Online Safety & Awareness
Sextortion “help” firm took $60 million from victims, FTC alleges
The Federal Trade Commission (FTC) has filed a complaint accusing Digital Forensics Corporation of exploiting people already targeted by sextortionists. We have…
Raven AI lets cops find your home from a photo taken inside
Photos you take with your phone and some digital cameras can contain hidden information, including where they were taken. You can strip…
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
GRAHAM CLULEY Well, it could be unfashionable trousers. PAUL DUCKLIN Yeah, I suppose. GRAHAM CLULEY There is the potential for some sort…
AI worms could spread across your smart devices, Anthropic warns
Your streaming box might not look like much of a computer. But connect enough inexpensive devices together, and they can run an…
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0322 Palo Alto…
Update Windows: Record Patch Tuesday fixes flaw already under attack
Microsoft’s October Patch Tuesday release addresses a record-breaking 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed…
Fake Calendly “Meta Careers” pages steal Facebook and Google logins
We found a wave of websites posing as Calendly booking pages for job interviews at Meta. Visitors pick a slot for a…
Police receive fake murder tip from Anthropic’s Claude AI
Police tip hotlines already have their fair share of crank callers. Apparently they now have to contend with crank AI agents as…
Grindr users’ sensitive data shared through ad auctions without valid consent
Norway’s privacy regulator Datatilsynet has fined advertising technology company Xandr 92 million Norwegian kroner, approximately $9.6 million, for unlawfully processing and sharing…
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and…