Fraud & Scams

Domino’s customers targeted in credential stuffing attacks

Domino's is warning customers by email that their accounts have been compromised in a credential stuffing attack.

Remove the Language Barrier from Your Training Program’s Global Rollout

At any given moment, there’s an employee somewhere in the world tuning out of a phishing training module that was translated from…

Threat Actors Abuse Trusted Accounts and Internal Tools to Launch Convincing BEC Attacks

Attackers are continually finding new ways to refine business email compromise (BEC) attacks, according to Douglas McKee, Director…

Google pauses open source bug bounty program after rise in AI submissions

Google has frozen its OSS VRP product vulnerability submissions to stop the flood of AI generated vulnerability reports.

[Cybersecurity Awareness Month] Cyber Espionage: When the Attacker’s Best Asset Is You

Spies have always relied on technology, disguises, secret communications and clever gadgets, at least if the movies are to be beli…

Proposed anti-Flock bills could spell trouble for license plate readers

Two sets of US lawmakers introduced bills in late September and early October to tackle the growing concerns about automated licen…

FTC Issues Letters Warning Hospitals Against Deceptive Pricing Practices

Federal Trade Commission Chairman Andrew N. Ferguson today sent letters to 24 of the nation’s largest healthcare services companie…

Premier Martial Arts Franchisor and its Former Franchise Sales Organization Settle FTC Charges that the Companies Made Deceptive Claims and Violated the Franchise Rule

Franchisor Premier Franchising Group LLC (PFG) and its former franchise sales organization, Franchise Fastlane LLC (FFL), will pay…

A week in security (September 28 – October 4)

A list of topics we covered in the week of September 28 to October 4 of 2026

A week in security (September 28 – October 4)

A list of topics we covered in the week of September 28 to October 4 of 2026

Your KnowBe4 Fresh Content Updates from September 2026

FTC, States Sue Lens.com for Misrepresenting the Price of Contact Lenses in Search Ads and on Its Website

Today, the Federal Trade Commission, joined by the Utah and Nevada Attorneys General, sued to stop a long-running deceptive pricin…

Fake xStocks, Pendle, and other sites bait crypto users with rewards votes

More than 70 fake crypto sites promise extra rewards for casting a vote, then prompt visitors to connect their wallets.

Shadow AI explained: The work shortcut that could leak your company’s secrets

An AI shortcut can send confidential work data beyond your company’s control. Here’s how to get the benefits without taking unnece…

Convincing Free Mobile phishing emails appear after data breach

Free Mobile customers received very convincing phishing emails after major data breach.

Convincing Free Mobile phishing emails appear after data breach

Free Mobile customers received very convincing phishing emails after major data breach.

Malwarebytes earns another Top Product award in independent testing

Three independent labs, three standout results: a perfect score, top certification, and every threat stopped before it ran.

Pentagon breach exposes Social Security numbers and military records of millions

Social Security numbers and other personal details of military personnel and their families were exposed in a months-long Pentagon…

Losing gamblers pushed to bet more by DraftKings’ AI, report says

Betting site DraftKings has been accused of using AI to target gamblers likely to lose more after receiving promotions. The compan…

Hackers steal protective order and foster care records from Arizona courts

Attackers copied sensitive court records, including more than 150,000 foster care reports, raising privacy and safety concerns for…

Your car’s app could be telling Big Tech who you are and where you go

Who you are and where you live, work, and seek medical care could be revealed by data your car’s app shares with trackers.

Report: Social Engineering Attacks Are Increasingly Using Audio and Video Deepfakes

41% of CISOs said an audio deepfake targeted their organization within the last 12 months, according to a new survey by Gartner. A…

Govern Claude AI with KnowBe4’s Agent Risk Manager

Agent Risk Manager, KnowBe4’s AI agent security product in the KnowBe4 Platform, integrates with the Claude Compliance API to help…

CyberheistNews Vol 16 #39 [AI-Alert] Are Your New AI Assistants Your Next Attack Surface?

Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home

A buyer chatted and negotiated with Muse, which shared the seller’s address and arranged a pickup. The seller knew nothing about i…

Update your iPhone, iPad, or Mac: Flaw could run attackers’ code

A malicious file could trigger the vulnerability. Apple says it may already have been used against iPhone users.

Fake iPhone Duo preorder scam triggers DarkSword attack

A fake iPhone Duo preorder page promises a $500 voucher. Open it on a vulnerable iPhone, and it tries to break in before you fill…

Humans are reviewing Copilot users’ bizarre and abusive image-editing requests

Copilot users asked for upskirt images and sexualized edits of people in uploaded photos. Human contractors were asked to judge th…

FBI Alert: Phishing Attacks Are Impersonating Law Enforcement

The U.S. Federal Bureau of Investigation (FBI) has issued an alert warning that widespread fraud campaigns are impersonating law e…

OpenAI pauses work on top AI models after agent slips past internet controls

An OpenAI agent bypassed internet restrictions and kept running after an alert. It's another case of AI misalignment no one can af…