Catwatchful “child monitoring” app exposes victims’ data
If an app markets itself as being for “child monitoring”, a customer might expect that their data and those of the person you’re monitoring is…
Category: MalwareBytes
Microsoft, PayPal, DocuSign, and Geek Squad faked in callback phishing scams
Microsoft, DocuSign, Adobe, McAfee, NortonLifeLock, PayPal, and Best Buy’s Geek Squad are being impersonated online through malicious emails that contain fake telephone support numbers and…
Qantas: Breach affects 6 million people, “significant” amount of data likely taken
Australia’s largest airline Qantas has confirmed that cybercriminals have gained access to a third party customer servicing platform that contained 6 million customer service records.…
Bluetooth vulnerability in audio devices can be exploited to spy on users
Researchers have found vulnerabilities in 29 Bluetooth devices like speakers, earbuds, headphones, and wireless microphones from reputable companies including Sony, Bose, and JBL. The vulnerabilities…
Update your Chrome to fix new actively exploited zero-day vulnerability
Google has released an update for its Chrome browser to patch an actively exploited flaw. This update is crucial since it addresses an actively exploited…
Facebook wants to look at your entire camera roll for “AI restyling” suggestions, and more
Facebook’s pursuit of your personal data continues apace, and now it has a new target: photos on your phone that you haven’t shared with it…
Corpse-eating selfies, and other ways to trick scammers (Lock and Code S06E14)
This week on the Lock and Code podcast… There’s a unique counter response to romance scammers. Her name is Becky Holmes. Holmes, an expert and…
AT&T to pay compensation to data breach victims. Here’s how to check if you were affected
AT&T is set to pay $177 million to customers affected by two significant data breaches. These breaches exposed sensitive personal information of millions of current and former…
Android threats rise sharply, with mobile malware jumping by 151% since start of year
The Android threat landscape in the first half of 2025 has entered a new phase. An era marked not just by volume, but by coordination…
Fake DocuSign email hides tricky phishing attempt
On my daily rounds, I encountered a phishing attempt that used a not completely unusual, yet clever delivery method. What began as a seemingly routine…
Jailbroken AIs are helping cybercriminals to hone their craft
Cybercriminals are bypassing the guardrails that are supposed to keep AI models from carrying out criminal activities, according to researchers. We’ve seen the misuse of…
Why the Do Not Call Registry doesn’t work
The “Do Not Call Registry” receives a lot of hate online for failing to do its job: Stop calls. “What’s the point of being on…