Fraud & Scams

A week in security (June 29 – July 5)

A list of topics we covered in the week of June 29 to July 5 of 2026

Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts

Two new campaigns show how cybercriminals are increasingly relying on social engineering instead of software exploits to compromis…

INC Ransomware Gang Targets the Legal Sector

The INC ransomware-as-a-service (RaaS) operation has grown into one of the premier ransomware offerings, claiming hundreds of vict…

Apple’s Hide My Email doesn’t hide it very well

A year ago a researcher found a vulnerability in Apple's Hide My Email feature and now he's tired of waiting for a fix.

Fake Google and Cloudflare verification pages spread multiple malware families

We uncovered ClickFix attacks using fake Google and Cloudflare pages to deliver everything from infostealers to a newly discovered…

5 Essential Cybersecurity Defenses for Cloud Email Security

Cloud email has become the center of modern business. Regardless of your organization's industry or size, email connects employees…

Cybercriminals Are Targeting the FIFA World Cup 2026

KnowBe4 ThreatLabs tracked phishing campaign activity from the first week of April through June 22, 2026 — covering the pre-tourna…

WinRAR flaw could allow attackers to take control of your computer

A new WinRAR update fixes a serious security flaw, but without automatic updates many users could miss the patch.

Travel App Hopper to Pay $35 Million to Settle FTC Allegations It Charged Fees Without Consent and Deceived Users About Fees and Benefits of Some Products

The companies that operate the Hopper travel apps have agreed to pay $35 million and will be prohibited from deceiving consumers a…

FTC Approves Final Order Against Publishing.com, Settling Allegations It Misled Consumers

The Federal Trade Commission finalized an order with Publishing.com LLC and its two principals, settling allegations that they mis…

Fake Perplexity Chrome extension spies on your searches

A fake Perplexity Chrome extension secretly monitored searches. If you installed "Search for perplexity ai," you need to remove it…

Why Bite-Sized Security Awareness Training Matters in an Age of TikTok and Digital Distraction

In cybersecurity, attention has become one of our most valuable resources. Modern digital habits have fundamentally changed how we…

Happy 3rd Birthday to Our KnowBe4 Community!

Can you believe it? It’s here — three years of KnowBe4 Community!

Phishing Exposes Employee Data at 86% of Fortune 100 Companies

A new report from SpyCloud has found that phishing attacks have exposed employee data at 86% of Fortune 100 companies over the pas…

Shadow AI Is Not Shadow IT With a Better Marketing Budget

I saw a venn diagram on social media. One circle is Shadow IT, one circle is Shadow AI, a substantial overlap, and the implicit me…

BioShocking: when “gaming” AI agents is no longer a game

Researchers warned AI vendors about a proof-of-concept called BioShiocking that tricks agents by gamifying the outcome.

FTC Seeks Public Comment on Policy Statement Addressing AI Accuracy

The Federal Trade Commission is seeking public comment on a proposed policy statement addressing concerns that AI companies may be…

Chrome needs another whopper update to fix 382 security bugs

Google's released a huge update of 382 security fixes, 15 of which were rated as critical. So, it's time to update again!

ChatGPT produced graphic violent images that shocked researchers

AI assistants like ChatGPT are supposed to have appropriate guardrails to stop people creating harmful content. However, they don'…

Watch out for “high paying, low effort” Amazon job texts

Scammers are using Amazon and the promise of big money to lure people in to their trap.

CyberheistNews Vol 16 #26 A New Extortion Scam Uses IT Impersonation to Breach Organizations

Update time: Apple releases security patches for iOS, MacOS Tahoe, Safari

A new Apple update fixes a multitude of browser and browser related vulnerabilities which have been public knowledge for a while

FTC Requires Amazon to Pay $2.25 Million to Resolve Charges It Knowingly Violated the Fair Credit Reporting Act

Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowi…

Cybersecurity Starts At Home This World Social Media Day

Remember when "social media safety" meant advising employees not to post pictures of their security badges or laptop screens?

This pay gap is programmed (Lock and Code S07E13)

This week on the Lock and Code podcast, we speak with Veena Dubal about algorithmic wage discrimination and its appetite for all w…

119 Edge extensions promised useful tools, instead downloaded malware

Microsoft has removed over 100 Edge extensions that were delivering malware hidden in images.

A week in security (June 22 – June 28)

A list of topics we covered in the week of June 22 to June 28 of 2026

Russian Intelligence Services Continue to Target Commercial Messaging Applications

FTC Report: Americans Lost $3.5 Billion to Imposter Scams Last Year

Imposter scams were the most commonly reported type of fraud in 2025, with Americans reporting $3.5 billion in losses, according t…

Malware steals Chrome session cookies to take over your accounts

A phishing campaign installs a malicious Chrome extension to hijack browser sessions and compromise Windows devices.