Facebook’s pursuit of your personal data continues apace, and now it has a new target: photos on your phone that you haven’t shared with it yet. Techcrunch reports that the social media giant is now asking its users to peek at the photos on their phones’ camera rolls. In return it will give them new […]
This week on the Lock and Code podcast… There’s a unique counter response to romance scammers. Her name is Becky Holmes. Holmes, an expert and author on romance scams, has spent years responding to nearly every romance scammer who lands a message in her inbox. She told one scammer pretending to be Brad Pitt that
Corpse-eating selfies, and other ways to trick scammers (Lock and Code S06E14) Leggi tutto »
AT&T is set to pay $177 million to customers affected by two significant data breaches. These breaches exposed sensitive personal information of millions of current and former AT&T customers. For those that have missed the story so far: Back in 2021, an entity named Shiny Hunters (a known hacking group) claimed to have breached AT&T. Later reports indicated
The Android threat landscape in the first half of 2025 has entered a new phase. An era marked not just by volume, but by coordination and precision. Attackers are no longer simply throwing malware at users and hoping for results. They’re building ecosystems . Recent Malwarebytes threat research data reveals a sharp rise in mobile threats
Android threats rise sharply, with mobile malware jumping by 151% since start of year Leggi tutto »
Last week on Malwarebytes Labs: Gmail’s multi-factor authentication bypassed by hackers to pull off targeted attacks Thousands of private camera feeds found online. Make sure yours isn’t one of them Sextortion email scammers increase their “Hello pervert” money demands Many data brokers are failing to register with state consumer protection agencies Facial recognition: Where and
A week in security (June 23 – June 29) Leggi tutto »
On my daily rounds, I encountered a phishing attempt that used a not completely unusual, yet clever delivery method. What began as a seemingly routine DocuSign notification turned into a multi-layered deception involving Webflow, a shady redirect, and a legitimate Google login page. Webflow is a visual website builder that allows designers and developers to
Fake DocuSign email hides tricky phishing attempt Leggi tutto »
Cybercriminals are bypassing the guardrails that are supposed to keep AI models from carrying out criminal activities, according to researchers. We’ve seen the misuse of AI models by cybercriminals growing rapidly over the past several years, shaping a new era of digital threats. Early on, attackers focused on jailbreaking public AI chatbots, which meant they
Jailbroken AIs are helping cybercriminals to hone their craft Leggi tutto »
The “Do Not Call Registry” receives a lot of hate online for failing to do its job: Stop calls. “What’s the point of being on the Do Not Call list?” wrote one user on Reddit who shared a screenshot of ten declined phone calls received across one week. Though already registered with the Do Not
Why the Do Not Call Registry doesn’t work Leggi tutto »
Our remote team recently took a trip to our Estonian office. When we arrived from our various destinations, we started chatting about how our travel had been. Our senior privacy advocate, David Ruiz, mentioned that he’d opted out of facial recognition while at San Francisco International Airport. However, not everyone on the team knew this
Facial recognition: Where and how you can opt out Leggi tutto »
Hundreds of data brokers haven’t registered with state consumer protection agencies, according to The Electronic Frontier Foundation (EFF) and Privacy Rights Clearinghouse (PRC). There are different kinds of data brokers, but what they all have in common is that they gather personally identifiable information (PII) from publicly available data, datasets stolen in cybercrimes, and other places.
Many data brokers are failing to register with state consumer protection agencies Leggi tutto »
