Fraud & Scams

Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding

We look into how attackers are using the legitimate Ren'Py game engine to spread a malware loader that ultimately delivers Amatera…

A week in security (July 13 – July 19)

A list of topics we covered in the week of July 13 to July 19 of 2026

Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords

One compromised Shark robot vacuum could unlock remote access to many others.

How to use GitHub safely

Knowing how to spot a malicious GitHub repository can help you avoid downloading malware disguised as legitimate software.

The backlash against Flock cameras is spreading

Privacy concerns have dogged Flock's automated license plate recognition system for years. Now accuracy and reliability are coming…

Trust, Verify, Protect: Modernizing Email Security for the Cloud

Picture this: Your company just fell victim to a massive data breach. The culprit wasn't a sophisticated malware strain, a zero-da…

Security updates available for Adobe, Chrome, Firefox, VMWare, and Zoom

Several updates have been made available including those for Adobe, Chrome, Firefox, VMWare, and Zoom.

Samsung backs down on threat to delete health data

Samsung threatened to delete users' health data if they refused AI training. After a backlash, it quickly backed down.

Claude for Chrome flaw could let rogue extensions access your Gmail

The ClaudeBleed vulnerability still lets malicious Chrome extensions abuse Claude for Chrome's permissions.

Report: Social Engineering Remains a Central Part of AI-assisted Attacks

Threat actors continue to rely on social engineering as AI is incorporated into their attacks, according to ESET’s Threat Report f…

July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days

Microsoft's July 2026 Patch Tuesday sets yet another record, fixing 622 Microsoft CVEs—three times as many as last month.

FTC Approves Final Order Against TruHeight for Deceptive and Unsubstantiated Advertising of Supplements for Kids and Teens

The Federal Trade Commission finalized an order with Vanilla Chip LLC—which does business as TruHeight—and its two principals requ…

This fake Apple app can unlock your Mac’s password vault

Disguised as Apple's CrashReporter, CrashStealer steals passwords, browser data, crypto wallets, and other sensitive information.

ClickFix Social Engineering is Now the Leading Malware Delivery Method

The ClickFix social engineering technique is now the top malware delivery method, according to a new report from ReliaQuest. These…

CyberheistNews Vol 16 #28 Your 2026 Phishing by Industry Benchmarks: The Findings on Human Risk

Scammers Can Use AI Tools to Pinpoint Your Location Based on a Photo

Scammers can use AI tools to find your location in photos you post to social media, according to researchers at McAfee. This infor…

Warning: Scammers are using FaceTime to empty bank accounts

Cybercriminals are combining social engineering through apps like FaceTime with unpatched devices to steal credentials and drain b…

The inside job that cost ransomware victims millions

Instead of helping victims negotiate with BlackCat, a trusted ransomware negotiator secretly helped the gang extort them.

Report: Attackers Are Using AI to Automate Social Engineering

Threat actors continue to use AI tools to automate their attack flows and increase efficiency, according to researchers at ReliaQu…

Trusting your kids online isn’t enough (Lock and Code S07E14)

This week on the Lock and Code podcast, we speak with Anna Brading about what actually works in keeping her kids safe online.

Your KnowBe4 Fresh Compliance Plus Content Updates from June 2026

Fran Roberts - Studios General Manager, KnowBe4 This is my first message to you as KnowBe4's new Studios General Manager, an…

Ghostcommit attack hides malicious AI instructions in images

A proof-of-concept attack hides prompt injection in a PNG file, turning routine code reviews into a path for secret theft.

Fake crypto gift card sites are getting harder to spot

Scam crypto gift card stores look almost identical to the real thing. One wrong click can leave you with no card and no way to get…

A week in security (July 6 – July 12)

A list of topics we covered in the week of July 6 to July 12 of 2026

From Awareness to Digital Workforce Security

Security must evolve from a static training program into dynamic, AI-powered human and AI risk orchestration embedded across the o…

Your KnowBe4 Fresh Content Updates from June 2026

Fran Roberts - Studios General Manager, KnowBe4 I am thrilled to be writing my first message to you as KnowBe4's new Studios…

This new Windows malware can take over your PC and wipe it clean

GigaWiper is a remote access Trojan that can spy on victims and permanently wipe their systems in three different ways.

Threat Actor Uses Phishing to Breach Orgs for Ransomware Gangs

An initial access broker associated with the Payouts King ransomware group is using Microsoft Teams phishing to deploy a malicious…

How mule betting scams recruit ordinary people

Easy-money offers to open a gambling account could make you part of a money laundering operation. Here's how to spot a mule bettin…

Two Chrome updates in two days fix critical vulnerabilities

Chrome updates are arriving within days of each other. Learn how to update Chrome and check if you're running the latest version.