Fraud & Scams

WinRAR flaw could allow attackers to take control of your computer

A new WinRAR update fixes a serious security flaw, but without automatic updates many users could miss the patch.

FTC Approves Final Order Against Publishing.com, Settling Allegations It Misled Consumers

The Federal Trade Commission finalized an order with Publishing.com LLC and its two principals, settling allegations that they mis…

Travel App Hopper to Pay $35 Million to Settle FTC Allegations It Charged Fees Without Consent and Deceived Users About Fees and Benefits of Some Products

The companies that operate the Hopper travel apps have agreed to pay $35 million and will be prohibited from deceiving consumers a…

Fake Perplexity Chrome extension spies on your searches

A fake Perplexity Chrome extension secretly monitored searches. If you installed "Search for perplexity ai," you need to remove it…

Happy 3rd Birthday to Our KnowBe4 Community!

Can you believe it? It’s here — three years of KnowBe4 Community!

Why Bite-Sized Security Awareness Training Matters in an Age of TikTok and Digital Distraction

In cybersecurity, attention has become one of our most valuable resources. Modern digital habits have fundamentally changed how we…

Phishing Exposes Employee Data at 86% of Fortune 100 Companies

A new report from SpyCloud has found that phishing attacks have exposed employee data at 86% of Fortune 100 companies over the pas…

Shadow AI Is Not Shadow IT With a Better Marketing Budget

I saw a venn diagram on social media. One circle is Shadow IT, one circle is Shadow AI, a substantial overlap, and the implicit me…

BioShocking: when “gaming” AI agents is no longer a game

Researchers warned AI vendors about a proof-of-concept called BioShiocking that tricks agents by gamifying the outcome.

FTC Seeks Public Comment on Policy Statement Addressing AI Accuracy

The Federal Trade Commission is seeking public comment on a proposed policy statement addressing concerns that AI companies may be…

Chrome needs another whopper update to fix 382 security bugs

Google's released a huge update of 382 security fixes, 15 of which were rated as critical. So, it's time to update again!

ChatGPT produced graphic violent images that shocked researchers

AI assistants like ChatGPT are supposed to have appropriate guardrails to stop people creating harmful content. However, they don'…

Watch out for “high paying, low effort” Amazon job texts

Scammers are using Amazon and the promise of big money to lure people in to their trap.

CyberheistNews Vol 16 #26 A New Extortion Scam Uses IT Impersonation to Breach Organizations

Update time: Apple releases security patches for iOS, MacOS Tahoe, Safari

A new Apple update fixes a multitude of browser and browser related vulnerabilities which have been public knowledge for a while

FTC Requires Amazon to Pay $2.25 Million to Resolve Charges It Knowingly Violated the Fair Credit Reporting Act

Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowi…

Cybersecurity Starts At Home This World Social Media Day

Remember when "social media safety" meant advising employees not to post pictures of their security badges or laptop screens?

This pay gap is programmed (Lock and Code S07E13)

This week on the Lock and Code podcast, we speak with Veena Dubal about algorithmic wage discrimination and its appetite for all w…

119 Edge extensions promised useful tools, instead downloaded malware

Microsoft has removed over 100 Edge extensions that were delivering malware hidden in images.

A week in security (June 22 – June 28)

A list of topics we covered in the week of June 22 to June 28 of 2026

Russian Intelligence Services Continue to Target Commercial Messaging Applications

FTC Report: Americans Lost $3.5 Billion to Imposter Scams Last Year

Imposter scams were the most commonly reported type of fraud in 2025, with Americans reporting $3.5 billion in losses, according t…

Malware steals Chrome session cookies to take over your accounts

A phishing campaign installs a malicious Chrome extension to hijack browser sessions and compromise Windows devices.

Report: Device Code Phishing is Surging

Multiple sophisticated phishing kits are now focusing on harvesting device codes to breach accounts without a password, according…

Beware of “Parcel Expert” job offers: They’re parcel mule scams

Most parcel mule scams start with fake job offers that trick victims into handling stolen goods.

Report: Online Shoppers Increasingly Ignore Scam Warning Signs

New research by McAfee has found that many consumers tend to ignore red flags associated with scams when searching online for a go…

Security Training Needs Google Maps, Not Christopher Columbus

If you’re around my age, then you know the joy of using an old paper map. Not real joy, obviously. More the sort of joy normally a…

Update Chrome to patch critical browser security flaws

Chrome has patched 18 vulnerabilities, including four critical flaws. Two WebGL bugs could allow attackers to escape the browser's…

Fake domain renewal emails trick website owners into paying scammers

We uncovered fake domain renewal notices and convincing websites to pressure website owners into paying scammers.

Elite network says it was hacked after members’ personal data was left exposed

Personal data belonging to politicians, military leaders, and executives was left publicly accessible in what looks like a securit…