Fraud & Scams

The Role of Agentic AI in Phishing Security Training

Phishing attacks are evolving faster than traditional training programs can keep up. Advances in AI — including generative tools —…

“Free World Cup stream” sites are serving scams, not football

We found dozens of fake World Cup streaming sites using football as bait to funnel visitors through a malicious advertising networ…

Cardiac patients’ medical data stolen and held to ransom

Cardiac monitoring provider iRhythm has been hit by a data theft followed by an extortion attempt.

Deepfake posting sites depicting famous women taken down by feds

Thanks to Uncle Sam, anyone trying to find nonconsensual intimate deepfakes on CFake.com and SOCFake.com will be disappointed.

A Credit Score for Cyber Behavior

You can add verified AI skills to your LinkedIn profile. Certifications proving you know how to use the latest tools. This shows p…

Inside a malicious infrastructure delivering EtherRAT, phishing pages, and malicious software

We found EtherRAT malware being distributed by a website with a strange homepage. Following the trail, we discovered a vast networ…

Claude Fable 5 and Mythos 5 “abruptly disabled” after US gov. ban

Anthropic has been ordered by the US government to cut off its newest Claude Fable 5 and Mythos 5 models for fear of abuse.

Deepfake porn sites are going offline (re-air) (Lock and Code S07E12)

This week on the Lock and Code podcast, we revisit an episode from 2024 with David Chiu that shows the progress made against deepf…

Scammers Use Couriers to Collect Cash in Cryptocurrency Investment Scams

Agentic AI Security in 2026: What to Know

Organizations are rapidly deploying autonomous and semi-autonomous AI agents that can make decisions, execute tasks and interact d…

FTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025

New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025,…

A week in security (June 8 – June 14)

A list of topics we covered in the week of June 8 to June 14 of 2026

How to Secure AI Agents: 4 Best Practices

Imagine you give an AI agent permission to triage support tickets. A few weeks later, it’s accessing a system no one intended it t…

An Overview of Email Compliance Regulations and Reporting

Email is one of the primary ways people share information, connect with customers and get work done. It is also one of the easiest…

Stolen iPhones could soon be worth a lot less to thieves

Apple and the Met Police are working together to make stolen iPhones harder to reset, resell, and profit from.

Report: AI-Assisted Fraud is Surging

AI-generated fraud schemes are now the dominant type of fraud, according to a new report from AU10TIX. AI-assisted forgeries overt…

FTC Files Contempt Motion Against Amare Global and Three Individuals Over Unsubstantiated Health Claims

The Federal Trade Commission has asked a federal court to hold in contempt dietary supplement provider Amare Global Holdings, its…

Fake verification pages are stealing Steam accounts from players

A convincing fake FACEIT verification page is stealing Steam accounts by using a fake login window that looks completely legitimat…

Google can be liable for false AI Overviews, court rules

"AI can make mistakes" isn't a good enough legal defense for defamatory or incorrect AI Overviews, a German court has ruled.

Attackers Use Spoofed ChatGPT Site to Deliver Malware

Researchers at Malwarebytes warn that a fake ChatGPT download site is delivering malware. The attackers use sponsored results and…

I Love Device-Bound Session Credentials, But They Are Still Phishable and Hackable

Google recently released Device-Bound Session Credentials (DBSC) for Google Chrome and Google Workspace. It is a long-awaited new…

VRChat says reported data breach never happened

We explain what data was exposed, the potential risks, and the steps you should take now.

Children’s phones must block nude images by September, UK says

Apple and Google have three months to block nude images on children's phones. They're not allowed to collect any data while they d…

Nearly Two-Thirds of CEOs Cite Cyberattacks as Their Top Concern

Cyberattacks are now the top concern of leading CEOs, overtaking fears over geopolitical turmoil or inflation, the Wall Street Jou…

Free Spotify Premium hacks on social media are spreading infostealers

Cybercriminals are turning TikTok and Instagram Reels into malware delivery platforms, using free software tutorials to spread inf…

A Look at Spam vs. Phishing: 4 Key Differences

Spam and phishing are often used interchangeably in email security, but they serve distinct purposes and carry varying levels of r…

KnowBe4 Wins Multiple 2026 TrustRadius Top Rated Awards

We’re proud to share that KnowBe4 has once again been recognized as a leader in cybersecurity, receiving six 2026 TrustRadius Top…

Cyber Insurance for Mid‑Market Organizations in Southeast Asia

Overview Businesses increasingly identify cyber risk as a core operational concern. Yet many cyber incidents still stem from ba…

Microsoft’s biggest-ever Patch Tuesday fixes 206 bugs, including 3 zero-days

June 2026 is the largest Patch Tuesday in history, fixing 206 vulnerabilities and three publicly disclosed zero-days.

88% of people struggle to tell what’s real online

As AI-generated scams, deepfakes, and impersonation spread, a new Malwarebytes report finds people increasingly unsure what to tru…