal information on Facebook. Now Meta has been ordered to pay $25 billion.

Job Seekers Who Use AI for Applications Need to be on the Lookout for Scams

Researchers at Malwarebytes warn that job seekers are increasingly vulnerable to scams as AI enables them to take a “spray-and-pra…

Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself

One in three people now tune out scam warnings, and scammers are counting on it.

Warning: Calendly Phishing Pages Are Targeting Job Seekers

Researchers at Malwarebytes warn that a phishing campaign is using spoofed Calendly pages to trick users into handing over their F…

Court Permanently Shuts Down Illegal Debt Relief Operation Following FTC Allegation That Scheme’s Operators Impersonated Government and Business Entities

At the Federal Trade Commission’s request, a federal court has permanently banned the operators of an alleged debt relief scheme t…

FTC Sues Perpetrators of Government Impersonation Scheme Over Deceptive Ads, Misleading Promises and Fake Reviews

The Federal Trade Commission is taking action against GovAssist LLC, Entry LLC and Scott Zuckerman, for their alleged involvement…

Woman faces years in prison over a Cash App account she says she never opened

A woman faces up to six years in prison over a Cash App account she says someone opened using her stolen identity.

Delivery bots accused of illegally scanning customers

Two lawsuits allege delivery robots scanned customers’ faces without consent, linked scans to names and addresses, and used them t…

Warning: Phishing Attacks Are Abusing RMM Tools to Target Bank Accounts

Researchers at Fortra are tracking a surge in phishing attacks targeting bank accounts via remote monitoring and management (RMM)…

WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators

Hidden instructions told WhatsApp’s chatbot not to suggest privacy regulators to users struggling to delete their accounts.

PHP2Shell: Why websites are going offline for emergency security updates

Websites are temporarily going offline as admins address two critical PHP flaws that could let attackers run malicious code on the…

Report: Ransomware Attacks Hit a Record High in Q3 2026

The third quarter of 2026 saw the highest number of ransomware attacks to date, with 2,627 total attacks, according to a new repor…

Fake Amazon Music x YouTube deal lures creators into a Google login trap

A convincing “creator portal” uses your own YouTube videos and viewing figures to steal your Google login.

AI Data Centers: Environmental Disaster or Groundbreaking Innovation?

Insights from Attempted Intelligence, Episode 2, hosted by Matt Duren, SVP of AI and data, KnowBe4 and Harlan Parrott, VP of AI in…

Signal bug could let someone keep listening after you hang up

A flaw in Signal’s calling library could let another participant keep hearing you after you hang up. Update your app to get the la…

KnowBe4’s Human & AI Risk In-Person Experience in Lagos

As organizations across Africa adopt AI, automated tools and autonomous systems, the digital threat landscape is changing rapidly.…

Free Helpline for Victims of Online Crime Pilots in South Africa

South Africans who fall victim to cybercrime now have more support available. MiDO Academy, The Cyber Helpline (UK) and Amazon Web…

CyberheistNews Vol 16 #42 Warning: Phishing Attacks Are Using AI-Themed Ad Lures

Google may add your number to all your accounts: How to stop it

Android users report that Google automatically added their phone number to accounts they wanted to keep separate. Here’s how to ch…

Meta glasses caught recording conversations without wake phrase

Owners reported unexpected recordings of private conversations, but Meta hasn’t explained what went wrong or what happened to the…

Man seeking love travels 2,000 km to meet an AI-generated woman

An influencer’s invitation to join her on a farm shows how public videos can feel dangerously personal.

[Cybersecurity Awareness Month] 100 Passwords, One Brain: Stop Asking Humans to Behave Like Machines

I want to start with a confession that most security leaders will recognize but few will say out loud: almost everyone reuses pass…

AOMEI Backupper update servers hijacked to push malware: Check your PC

Attackers tampered with AOMEI Backupper’s update system to deliver malware that could give them remote access to users’ PCs.

A sextortion conspiracy killed his son (Lock and Code S07E21)

This week on the Lock and Code podcast, we speak with John DeMay about a sextortion plot that targeted his son on the night of his…