Fraud & Scams

Meta pauses controversial employee-tracking program after security review

Meta has paused its controversial employee-tracking program. Unfortunately, employee privacy wasn't what stopped it.

Social Engineering Attacks Abuse Workplace Collaboration Tools

Threat actors are increasingly abusing workplace collaboration tools like Microsoft Teams to launch social engineering attacks, ac…

New Extortion Brand Uses IT Impersonation to Breach Organizations

A newly surfaced extortion brand called “Pink” is using voice phishing and fake IT support calls to breach organizations, the Regi…

Hackers steal passport and driver’s license data of 3 million Texans

A breach at a Texas Parks and Wildlife Department vendor exposed personal information belonging to more than three million Texans.

GTA 6 early access is nothing but a scam

No matter what a website claims, nobody is selling legitimate GTA 6 early access. And scammers are counting on fans believing othe…

APWG Report: Social Media Phishing is Surging

Phishing scams surged across social media platforms during the first quarter of 2026, according to a new report from the Anti-Phis…

Thousands of D-Link routers under control of AryStinger botnet

Thousands of outdated D-Link routers have been absorbed into the AryStinger botnet, with no future security updates available to p…

Document delivery scams: What are they and what’s their goal?

A seemingly official voicemail turned out to be a scam. Learn how document delivery scams work and what to do if you receive one.

Cybersecurity Awareness Training for AI: Key Focus Areas

As employees increasingly rely on AI tools and AI agents in daily workflows, organizations are facing a new workforce security cha…

A week in security (June 15 – June 21)

A list of topics we covered in the week of June 15 to June 21 of 2026

Nearly 15,000 infected websites cleaned in SocGholish crackdown

Thousands of everyday websites were cleaned as part of a global operation targeting the malware network behind fake browser update…

Americans Lost $900 Million to AI-Powered Scams Last Year

The US Federal Bureau of Investigation (FBI) warns that Americans lost just under $900 million to AI-powered scams in 2025, Malwar…

Apple patches Beats Studio Buds flaw that could turn earbuds into a wiretap

Apple has patched a year-old Bluetooth vulnerability that could have let nearby attackers listen through Beats Studio Buds' microp…

What AI Can’t Hide When It Writes a Phishing Email

Lead Analysts: Jeewan Singh Jalal, Prabhakaran Ravichandhiran, and Shikhar Dalela

Cyber Criminals Redirecting Users to Fraudulent Websites with Malicious Traffic Distribution Systems

Your AI Agents Are Eager to Please And Easy to Exploit

An AI-driven system at a beverage manufacturer recently churned out several hundred thousand excess cans after misreading unfamili…

Microsoft working on a fix for RoguePlanet, a flaw that grants full PC control

Microsoft says it's working on a fix for an unpatched Defender vulnerability that can give attackers the highest level of access o…

Retro gaming fans are the new target for fake GitHub malware

Retro gaming fans should be careful with GitHub projects that claim to be tools or plugins for their consoles. We looked at one ex…

Kodak confirms breach as ShinyHunters’ leak threat reaches deadline

The photography giant confirmed a data breach after ShinyHunters claimed it stole 2.2 million records and threatened to leak them.

Roblox developers are losing entire games to malware attacks

Attackers are using fake job offers and malware to steal accounts, Robux, and Roblox games from the developers who build them.

From 1% to 26%: How AIDA Orchestration Fixes the Remedial Training Gap

As we speak, bad actors are using AI agents to do their dirty work. Our own research tells us 85.8% of phishing attacks were AI…

Rokarolla Android malware can take over your phone and steal banking logins

Researchers have uncovered an Android banking Trojan that targets more than 200 banking and cryptocurrency apps and can take over…

Best AI Agent Security Tools for SMB and Enterprise in 2026

Introduction Enterprise AI agent adoption has created a massive blind spot: 83% of organizations have no visibility into what t…

FTC, States Sue World Professional Association for Transgender Health Over Deceptive Claims Regarding the Treatment of Children

The Federal Trade Commission, along with Alaska, Iowa, Nebraska and Texas, today filed a lawsuit against the World Professional As…

FTC Sues to Stop Sprawling Enterprise Operating Unlawful Subscription Schemes

At the Federal Trade Commission’s request, a federal court has temporarily halted a sprawling enterprise of deceptive subscription…

24 billion stolen records found in giant data dump. Check if you’re affected

Researchers found an exposed collection of 24 billion stolen records, including usernames, passwords, and other sensitive account…

Malwarebytes earns AV-TEST Top Product award, aces other third-party tests

Malwarebytes got top marks in independent tests against malware, phishing, and other online threats.

4 Hot Summer Travel Tips To Avoid Scams

When the weather starts to get warmer, it is a sign that summer time is around the corner. But just as the weather heats up and tr…

Protect Your Property from Illegal Sales Through Parcel Owner Impersonation

CyberheistNews Vol 16 #24 [FBI Alert] Lock Down Your Microsoft 365 Device Code Flows Now