Date: Thursday, January 12, 2026
The "Instagram Reset" Panic: Over the weekend, millions of users reported receiving official-looking emails titled "Reset your password." While it looks like a security glitch, experts confirmed today it is a massive "phishing" campaign. Scammers are sending these in bulk, hoping you’ll click the link in a panic to "secure" your account, which actually hands your login details straight to them. Security Week
Automated investment platform Betterment has confirmed that hackers broke into some of its systems last week and accessed the personal information of an undisclosed number of its customers. In an email sent on Monday, which TechCrunch has seen, Betterment said that hackers gained access to some company systems on January 9 by way of a social engineering attack, which involved “third-party platforms” that the company uses for marketing and operations. Techcrunch
Gen Digital Unifies Norton/Avast Protection with New Features
The company behind well-known consumer security tools such as Norton, Avast, and LifeLock is rolling out an updated platform that aims to use artificial intelligence to protect users across devices. This means if you subscribe to one of their services, you may see new features that combine antivirus, identity protection, and cloud-driven threat prevention in one place. Ad-hoc-news
Conduent Healthcare Data Breach Notices Grow Larger
A healthcare services provider called Conduent Business Services has expanded its count of people affected by a past breach to nearly 15 million in Texas alone. If you’ve received notice from Conduent about your health data being exposed, it’s important to follow the recommended steps to secure your identity and monitor accounts. Hipaa Journal
Experts Note Rising Cyber-Enabled Fraud Affecting Everyday People
A recent global survey highlights that cyber-enabled fraud — like scams and trickery that lead to stolen money or accounts — is now more frequently encountered by ordinary people than high-tech threats like hacking into a corporation’s systems. This reflects what many households have been seeing: scams that swipe credentials or payment information rather than dramatic headline attacks. Cybersecurity Dive
Fake Delivery or Account Alerts
Scammers send messages claiming you owe money for a missed delivery or overdue bill. The message links to a fake login page to steal your passwords. Look at the actual account or shipping app instead of clicking links. WBAY First Alert News
FBI warning about “quishing” (QR code phishing)
The FBI has issued an urgent alert about QR-code-based phishing (“quishing”) where attackers embed malicious links in QR codes sent via email or text. Scanning them can lead to credential theft or malware downloads. Always verify the source before scanning and check URLs carefully. Toms Guide
Romance scam financial loss warning
A recent case highlighted a $1 million romance scam loss, where a fraudster built trust over time and convinced the victim to send funds and “invest” in cryptocurrency. Romance scams remain highly effective social-engineering attacks. CT Insider
FTC impersonation and courier scams via phone calls
Police are warning of scammers posing as FTC officials or federal agents, claiming your account or identity has been compromised. They demand you withdraw cash or buy gold/crypto and send it to a “courier” — this is always fraudulent. Hang up and report immediately. Stamford Advocate
“Gold bar” and similar financial scams targeting seniors
• Law enforcement (e.g., Shelton police) has noted a rise in “gold bar” scams, where fraudsters tell victims to buy precious metals as “secure” assets and then collect them. Legitimate agencies never instruct you to withdraw funds or buy gold for security reasons. CT Insider
Seasonal increase in consumer and e-commerce scams
• Cybersecurity experts warn that scams have spiked around seasonal shopping and promotion periods — watch out for fake delivery notifications, too-good-to-be-true deals, and fraudulent e-commerce links. IT Security Guru
Verify Before You Click
Don't click links in unexpected emails or texts, even if they look official. Instead, open your web browser and type the website address yourself. If an email says you have a voicemail or shared document, go directly to the service instead of clicking the link.
Enable Two-Factor Authentication on Financial Accounts
Go to your bank, investment accounts, and credit card websites today. Turn on two-factor authentication (also called 2FA or multi-factor authentication). This requires both your password and your phone to log in, blocking most account takeover attempts.
Review Your Auto Loan Documents
If you bought or financed a car anytime between May and October 2025, your information may have been exposed in the 700Credit breach. Watch your credit reports closely for suspicious activity and consider placing a fraud alert with the credit bureaus.
Never send cryptocurrency to claim a prize or investment opportunity—legitimate companies don't ask you to send crypto to receive crypto, and all such offers are scams with no way to recover your money.
Social engineering is "human hacking"—the use of psychological tricks to manipulate you into giving away sensitive information or money. It relies on exploiting human emotions like trust, fear, or urgency rather than breaking into your computer with technical code.
Check for Data Breaches: HaveIBeenPwned.com
Report Scams: ReportFraud.ftc.gov or IC3.gov
Free Credit Reports: AnnualCreditReport.com
California Data Deletion: privacy.ca.gov
Our mission is to help you stay one step ahead of internet scammers and protect your digital life. We provide real-world examples of scam emails, text messages, social media posts, and phone calls, showing you how to spot the red flags and identify the telltale signs of a threat. By educating you on these common tactics and explaining how legitimate government agencies and organizations communicate, we empower you to confidently recognize and avoid scams.