My mission is to help you stay one step ahead of internet scammers and protect your digital life. We provide real-world examples of scam emails, text messages, social media posts, and phone calls, showing you how to spot the red flags and identify the telltale signs of a threat. By educating you on these common tactics and explaining how legitimate government agencies and organizations communicate, we empower you to confidently recognize and avoid scams.
Date: Saturday, March 28, 2026
🐙Top Cybersecurity News (For Everyone)
Apple is now sending Lock Screen notifications to iPhones and iPads running older versions of iOS and iPadOS to alert users of web-based attacks and urge them to install the update. The development was first reported by MacRumors. "Apple is aware of attacks targeting out-of-date iOS software, including the version on your iPhone. Install this critical update to protect your iPhone," the notification issued by Apple reads. The Hacker News
A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open-source Nuitka compiler. The attack uses the ClickFix technique, presenting a fake CAPTCHA that mimics Cloudflare’s human verification check to trick users into executing malicious code. Researchers at Malwarebytes say this is the first documented macOS campaign combining ClickFix delivery with a Python-based infostealer compiled using Nuitka. Bleeping Computer
The group that it was making available for download emails and other documents from Patel’s account.
A pro-Iranian hacking group claimed Friday to have hacked an account of FBI Director Kash Patel and has posted online what appear to be years-old photographs of him, along with a work resume and other personal documents. Many of those records appeared to be more than a decade old. Security Week
Regulators are warning that scammers are increasingly impersonating banks through text messages and phone calls, claiming there is suspicious activity on your account.
Why it matters: These scams are designed to steal login details or trick you into sending money. FTC
Recent breach notifications are being followed by waves of phishing emails and texts that use real names, emails, or phone numbers.
Why it matters: Even limited personal data can make scams look more believable. FTC
Security experts are reminding consumers to review privacy settings on internet-connected devices like cameras, doorbells, and smart speakers.
Why it matters: Default settings may allow more data sharing than expected. CISA
Fake websites and ads offering deep discounts are circulating on social media and search results. Many take payments but never deliver products.
Why it matters: These scams target everyday shoppers looking for deals. FTC
Those sneaky website designs that trick you into subscriptions or hide extra fees until the final checkout screen. New enforcement rules are now being used to fine companies that make it intentionally difficult to cancel a service. Think BRG
The University of Hawaii recently confirmed that a breach originally detected last year actually impacted nearly 1.2 million people. The stolen data includes highly sensitive information like voter registration and driver's license numbers.Privacy Guides
Zack Whittaker provides helpful resources to help you keep yourself safe from the government when in airports. He notes: As you go through U.S. airport security before your flight, note that TSA officers cannot examine your devices or look at your data. But government authorities have broad powers to demand access to your devices and search your private data when you cross a border of a country that you have just arrived in, including in the U.S., where border searches of people’s devices are on the rise. Pogo Was Right
You get a text saying your package is delayed and must “reschedule delivery.” The link leads to a fake site that steals your information.
A message claims your account is locked and asks you to verify your identity. The goal is to capture your login credentials.
A friendly message starts a conversation. Over time, the scammer builds trust and introduces a fake investment or money request.
Fraudulent sellers offer items at low prices, request payment outside the platform, and disappear after payment.
Turn on "Passkeys" for Your Main Accounts: If you use Google, Amazon, or PayPal, look for "Passkey" in your security settings. It lets you log in with your face or fingerprint instead of a password, which stops hackers from stealing your login info even if they have your email.
Update Your Home Router: With the recent dismantling of several massive "botnets" (networks of hacked devices), now is a great time to open your router's app (like Eero, Google Home, or Netgear) and hit "Update Firmware."
Freeze Your Credit: If you’re worried about the recent Figure or University of Hawaii breaches, a credit freeze at Equifax, Experian, and TransUnion is the single best way to prevent someone from opening a loan in your name.
Slow Down on QR Codes: Treat QR codes like links in an email. Don't scan them if they come from an unexpected source, especially if they are in a physical letter claiming to be from a government agency.
Quick Tip: If a caller or texter creates a sense of "extreme urgency" or "panic," it is almost certainly a scam—hang up and call the official number of the company yourself.
Quick Cyber Tip of the Day: Before you click "Unsubscribe" in a spam email you don't recognize, just mark it as "Junk" instead; clicking links in spam (even the unsubscribe button) can confirm to scammers that your email is active.