Steer Clear of the “Pay Yourself Scam” That’s Targeting Online Bank Accounts
An old banking scam has a new look. And it’s making the rounds again. Recently Bank of America alerted its customers of the “Pay Yourself Scam,” where scammers use phony fraud alerts and trick their victims into giving them access to their online banking accounts. It’s a form of phishing attack, and according to Bank […] more…Here’s How to Steer Clear of Bot Accounts on Social Media
“Congratulations, you’re a winner!” “Did you know this public figure is trying to make your life worse? Click here for what they don’t want you to know.” “Save thousands today with just one click!” Spam and bot accounts on social media are everywhere. You’ve likely encountered messages like these that attempt to get you to […] more…The IRS “Dirty Dozen” – Top Tax Season Scams to Steer Clear of This Year
Who loves tax season besides accountants? Scammers. Emotions can run high during tax time. Even if you’re pretty sure you did everything right, you may still have a few doubts kicking around. Did I file correctly? Did I claim the right deductions? Will I get audited? As it turns out, these are the very same […] more…Legions of cybersecurity volunteers rally to protect hospitals during COVID-19 crisis
Last month, some of the usual cast of online scammers and malware miscreants promised to refrain from attacking healthcare organizations or exploiting them during the COVID-19 crisis, showing a sense of honor unexpected from ransomware attackers and cryptocurrency thieves. However, this ceasefire turned out to be a head-fake. Within a week of those vows, malware […] more…How to Steer Clear of Tax Season Scams
It’s that time of year again – tax season! Whether you’ve already filed in the hopes of an early refund or have yet to start the process, one thing is for sure: cybercriminals will certainly use tax season as a means to get victims to give up their personal and financial information. This time of […] more…6 Ways to Help Kids Steer Clear of Cyberbullies During Summer Break
Wouldn’t it be nice if kids could leave the veiled threats and cutting words behind when the bell rings for summer break? Unfortunately, bullies rarely take a break from intimidating others over the summer and may even step up their game. To date, nothing has humbled me quite like this parenting gig. Once upon a […] more…Citadel malware now targets password management applications
Attackers have started using the Citadel Trojan program to steal master passwords for password management applications and other authentication programs. The Citadel malware has typically been used to steal online banking credentials and other financial information by modifying banking sites on the fly when opened by users in their local browsers. The technique is known […] more…Steam gamers targeted by cleartext-grabbing trojan
Steam gamers are targeted by a trojan that steals their login credentials and defeats the service’s password encryption mechanism by using HTML injection. Attackers stripping users’ login data with a variant of the trojan Ramnit since mid-July according to Trusteer fraud prevention solutions manager Etay Maor. Steam has some 54 million members and was victim […] more…
Microsoft’s Digital Crimes Unit Targets ZeuS
Microsoft’s Digital Crimes Unit expanded its legal arsenal against malicious botnets this past weekend when – in collaboration with financial services industry members – it took out servers belonging to ZeuS botnets. Microsoft filed with the U.S. District Court for the Eastern District of New York on March 23rd. The successful application allowed Microsoft and […] more…Sizing the PHP exposure window for CVE-2026-109618 and CVE-2026-109619 with VirusTotal
On October 20, the PHP security team announced an out-of-band security release for Wednesday, October 21, 2026 at 14:00 UTC, fixing two critical vulnerabilities rated CVSS v4.0 9.2 (CVE-2026-109618 and CVE-2026-109619). Hours before the release, technical details leaked publicly. They point to the session.upload_progress feature, which has been part of PHP since 5.4.0 and is […] more…An undisclosed Microsoft presentation is now central to a multi-million dollar antitrust fight
There’s a new development in a Microsoft antitrust case, originally filed in England’s High Court in April 2021, and it doesn’t look good for the tech giant. A consent order from the UK Competition Appeal Tribunal is demanding documents from past and present Microsoft executives that may have a bearing on a £270 million (about […] more…An undisclosed Microsoft presentation is now central to a multimillion-dollar antitrust fight
There’s a new development in a Microsoft antitrust case, originally filed in England’s High Court in April 2021, and it doesn’t look good for the tech giant. A consent order from the UK Competition Appeal Tribunal is demanding documents from past and present Microsoft executives that may have a bearing on a £270 million (about […] more…BigBear 2.0 phishing campaign hijacks Microsoft 365 sessions after MFA
A phishing-as-a-service operation targeting Microsoft 365 users has harvested thousands of session cookies that could be used to hijack authenticated sessions after victims complete multifactor authentication, CloudSEK said. The cybersecurity firm said in a report that it uncovered the operation, known as BigBear 2.0, in June after gaining access to its administrative panel. The panel contained 5,137 […] more…How to automate your Gmail inbox — without AI
Gmail is filled with hidden features and add-on possibilities, but one of the service’s most powerful organizational tools is sitting right in the heart of its regular settings. As you may have guessed by now (especially if you read this story’s headline, you clever little cat), I’m talking about filters — Gmail’s long-standing system for […] more…Anthropic makes changes to stop AI agents running amok again
Learning from the OpenAI-Hugging Face fiasco, as well as from recent revelations about its own model, Anthropic is revamping its security and alignment practices. The company has established controls that flag when a model attempts to break out of a sandbox or successfully accesses the live internet, cordoned off its highest-risk test environments, and proposed […] more…OpenClaw becomes a nonprofit foundation as it seeks to be ‘the Switzerland of AI’
OpenClaw’s announcement that it has become a nonprofit foundation is generating IT excitement because of the potential for governance and development consistency that the popular platform has thus far lacked. Still, some worry about the risks created by the move. “Our ambition is for OpenClaw to be the Switzerland of AI. Neutral ground where every […] more…More information
- How to blunt spear phishing attacks
- Sierra Wireless Says Ransomware Disrupted Production at Manufacturing Facilities
- Increasing malware sophistication vexes lawmakers, industry
- Java is not JavaScript – tell your friends!
- Microsoft Windows ‘Win32k.sys’ CVE-2013-1257 Local Privilege Escalation Vulnerability
- Critical Erlang/OTP SSH Flaw Exposes Many Devices to Remote Hacking
- OpenSSL Releases Patches to Address “Severe” Security Holes
- Pixel 2 XL Fingerprint Sensor Issues Reported After Android 8.1 Update
- Starlink unveils airplane service—Musk says it’s like using Internet at home
- ESET Patches High-Severity Vulnerability in Windows Applications