Fraud & Scams

Update time: Apple releases security patches for iOS, MacOS Tahoe, Safari

A new Apple update fixes a multitude of browser and browser related vulnerabilities which have been public knowledge for a while

FTC Requires Amazon to Pay $2.25 Million to Resolve Charges It Knowingly Violated the Fair Credit Reporting Act

Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowi…

Cybersecurity Starts At Home This World Social Media Day

Remember when "social media safety" meant advising employees not to post pictures of their security badges or laptop screens?

This pay gap is programmed (Lock and Code S07E13)

This week on the Lock and Code podcast, we speak with Veena Dubal about algorithmic wage discrimination and its appetite for all w…

119 Edge extensions promised useful tools, instead downloaded malware

Microsoft has removed over 100 Edge extensions that were delivering malware hidden in images.

A week in security (June 22 – June 28)

A list of topics we covered in the week of June 22 to June 28 of 2026

Russian Intelligence Services Continue to Target Commercial Messaging Applications

FTC Report: Americans Lost $3.5 Billion to Imposter Scams Last Year

Imposter scams were the most commonly reported type of fraud in 2025, with Americans reporting $3.5 billion in losses, according t…

Malware steals Chrome session cookies to take over your accounts

A phishing campaign installs a malicious Chrome extension to hijack browser sessions and compromise Windows devices.

Report: Device Code Phishing is Surging

Multiple sophisticated phishing kits are now focusing on harvesting device codes to breach accounts without a password, according…

Beware of “Parcel Expert” job offers: They’re parcel mule scams

Most parcel mule scams start with fake job offers that trick victims into handling stolen goods.

Report: Online Shoppers Increasingly Ignore Scam Warning Signs

New research by McAfee has found that many consumers tend to ignore red flags associated with scams when searching online for a go…

Security Training Needs Google Maps, Not Christopher Columbus

If you’re around my age, then you know the joy of using an old paper map. Not real joy, obviously. More the sort of joy normally a…

Update Chrome to patch critical browser security flaws

Chrome has patched 18 vulnerabilities, including four critical flaws. Two WebGL bugs could allow attackers to escape the browser's…

Fake domain renewal emails trick website owners into paying scammers

We uncovered fake domain renewal notices and convincing websites to pressure website owners into paying scammers.

Elite network says it was hacked after members’ personal data was left exposed

Personal data belonging to politicians, military leaders, and executives was left publicly accessible in what looks like a securit…

Turn Account Takeover Into Real-Time Security Coaching

Account takeover is one of the most common ways organizations get breached and one of the hardest to train users on. Not because u…

PixelSmash flaw turns video files into attack tools

Researchers have found a critical FFmpeg flaw that could let attackers use a malicious video file to compromise vulnerable systems…

Russian Intelligence Services Continue to Target Commercial Messaging Applications

Extortion Gang Sends In-Person Attackers to Exfiltrate Data

An extortion gang tracked as “Silent Ransom Group” is targeting US law firms with voice phishing and in-person social engineering…

Watch out for renewal scams pretending to be Malwarebytes

Scammers are sending fake software renewal notices that claim you've been charged for a subscription. Some even impersonate Malwar…

Attackers aren’t loyal to any collaboration channel

Cloud email security has become pretty good. Not perfect, obviously, because the attack landscape is forever changing. But good en…

“Total access to all your devices.” Sextortion scammers strike again

They say they have videos, malware, and total control of your devices. Here's how to read a sextortion email like a security resea…

Inside the dark web: Stolen identities for 95¢, malware, and scams-for-hire

We spent 48 hours exploring the dark web and found stolen identities, malware, scams, and a thriving cybercrime economy.

CyberheistNews Vol 16 #25 [The AI Tell] How To Expose Machine-Written Phishing Fast

Meta pauses controversial employee-tracking program after security review

Meta has paused its controversial employee-tracking program. Unfortunately, employee privacy wasn't what stopped it.

Social Engineering Attacks Abuse Workplace Collaboration Tools

Threat actors are increasingly abusing workplace collaboration tools like Microsoft Teams to launch social engineering attacks, ac…

New Extortion Brand Uses IT Impersonation to Breach Organizations

A newly surfaced extortion brand called “Pink” is using voice phishing and fake IT support calls to breach organizations, the Regi…

Hackers steal passport and driver’s license data of 3 million Texans

A breach at a Texas Parks and Wildlife Department vendor exposed personal information belonging to more than three million Texans.

GTA 6 early access is nothing but a scam

No matter what a website claims, nobody is selling legitimate GTA 6 early access. And scammers are counting on fans believing othe…