Fraud & Scams

ChatGPT for Teens tackles risky chats and homework shortcuts

OpenAI has strengthened ChatGPT's protections for teens, but some of its strongest parental controls still depend on linked accoun…

Twitch wants your content for Amazon AI training. Here’s how to opt out

Twitch added an option to opt out of training Amazon AI with your content—two years after it confirmed that training had begun.

Your Mac already has a built-in firewall. Here’s how to get more from it

Malwarebytes Firewall gives you a clearer, more intuitive way to manage your Mac's inbuilt firewall.

9 million images of people’s faces exposed by reverse lookup service

A researcher found an exposed database containing 9 million images that belonged to people finder service ClarityCheck.

North Korean Hackers Target LinkedIn Users With Fake Job Offers

Hackers with the North Korean threat actor Famous Chollima are posing as recruiters on LinkedIn and attempting to trick users into…

41 deceptive download sites show a real link, then send you somewhere else

A legitimate-looking link or valid digital signature can offer false reassurance. Here’s why familiar download safety checks aren’…

Sideloading on Android: What it is, why it’s risky, and how to do it more safely

With the new Advanced Flow for sideloading being rolled out, it's time to discuss what sideloading is and how to do it more safely…

Ransomware Has Changed and Your Defenses Need to Change With It

For years, ransomware was treated mostly as a malware problem. A user clicked something bad, files were encrypted, a ransom note a…

Anatomy of an Agent Tesla BEC Attack: From Inbox to In-Memory Infostealer

Lead Analysts: Prabhakaran Ravichandhiran and Jeewan Singh Jalal

Vietnam’s Cybersecurity Evolution: Classrooms to Digital Resilience

Navigating the Paradigm Shift in Human Risk Management Vietnam has emerged as a cornerstone of the global digital economy, but…

FTC Seeks Comment on Enforcement Policy Statement Regarding Personalized Pricing

The Federal Trade Commission today announced it is seeking public comment on an enforcement policy statement regarding personalize…

FTC, Connecticut Secure $4 Million Settlement with Manchester City Nissan Over Deceptive Fees Allegations

The Federal Trade Commission and state of Connecticut today secured a $4 million settlement with a Manchester, Conn., auto dealer…

Scammers are using fake crypto AML checkers to drain your wallet

We found wallet-checking sites impersonating real anti-money laundering services that trick people into approving access to scamme…

Update Chrome now: Two critical vulnerabilities fixed

Google has released a Chrome desktop update fixing 15 security vulnerabilities, including 2 buffer overflow flaws rated critical.

Your polite reply to that text is worth $2 on the dark web

A polite reply to a wrong-number text may seem harmless. But scammers use it to profile their victims and fuel a multibillion-doll…

Why People Remember Jaws But Forget Your Security Training

“You’re gonna need a bigger boat.”

Microsoft Observed 7.6 Billion Phishing Emails in Q2 2026

Researchers at Microsoft warn that phishing emails are still the top initial access vector, with more than 2 billion phishing thre…

Apple fixes another image-processing flaw that could allow code execution

Apple has released updates fixing 27 vulnerabilities in iOS, iPadOS, and macOS Tahoe, including a potentially serious image-proces…

CyberheistNews Vol 16 #33 [Blind Spot] Employees Are Easier to Scam Than They Think

Be careful what you put in “anyone with the link” Google Docs

As one developer found out when his Google Doc containing company passwords showed up in Google search results.

Heights Finance data breach: What customers need to know

Leaked personal and financial data of around 750,000 US citizens, including SSNs and bank details, could put victims at risk of id…

ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw

The researcher who found RoguePlanet has discovered ShieldBreak, a new way to bypass Microsoft’s fix and gain SYSTEM privileges.

Cybersecurity Challenges Facing the EMEA Travel and Tourism Industry

Like many, the travel and tourism industry has undergone a radical digital transformation over the last few years. From AI-curated…

Bill Payment Firm Doxo to Pay $2.1 Million to Settle FTC Allegations It Deceived Consumers and Charged Them Add-On Fees

Online bill payment firm Doxo will pay $2.1 million to settle Federal Trade Commission allegations that the company and two of its…

Fake TikTok rewards promise cash you’ll never get

TikTok-branded rewards pages offer cash for simple tasks and daily check-ins. But getting your hands on the money is another story…

Update your Mac: Screen Sharing vulnerability exploited in the wild

Attackers are exploiting a Mac Screen Sharing vulnerability to gain root access and install Monero cryptominers.

Why Facebook’s war on ad blockers could help scammers

One ad blocker is giving up the fight against Facebook ads. The consequences could go beyond annoying advertising.

A week in security (August 10 – August 16)

A list of topics we covered in the week of August 10 to August 16 of 2026

Warning: Compromised Hotel Routers Send Users to Phishing Sites

Attackers are using compromised hotel Wi-Fi routers to redirect users to Microsoft 365 phishing sites, according to researchers at…

Report: Scams Are Surging as Attackers Abuse Trusted Workflows

Threat actors are increasingly abusing trusted workflows to carry out attacks, according to a new report from Gen Digital.