Latest Security News | Fox News

FCC router rule raises questions about future updates

Fri, 24 Apr 2026 09:17:31 -0400

A new move from the Federal Communications Commission is being framed as a national security step. But if you already have a router at home, the bigger question is simple: how long will it keep getting security updates?

The FCC recently updated its "Covered List" to include routers produced in foreign countries, which blocks new models of that covered equipment from being approved for sale in the U.S.

At the same time, the FCC made something else clear. This change does not affect routers you already own, and it does not stop retailers from continuing to sell models that were previously approved.

So nothing shuts off overnight. However, the policy introduces a new layer of uncertainty around how long some devices will continue receiving updates.

IS YOUR HOME WI-FI REALLY SAFE? THINK AGAIN

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com - trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

What the FCC router rule actually changed

The policy focuses on future device approvals, not the devices already in your home.

Here is what the FCC says in plain terms:

Existing routers can still be used
Previously approved models can still be sold and imported
New covered models cannot receive FCC authorization

This action is tied to national security concerns about supply chain risks, not a product-by-product security test of individual routers. The key takeaway is this: your current router is not banned, recalled or disabled.

Why the FCC router rule raises update concerns

The real issue is not about using your router today. It is about future software and firmware updates. Alongside the policy change, the FCC issued a temporary waiver. That waiver allows existing routers to continue receiving updates that patch vulnerabilities, maintain functionality and ensure compatibility with operating systems. Right now, that waiver runs through at least March 1, 2027.

That date is not a guaranteed cutoff. The FCC has said it will re-evaluate the policy before then and may extend or modify the waiver. So the situation is still evolving.

How the FCC router rule could affect your router security

Your router is the gateway to everything connected in your home. Phones, laptops, smart TVs and cameras all depend on it. When a vulnerability is discovered, a software update is usually what fixes it.

If updates slow down or stop, the risk builds over time. That does not mean your router suddenly becomes unsafe. But it can become easier for attackers to exploit known flaws.

Even the FCC acknowledged this in its waiver, noting that continued updates help mitigate harm to consumers and support essential security functions. So the concern is not immediate. It is about what happens over time if support policies change.

BROWSER EXTENSIONS PUT MILLIONS OF GOOGLE CHROME USERS AT RISK

Why the FCC is making exceptions for some routers

One important wrinkle is that the FCC has already begun granting conditional approvals for some devices. In April 2026, the agency approved certain products from NETGEAR and Adtran to continue operating under specific conditions through October 1, 2027.

That shows this is not a one-size-fits-all rule. Instead, it is an evolving policy where some devices may continue receiving support while others may face tighter restrictions.

What the FCC says about router risks and next steps

The FCC says the decision is based on national security concerns, including supply chain vulnerabilities and potential cybersecurity risks tied to certain foreign-produced equipment.

At the same time, the policy includes a path for exceptions. Companies can seek conditional approvals through federal agencies, and regulators can revisit the rules as more information becomes available.

That means the final impact will likely depend on how those decisions play out over time.

8 ways to protect your network after the FCC router rule

Until there is more clarity, a few simple steps can help keep your home network secure.

1) Check how long your router is supported

First, find your router's exact model number. You can usually see it on a label on the bottom or back of the device. Next, go to the manufacturer's website, such as NETGEAR, Linksys or TP-Link, and search for that model. Open its support page and look for sections like Support, Downloads, Firmware or End of Life. Then, check for a support timeline, the date of the most recent firmware update or any notes saying the product is no longer supported. If you cannot find clear information, that is a warning sign that your router may not receive regular security updates.

2) Keep your router updated

Next, log into your router settings. To do this, open a web browser and type your router's IP address into the address bar. Common ones include 192.168.1.1 or 192.168.0.1. Then sign in using your admin username and password. Once you are in, look for sections labeled Firmware, Software Update or Administration. Check for available updates and install them if needed. If your router supports automatic updates, turn that on. This helps close security gaps quickly without you having to check manually. If you are not sure where to find these settings, you can also use your router's mobile app if it has one, which often makes updates easier.

GET FASTER WI-FI WITH THESE SIMPLE HOME FIXES

3) Plan ahead for replacement

If your router is already a few years old, start planning for a replacement. Do not wait until updates stop. Instead, look for models with clearly stated support timelines. Check out our picks for the Top Routers for best security at cyberguy.com

4) Secure your devices as a backup layer

Your router is the first line of defense. However, your devices matter too. Keep your phone, computer and tablet updated. Also, use strong antivirus software to help catch threats that slip through. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

5) Review connected devices

From time to time, check what is connected to your network. You can do this in your router settings under "Connected Devices" or in your router's app. If you see anything unfamiliar, remove it right away.

6) Use strong passwords

Create a strong Wi-Fi password and a separate admin password for your router. Avoid using default credentials. A password manager can help you generate and store secure logins. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com

7) Turn off remote access

First, log into your router settings using a web browser. Type your router's IP address, such as 192.168.1.1 or 192.168.0.1, into the address bar and sign in with your admin credentials. Next, look for settings labeled Remote Access, Remote Management, Web Access from WAN, or Cloud Access. These are often found under sections like Advanced, Administration or Security. Then, turn that setting off and save your changes. This prevents your router from being accessed from outside your home network. If you cannot find the option, check your router's mobile app or the manufacturer's support page. Some routers hide this setting or disable it by default.

8) Restart your router regularly

First, unplug your router from the power outlet. Wait about 30 seconds to let it fully shut down. Next, plug it back in and wait a few minutes for it to reconnect to the internet. You can also restart your router through its settings. Log in, then look for options like Reboot or Restart under sections such as Administration or System. Doing this every few weeks can help apply updates and clear temporary issues that may affect performance or security. If your router supports scheduled reboots, you can turn that on to automate the process.

Kurt's key takeaway

This is not a situation where your internet suddenly becomes unsafe. There is no recall. There is no shutdown. Your router will not stop working on a specific date. However, there is a new question mark that did not exist before. The Federal Communications Commission has created a system where future updates for some devices could depend on how the rules evolve. That puts more importance on something most people rarely think about: how long their router will stay supported. For now, you still have time. The current waiver runs into 2027, and regulators have signaled they may revisit the policy before then. The smart move is simple. Know what you own, keep it updated and stay aware as this situation develops.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

As policies around your home tech change, how much responsibility should fall on regulators versus the companies that keep your devices updated? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com - trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

Booking.com data breach exposes traveler data to scams

Wed, 22 Apr 2026 18:30:52 -0400

You probably didn't expect a travel booking platform to send you into a security spiral. Yet here we are.

Booking.com confirmed that hackers may have accessed customer data, including names, email addresses, phone numbers and booking details. That is enough information to make scam messages look real.

If you've booked a hotel or rental through the platform, this is worth your attention.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

SMART TRAVEL SAFETY TIPS BEFORE YOUR NEXT TRIP

What happened in the Booking.com data breach

The company sent email notifications to affected customers after detecting "suspicious activity involving unauthorized third parties" accessing guest booking information. That's the corporate way of saying someone got in who shouldn't have been there.

One user shared the full notification on Reddit, where dozens of others said they received the same message. That suggests this was not an isolated case. The notice warned that anything customers "may have shared with the accommodation" could also have been exposed, meaning the breach went beyond basic account data.

What data was exposed in the Booking.com breach

Booking.com confirmed that financial information was not accessed. Physical home addresses were also not part of the breach, according to the company. So no, someone doesn't have your credit card number or home address from this incident.

What they do potentially have: your name, email address, phone number and the details of your reservation. That's enough to craft a convincing phishing message, which some hackers may already be doing.

"At Booking.com, we are dedicated to the security and data protection of our guests," a Booking.com spokesperson said in a statement to CyberGuy. "We recently noticed some suspicious activity involving unauthorized third parties being able to access some of our guests' booking information, which may include booking details, names, email addresses and phone numbers and anything that travelers may have shared with the accommodation."

"Financial information was not accessed from Booking.com's systems, nor were guests' physical addresses," the spokesperson continued. "Upon discovering the activity, we took action to contain the issue. We have updated the PIN number for these reservations and informed our guests."

APPLE NOW LETS YOU ADD YOUR PASSPORT TO YOUR PHONE'S WALLET

How scammers are using stolen booking data

A user who posted the notification on Reddit said that two weeks before receiving it, they got a phishing message on WhatsApp that included their real booking details and personal information. That timing matters. It suggests hackers may have already been using the data before many customers were notified.

It is not clear whether that earlier phishing attempt is directly tied to this specific breach, but it shows how detailed booking information can be used in targeted scams.

That is what makes this breach more dangerous than it first appears. When scammers know where you are staying and when, they can create messages that feel legitimate. A fake alert about a problem with your reservation or a request to confirm payment details suddenly looks real.

How past incidents highlight potential risks

This breach did not happen in a vacuum. In 2024, hackers infected computers at multiple hotels with a type of consumer-grade spyware known as stalkerware. In one documented case, a hotel employee was logged into their Booking.com admin portal when the software captured a screenshot of the screen, exposing visible customer data.

That detail points to a broader issue. In some cases, vulnerabilities may exist not just within a platform, but across the hotels and systems connected to it. The current breach may follow a similar pattern, though the company has not confirmed how the unauthorized access occurred.

To put the scale in context, Booking.com says 6.8 billion bookings have been made through the platform since 2010. Even a small percentage of affected users represents a large number of people.

NEW FBI WARNING REVEALS PHISHING ATTACKS HITTING PRIVATE CHATS

Ways to stay safe after the Booking.com breach

You don't have to swear off travel apps to protect yourself. A few targeted steps go a long way.

1) Check for an official notification

Check your email for a message from Booking.com. If you received one, take it seriously rather than filing it away. The company says it has updated PINs for affected reservations, but your account itself may still need attention.

2) Update your password now

Change your Booking.com password, especially if you reuse it anywhere else. Credential stuffing attacks are common after breaches, and reused passwords make it easy for hackers to break into other accounts. A password manager can help you create and store strong, unique passwords so you are not relying on the same one across multiple sites. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.

3) Turn on two-factor authentication

Enable two-factor authentication (2FA) if you haven't already. It adds a step, but it also blocks access even if someone has your password.

4) Consider identity theft protection

Even though financial data was not accessed, exposed personal details can still be used in scams or identity theft attempts. An identity protection service can monitor your information, alert you to suspicious activity and provide support if your identity is compromised. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.

5) Watch for highly targeted phishing messages

Be skeptical of any message that references your booking details, whether it arrives by email, text or WhatsApp. Legitimate companies rarely ask you to click a link and re-enter payment information. Hackers with your booking data can write convincing fakes that look urgent.

6) Verify bookings through official channels

If you get a message about your reservation, do not click the link. Open the Booking.com app or type the website address manually. You can also contact the hotel directly using the number listed on its official website.

7) Add a safety net in case you click something malicious

If you accidentally click a suspicious link, strong antivirus software can help detect malicious websites or downloads before they cause damage. Look for tools that offer real-time protection and phishing detection, not just basic virus scans. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

8) Limit how your personal data is exposed online

Data brokers collect and sell personal details like your phone number and email address. That makes it easier for scammers to connect stolen booking data to a real person. Removing your information from these sites with a data removal service can reduce how often you are targeted. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

9) Report anything suspicious quickly

If you receive a phishing attempt that includes your real reservation details, contact Booking.com directly and report the message to your phone carrier or email provider. Reporting helps shut down scams faster.

Kurt's key takeaways

Data breaches at major travel platforms are uncomfortable precisely because travel feels personal. Your itinerary, your accommodation and your plans are wrapped up in those booking details, and now someone else may have a copy. The good news is that financial information and home addresses were not part of this breach. The bad news is that the stolen data is detailed enough to be weaponized in targeted phishing attacks, and there's evidence that it already has been. Booking.com updated its customers, reset PINs for affected reservations and publicly confirmed the incident. That's more transparency than many companies offer. But the fact that users were receiving phishing messages on WhatsApp two weeks before the formal notification went out is worth sitting with. You can't control whether the platform you use gets breached. You can control whether you're an easy target once your data is out there.

How much responsibility should companies like Booking.com take when your personal data fuels scams? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

6 crypto scam scripts criminals use to steal your money

Mon, 20 Apr 2026 12:30:34 -0400

Just about every day, we receive emails from readers who have encountered new scams. Many involve cryptocurrency. The pattern keeps repeating. Someone receives a message that feels urgent, emotional or exciting. The person on the other end sounds confident and persuasive. Before long, the victim is being asked to send money through cryptocurrency. Once the money is sent, it often disappears forever.

Cryptocurrency appeals to scammers for a simple reason. Transactions move quickly, often cross international borders and usually cannot be reversed once completed. That combination makes crypto payments especially attractive to criminals.

Kate recently wrote to us with a great question.

Kate is absolutely right. These scripts are convincing because scammers practice them constantly. They use psychology, urgency and emotion to push people toward quick decisions.

FAKE GOOGLE GEMINI AI PUSHES ‘GOOGLE COIN’ CRYPTO SCAM

Let's break down some of the most common crypto scam scripts, so you know what they sound like before they reach your inbox or phone.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

The investment opportunity script

This script often begins with a friendly introduction through social media, email or even a text message.

Example script:

"Hi, I work with a private investment group that trades cryptocurrency. We've helped many people earn steady returns. If you invest $500 today, you could earn $5,000 within weeks. I can show you proof of other investors' success."

The scammer may send fake screenshots of profits. Some will even allow a small withdrawal early on to build trust. Eventually, they push the victim to send larger deposits. Once the larger transfer is sent, the account suddenly stops responding.

The romance crypto script

This scam often starts with a simple message on a dating app, Facebook or Instagram. The first contact is friendly and low-pressure.

Example initial script:

"Hi, insert name here, I hope you don't mind me saying hello. Your profile caught my attention, and you seem like a very kind person. How has your day been?"

After a few days of conversation, the scammer begins sharing details about their life. They often claim to work overseas as an engineer, doctor or business owner. Eventually, they mention cryptocurrency trading as something they do on the side.

Later message in the script:

"I have been doing some short-term crypto trading after work. It has helped me save a lot faster. If you are interested, I can show you the platform I use. It is very easy to start with a small amount."

From there, the scammer guides the victim to a fake trading site or asks them to transfer cryptocurrency to a wallet they control. At first, the account may show fake profits. The victim believes the investment is working and sends more money. Eventually, the victim cannot withdraw any money.

MALICIOUS MAC EXTENSIONS STEAL CRYPTO WALLETS AND PASSWORDS

The government impersonation script

Scammers often pretend to represent government agencies or law enforcement.

Example script:

"This is an urgent notice regarding your tax account. Your Social Security number has been linked to suspicious activity. To prevent legal action, you must verify your identity and pay the outstanding balance today using cryptocurrency."

Government agencies do not demand payment through cryptocurrency. The goal is to scare you into acting quickly without checking the facts.

The tech support emergency script

This scam often begins with a pop-up warning or an unexpected phone call.

Example script:

"Your computer has been compromised by hackers. Your bank information may be at risk. To secure your system, we need you to transfer funds temporarily into a protected cryptocurrency wallet."

The scammer claims the funds will be returned once the system is secure. In reality, the transfer moves the money directly to the criminal.

The crypto giveaway script

This scam frequently appears on social media or video platforms.

Example script:

"We are celebrating a new crypto launch. Send 0.1 Bitcoin to this wallet, and we will immediately send back double the amount."

The message may appear to come from a well-known company or public figure. The wallet address belongs to the scammer. Anyone who sends funds receives nothing in return.

The fake recovery service script

This scam targets people who have already lost money.

Example script:

"We specialize in recovering stolen cryptocurrency. Our investigators located the wallet that received your funds. To begin the recovery process, we require a small crypto payment to unlock the legal tracing tools."

The victim believes they are hiring professionals to recover their money. Instead, they are being scammed again.

Why these scripts work so well

These scams succeed because they exploit human behavior. First, they create urgency. Victims feel pressured to act quickly.

Second, they create trust. The scammer may sound friendly or sympathetic.

Third, they promise rewards. Investment scams offer profits that feel life-changing.

Finally, cryptocurrency adds confusion. Many people are still learning how it works. Criminals take advantage of that uncertainty.

Understanding these scripts is the first step to protecting yourself. Once you recognize the patterns scammers use, it becomes much easier to stop the conversation before money is involved.

How to protect yourself from crypto scams

Crypto scammers rely on urgency, trust and confusion to pressure victims into sending money. These practical steps can help you recognize warning signs and avoid costly mistakes.

1 CLICK COST A FATHER $4 MILLION IN BITCOIN TO VISHING SCAMMERS

1) Slow down when money is involved

Scammers depend on urgency to push victims into fast decisions. If someone pressures you to send money immediately, treat it as a warning sign. Pause the conversation and verify the situation independently. Contact the company, agency or person through a known phone number or official website. Taking even a few minutes to step back can stop a scam before money leaves your account.

2) Never send cryptocurrency to someone you do not know

Cryptocurrency transactions work very differently from credit cards or bank transfers. Once funds are sent, they usually cannot be reversed. Scammers prefer crypto because it moves quickly and often crosses international borders. If someone asks for payment through Bitcoin, Ethereum or another digital currency, assume the request is suspicious until proven otherwise.

3) Verify investment opportunities independently

Many crypto scams promise fast profits or guaranteed returns. Legitimate investments never guarantee profits. Before investing, search the company name, website and contact information online. Look for warnings from regulators or consumer protection agencies. If you cannot find reliable information about the company, that is a major red flag.

4) Use strong antivirus software on your devices

Scammers frequently use phishing links, fake websites and malicious downloads to trick victims. Strong antivirus software can help detect these threats before they cause damage. Strong antivirus software can warn you about suspicious websites, block malicious downloads and help stop phishing attempts that try to steal your financial information. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

5) Reduce the personal information scammers can find online

Scammers often research their targets before sending messages. They may gather details from public records, social media or data broker websites. Limiting the amount of personal information available online can make it harder for criminals to craft convincing messages. Removing your data from people search sites with a data removal service can reduce the chances of becoming a target. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

6) Be cautious with online relationships

Romance scams often begin with friendly messages on dating apps or social media. Over time, the scammer builds trust and eventually introduces a crypto investment opportunity. If someone you have never met begins discussing cryptocurrency investments or asks you to move money, take a step back. Real relationships do not require financial transfers to strangers.

7) Never trust screenshots or profit dashboards

Crypto scammers often show screenshots of trading accounts that appear to generate large profits. These images are easy to fake or are displayed on fraudulent websites controlled by the scammer. Even if a platform shows profits, it does not mean the money exists. If you cannot withdraw funds easily through a verified exchange, the investment may be fake.

8) Watch for requests to move conversations off the platform

Many scams begin on social media, dating apps or messaging platforms. After the first contact, scammers often ask victims to continue the conversation on WhatsApp, Telegram or another private messaging app. Moving the conversation helps them avoid detection by the original platform. If someone quickly asks you to switch apps, treat it as a warning sign.

9) Talk to someone you trust before sending money

Scammers often isolate their victims and discourage them from discussing the situation with friends or family. Before sending cryptocurrency or making a large investment, pause and talk to someone you trust. A second opinion can often spot warning signs that are easy to miss when emotions are involved.

What to do if you already sent cryptocurrency to a scammer

If you believe you sent cryptocurrency to a scammer, act quickly. Contact the exchange or platform you used to send the funds and report the transaction immediately. Some exchanges may be able to flag the receiving wallet and help investigators track suspicious activity.

You should also report the scam to the FTC at reportfraud.ftc.gov and notify your local law enforcement agency. If the scam began on a social media site, dating app or messaging platform, report the account there as well so it can be investigated and removed.

While recovering funds can be difficult, reporting the incident can help authorities identify larger fraud networks and potentially prevent others from becoming victims.

Kurt's key takeaways

Cryptocurrency scams continue to grow because the scripts are polished and carefully tested. The criminals behind them understand human psychology. They know when to apply pressure, when to build trust and when to promise rewards. Recognizing these patterns is one of the most powerful ways to stop them. When you know the script, the scam becomes much easier to spot.

Have you ever received a message that tried to convince you to send cryptocurrency, and did the script almost sound believable? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

The one thing scammers check before targeting you online

Sat, 18 Apr 2026 14:45:23 -0400

Most people assume scammers need to hack something. A database. A password. A bank system. They don't.

In most cases, everything a scammer needs to target you is already sitting online, publicly available, completely legal to access and surprisingly easy to find.

Here's what they're actually looking at before they ever pick up the phone.

Sign up for my FREE CyberGuy Report

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com, trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

Your personal profile is already out there, and it's more complete than you think

There's an entire industry built around collecting and selling your personal information. It's called data brokering, and most people have never heard of it.

Right now, without your knowledge or consent, your details are being published by dozens of websites, including:

People search sites (like Whitepages, Spokeo and BeenVerified): your full name, current address, phone numbers and age.
Address lookup tools: your current and past home addresses, sometimes going back decades.
Relatives databases: the names and contact information of your family members, automatically linked to your profile.
Property records: whether you own your home, what it's worth and when you bought it.

None of this requires a hack. It's all pulled from public records, voter registrations, court filings, real estate transactions, marriage and divorce records and assembled into a profile that anyone can search for a few dollars or sometimes for free.

They're not guessing; they're researching

In 2024, federal prosecutors indicted a network of scam call centers operating out of Montreal that had defrauded hundreds of elderly Americans out of more than $21 million. What made the scheme so effective wasn't sophisticated technology. It was a spreadsheet.

The scammers were working from lists of potential victims that included names, ages and household income information pulled from commercial databases. They used those lists to identify targets, then called them pretending to be grandchildren in trouble. The calls were convincing enough that victims handed over thousands of dollars, sometimes in cash picked up at the door.

They didn't hack anyone. They just did their research first.

WHY WIDOWS AND DIVORCED WOMEN ARE TARGETS FOR RETIREMENT SCAMS

Three ways scammers turn your public data into a weapon

Scammers use your publicly available data to make their attacks more personal, believable and harder to detect. Here are three ways they do it.

1) Impersonating your bank

A scammer calls and says, "Hi, this is fraud prevention at [your bank]. We're seeing suspicious activity on your account ending in 4721."

They already know your bank, your name and possibly your address. That's enough to sound legitimate. From there, they walk you through "confirming your identity," which is really just you handing over the information they need to access your account.

This kind of scam starts with a simple people search lookup. Your name and address lead to property records. Property records suggest your income range.

2) The family emergency call

Imagine getting a call: "Meemaw, it's me. I'm in trouble. Please don't tell Mom." Scammers don't guess. Instead, they research your family first. They use relatives' databases to find your children's names, ages and connections.

With that information, they build a story that sounds real. For example, they know to call you "Meemaw." They also know which grandchild to impersonate. In some cases, they even mention a sibling's name to make the story more convincing.

As a result, the call feels personal and urgent. However, none of it is random. It's all based on information that was publicly available the entire time.

3) Targeted phishing with your own details

A phishing email that says "Dear Customer" is easy to ignore. One that says "Dear [your full name], we noticed unusual activity on your account registered to [your home address]" is a lot harder to dismiss.

Scammers use publicly available data to personalize attacks, adding your real name, city or even a reference to your neighborhood to make a fake email or text look authentic. The more specific the details, the more likely you are to believe it.

"But I'm not on social media." This is the most common objection, and it misses the point entirely.

You don't have to be on social media for your information to be online. Data brokers pull from public records, not your Facebook profile. Your information is likely already listed on dozens of sites because of:

Your home purchase
Voter registration records
Court or property tax filings.

The less they think they've shared, the more surprised people usually are when they search for themselves on a people search site for the first time.

DATA BROKERS ACCUSED OF HIDING OPT-OUT PAGES FROM GOOGLE

How to reduce your exposure

You don't have to accept this as permanent. A few practical steps can help:

Search your full name on Whitepages, Spokeo, FastPeopleSearch and other people search sites and submit opt-out requests.
Look up your address directly, not just your name, since many listings are organized by location.
Ask elderly family members to search for themselves, too, since older adults are disproportionately targeted.
Be skeptical of any call that opens with personal details, as it can be a sign that someone researched you first.

How to remove your personal data and stop scammers from finding you

The challenge is that there are hundreds of data broker sites, each with its own removal process. Manually opting out of all of them can take hours, and your information often reappears weeks later when brokers refresh their databases.

That's why ongoing automated removal is the only approach that actually works. That's why I recommend using a trusted data removal service.

These services automatically contact data brokers on your behalf and request the removal of your personal information. They also continue monitoring those sites and submit new removal requests if your data reappears.

Many services remove personal data from hundreds of data broker and people search websites, and some plans allow you to request removals from additional sites as needed.

Some have also received third-party assurance from independent firms, helping validate their claims.

The goal is simple: make it much harder for strangers, scammers and cybercriminals to find your personal information online.

These services often include a money-back guarantee, so you can try them risk-free and see how much of your information is exposed online.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com

Kurt's key takeaways

Most scams don't start with a breach. They start with a search. Your name, address, relatives and even income clues are already out there, quietly fueling more convincing and more dangerous attacks. That's what makes this so unsettling. You can do everything "right" online and still be exposed because the system itself is built to share your information.

The good news is you're not powerless. Once you understand how scammers build their playbook, you can start disrupting it. Removing your data, limiting exposure and staying skeptical of anyone who knows a little too much about you can dramatically reduce your risk. The goal isn't to disappear completely. It's to make yourself a much harder target.

What should be done to stop scammers from using your publicly available data against you in the first place? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

5 worrisome privacy clauses hidden in smart home devices

Wed, 15 Apr 2026 12:30:41 -0400

Many of the apps and devices we use every day contain privacy terms most people never read. Yet those clauses often allow extensive data harvesting, behavioral tracking and long-term storage of personal information. Some even allow companies to access recordings or share data with partners.

The reality is simple. Smart devices inside your home and car can build detailed profiles about your daily life. Your schedule. Your habits. Even your conversations. One way I explain this to people is simple. Your phone knows where you go. Your smart home knows what you do when you get there. I unpack how this works in everyday life on my Beyond Connected podcast at getbeyondconnected.com. In many cases, these devices are not just reacting to you. They are actively logging, analyzing, and storing your behavior by default, often without you realizing it.

Let's walk through five privacy clauses that surprise most people. We will start with number five and count down to the most unsettling one.

YOUR PHONE SHARES DATA AT NIGHT: HERE'S HOW TO STOP IT

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.

Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

Clause No. 5: 'We log and share your driving data'

Today's vehicles are no longer just transportation. Many now operate as connected computers on wheels. Connected vehicle platforms and systems, such as Android Automotive OS, collect large amounts of telemetry data.

That can include:

Vehicle speed
Seat usage
Climate controls
Location and trip data

Researchers have found that vehicles may gather dozens or even hundreds of data points during normal driving. In some cases, researchers found that vehicle speed can be logged as frequently as 25 times per second, creating a highly detailed record of how you drive.

What this means for drivers

Your car may know:

Where you drive
When you drive
How aggressively you accelerate or brake
Which seats are occupied

That data can be used to infer stops, turns, and even risky driving behavior. In some cases, it may also be shared with third parties for advertising, insurance, or financing purposes. In other words, your vehicle can create a detailed picture of your driving behavior and routines. Many drivers never realize how much information their car collects.

Clause No. 4: 'We track what you watch'

Your television may be one of the most active data collectors in your home. Many smart TVs from brands like Samsung, LG, and Roku use a technology called Automatic Content Recognition, often shortened to ACR.

ACR can analyze what appears on your screen across:

Streaming apps
Cable television
Gaming consoles
HDMI devices

This technology works in real time, identifying what you are watching and reporting that information back to the company. Some policies even state that snippets of audio or video may be shared with third parties to match ads to your viewing. Some lawsuits have alleged that certain TVs capture screenshots extremely frequently to identify content.

Why this matters

Your TV can learn:

What shows you watch
When you watch them
How long you stay on each program
Which devices you connect to the TV

That means the show you binge, the time you watch it, and even how long you stay engaged can be packaged and sold to advertisers almost instantly. That viewing data may then be shared with advertising partners to build detailed marketing profiles.

Clause No. 3: 'We track your behavior and location'

Video doorbells are designed to increase home security. Yet they can also gather large amounts of behavioral data. Devices like the Ring Video Doorbell may automatically collect information such as:

Device identifiers
Browsing activity
Usage patterns
Timestamps

Privacy disclosures also show that these devices can collect geolocation data, IP addresses, and details about the devices connected to your network.

What that data can reveal

Over time, a doorbell camera can build a timeline that shows:

When you leave home
When deliveries arrive
How often visitors come
Which devices connect to your network

Put together, this creates a detailed map of your daily routine, including when you are home, when you are away, and how your household operates. Individually, these signals seem harmless. Together, they can reveal detailed patterns about your household. If an account is ever compromised, that data can act as a blueprint of your life, not just a camera feed.

Clause No. 2: 'Humans may review your recordings'

Some smart devices store recordings that help improve voice recognition and AI systems. Devices that may store recordings include:

Amazon Echo smart speakers
Ring video doorbells

Past regulatory findings have raised concerns about how companies manage that stored data. In some cases, recordings may be accessed by:

Human reviewers
Contractors
Internal teams that are training AI systems

Some company disclosures state that a small number of recordings may be reviewed by research and development teams to improve products and services.

Why this clause raises eyebrows

The goal of human review is often to improve voice assistants or detect errors. Still, many users never realize that recordings captured inside their homes may be reviewed by people. That means a conversation in your living room or a clip from your front door could be seen or heard by someone you have never met. Transparency about how this process works remains an ongoing discussion across the tech industry.

Clause No. 1: 'We store your voice indefinitely'

Voice assistants sit quietly in kitchens, bedrooms, and living rooms waiting for their wake word. Devices like the Amazon Echo process voice commands in the cloud.

According to company disclosures, voice interactions can include:

Audio recordings sent to cloud servers
Transcripts stored in your account
Voice data used to improve services

In many cases, these recordings are saved by default and can remain stored indefinitely unless you manually delete them or change your settings.

Why this is the most surprising clause

Over time, your voice assistant may accumulate years of audio interactions. That can include everything from grocery lists and song requests to conversations you did not even realize were captured. That history can reveal daily routines, requests, shopping habits, and personal questions. Most people never review or delete those recordings.

Why smart devices are a privacy multiplier

Each individual device collects only part of the picture. Together, they can reveal an astonishing amount of detail about your life. Smart devices inside your home and vehicle may capture:

Conversations
Daily schedules
Viewing habits
Location history
Visitor patterns
Voice biometrics

Combined, this data allows companies to build extremely detailed behavioral profiles. That is why privacy experts call connected homes a data multiplier. In many cases, the value of that data is part of the business model, helping offset the cost of the devices themselves.

5 privacy moves to take back control of your tech

The good news is you still have ways to reduce how much information your devices collect. Here are a few practical steps that can make a big difference.

No. 5: Audit your app permissions

Start by reviewing what access your apps have to your devices. If you use smart home apps like Ring, also check in-app privacy settings such as Control Center and turn off sharing with third parties where available.

On iPhone

Open Settings
Tap Privacy & Security
Select Location Services, Microphone or Camera
Review which apps have access

Whenever possible, set location access to While Using the App rather than Always.

On Android

Settings may vary depending on your Android phone’s manufacturer

DATA BROKERS ACCUSED OF HIDING OPT-OUT PAGES FROM GOOGLE

Open Settings
Tap Security and Privacy
Tap More privacy settings
Select Permission Manager
Review Location, Microphone, and Camera permissions

Whenever possible, set location access to Allow only while using the app rather than Allow all the time.

Removing unnecessary permissions helps limit background tracking.

No. 4: Turn off smart TV tracking

Most TVs include a setting that controls content tracking.

Look for options such as:

ACR
Viewing Data
Interest-Based Ads

On Roku, go to Settings → Privacy → Smart TV Experience and disable it. On Samsung, look for Viewing Information Services and turn it off.

Turn these features off in the privacy or advertising section of your TV settings.

No. 3: Use stronger passwords

Smart home devices often connect to important accounts. If attackers access those accounts, they may control cameras, speakers, or home automation systems. Use strong, unique passwords and enable two-factor authentication (2FA) whenever available. A password manager can help generate and store secure passwords.

Next, see if your email has been exposed in past breaches. Our No. 1 password manager (see Cyberguy.com) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.

5 TECH TERMS THAT SHAPE YOUR ONLINE PRIVACY

No. 2: Delete old apps and accounts

Dormant apps and forgotten services often keep your personal information for years.

Take time to:

Remove apps you no longer use
Close accounts tied to old services
Revoke unused permissions

Cleaning up digital clutter reduces your data footprint.

Remove apps you no longer use

On iPhone (iOS 18 and newer)

Find the app on your Home Screen
Press and hold the app icon
Tap Remove App
Tap Delete App
Tap Delete to confirm

You can also remove apps through storage settings:

Open Settings
Tap General
Tap iPhone Storage
Select the app
Tap Delete App
Tap Delete to confirm

Deleting the app removes it from your device and frees up storage space.

On Android (Android 14 and newer)

Settings may vary depending on your Android phone’s manufacturer.

Find the app on your Home Screen or App Drawer
Press and hold the app icon
Tap Uninstall
Tap OK or Uninstall to confirm

You can also remove apps through settings:

Open Settings
Tap Apps or Apps & notifications
Select the app you want to remove
Tap Uninstall
Tap OK or Uninstall to confirm

Removing unused apps helps reduce the amount of data stored on your device.

Revoke unused permissions

Some apps continue accessing your camera, microphone or location even when you rarely use them.

On iPhone

Open Settings
Tap Privacy & Security
Select a category such as Location Services, Microphone or Camera
Review the apps listed
Turn off access for apps that do not need it

You can also control tracking:

5 MYTHS ABOUT IDENTITY THEFT THAT PUT YOUR DATA AT RISK

Go to Settings
Tap Privacy & Security
Tap Tracking
Turn off tracking for apps you do not trust.

On Android

Settings may vary depending on your Android phone’s manufacturer

Open Settings
Tap Security & Privacy
Tap Privacy or More privacy settings
Tap Permission Manager
Select Location, Camera or Microphone
Review the apps listed and remove access if needed

Android groups permissions by type so you can quickly see which apps access sensitive features.

Today's phones may automatically remove permissions from apps you have not used for a long time, but many apps still retain data tied to your account. Reviewing them manually helps reduce tracking and background data collection.

No. 1: Limit always-listening devices

Smart speakers constantly wait for wake words like "Alexa" or "Hey Google." That means the microphone stays active so the device can detect commands. If you rarely use these features, limiting them can reduce how much audio data leaves your home. Here are some simple ways to reduce always-listening devices.

Mute the microphone on smart speakers

Most smart speakers include a physical microphone mute button.

Press the mic mute button on devices like:

Amazon Echo
Google Nest speakers
Apple HomePod

When muted, the device stops listening for wake words.

Unplug devices in private spaces

Bedrooms and home offices are common places where people prefer extra privacy. If a speaker or smart display is rarely used in those rooms, unplugging it removes the microphone entirely.

Review voice recordings in your account

Many voice assistants store past interactions. You can review and delete recordings inside the companion apps, such as:

Alexa app
Google Home app
Apple Home app

Set recordings to auto-delete or choose not to save them at all, where that option exists. Removing stored recordings prevents them from accumulating over time.

Disable voice activation on some devices

Some smart TVs, phones and tablets include voice assistants. Look in device settings for options such as:

Voice assistant
Voice wake word
Hands-free voice control

Turning those features off stops devices from constantly listening. Even though devices listen only for wake words, the microphones remain active. Limiting where these devices operate helps reduce the amount of audio data collected inside your home.

Kurt's key takeaways

Smart devices make daily life easier. They play music, answer questions, show visitors at the door and control lights with a voice command. But convenience often comes with hidden trade-offs. Many privacy clauses are buried deep in policies that most people never read. Over time, those permissions allow companies to gather enormous amounts of behavioral data. That does not mean you need to abandon smart technology. It simply means understanding what your devices collect and deciding what level of access you are comfortable with. Many of these settings are enabled by default, not because you chose them, but because you never knew they were there. A quick privacy audit today can prevent years of unnecessary data collection tomorrow. Oh, and if you want a deeper dive into how these hidden data practices affect your daily life, check out the latest episode of my Beyond Connected podcast at getbeyondconnected.com, where we break it down.

Here is a question worth asking yourself: If every smart device in your home combined its data into one timeline of your life, how comfortable would you feel with someone seeing it? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

New FBI warning reveals phishing attacks hitting private chats

Thu, 16 Apr 2026 11:23:38 -0400

You probably think your messages are safe. After all, apps like WhatsApp, Signal and Telegram promote strong encryption.

But a new warning from the Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation shows that attackers do not need to break encryption at all.

Instead, they are going after you.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

FBI WARNS ABOUT FOREIGN APPS AND YOUR DATA

What the FBI and CISA just revealed

According to the joint advisory, cyber actors tied to Russian intelligence are running large-scale phishing campaigns targeting messaging apps.

These attacks are not random. They have focused on high-value targets like government officials, military personnel and journalists. However, the tactics can easily spread to everyday users.

Here is the key takeaway: Hackers are not cracking the apps themselves. They are tricking people into giving up access.

How these messaging app attacks actually work

This is where it gets interesting and a bit unsettling. Instead of breaking encryption, attackers use phishing to gain control of individual accounts. Once inside, they can:

Read private conversations
Access contact lists
Send messages as if they were you
Launch new scams targeting your contacts

It becomes a chain reaction. One compromised account can quickly lead to many more. In some cases, attackers impersonate trusted contacts. That makes the scam feel real and urgent.

Why encryption is not enough anymore

Encryption still matters. It protects messages as they travel between devices. But here is the problem. If someone logs into your account, they see everything just like you do.

That means even the most secure app cannot protect you if your login gets compromised. This is a shift in how cyberattacks work. The weakest link is no longer the technology. It is human behavior.

AI IS NOW POWERING CYBERATTACKS, MICROSOFT WARNS

Who is at risk from messaging app phishing attacks

While the advisory highlights high-profile targets, the tactics are not limited to them.

If you use messaging apps for:

Personal conversations
Work communication
Sharing sensitive information

You are a potential target. Phishing works because it relies on simple mistakes. A quick tap on the wrong link is often all it takes.

What this means for you

This warning highlights a bigger trend. Cyberattacks are becoming more personal. Instead of attacking systems, hackers are targeting people directly. That makes awareness your strongest defense. The more you understand how these scams work, the harder it becomes for attackers to succeed.

Ways to stay safe from messaging app phishing attacks

You do not need to be a cybersecurity expert to protect yourself. You just need to slow things down and follow a few smart habits.

1) Be skeptical of unexpected messages

If a message feels urgent or out of place, pause. Even if it looks like it came from someone you know.

2) Never click suspicious links

Avoid links sent through messages unless you can verify them independently. Strong antivirus software can help detect suspicious behavior after a compromise. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

3) Turn on two-factor authentication

Two-factor authentication (2FA) adds a second layer of protection even if your password gets exposed.

TECH GIANTS UNITE TO FIGHT ONLINE SCAMS

4) Watch for login alerts

Many apps notify you when a new device signs in. Do not ignore these warnings.

5) Verify requests in another way

If a contact asks for something unusual, call them or confirm through another channel.

6) Use a data removal service

Limit how much of your personal information is available online. Data removal services work to delete your data from broker sites, making it harder for scammers to target you with convincing phishing messages. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

7) Keep your device and apps updated

Install updates regularly. Security patches fix vulnerabilities that attackers can exploit after gaining access.

Kurt's key takeaways

Messaging apps feel private. They feel secure. That sense of comfort is exactly what attackers are counting on. The technology is still strong. The real question is whether your habits are keeping up. So the next time a message pops up that feels slightly off, trust that instinct and take a second look.

Have you ever received a suspicious message that made you stop and question if it was real? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

Why your home Wi-Fi needs more than just a strong password

Tue, 14 Apr 2026 12:30:21 -0400

If you've locked down your home Wi-Fi with a strong password, you're already ahead of the game. But here's the reality: a password alone isn't enough to keep your online activity private.

Most people think of Wi-Fi security as simply keeping strangers off their network. And while that matters, it's only part of the picture. Even with a secure password, your internet activity can still be visible to others in ways you might not expect.

A Wi-Fi password keeps people out, but it does not hide what happens inside your connection.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

DO YOU NEED A VPN AT HOME? HERE ARE 10 REASONS YOU DO

Who can still see your data?

When you connect to the internet at home, your internet service provider (ISP) can see a surprising amount of what you do online. That can include the websites you visit, how long you spend on them and sometimes even more detailed activity.

In some cases, that data can be:

Logged and stored
Shared with third parties
Used to build advertising profiles

And it's not just your ISP. Websites, apps, big tech companies, governments and data brokers are constantly collecting information about your behavior, often without you realizing it. Think of it this way: your password locks the front door, but once your data leaves your house, it can still be exposed along the way. That's where a VPN comes in.

How a VPN adds real privacy

A virtual private network (VPN) creates a secure, encrypted tunnel between your device and the internet. That means your data is scrambled before it leaves your home network, making it much harder for anyone to see what you're doing online.

In addition, connecting to a VPN server gives you a new IP address, so your online activity can't be easily traced back to you. This makes it harder for advertisers, social networks and scammers to construct behavioral profiles, which can be used to target you with things like phishing attacks.

With a VPN:

Your browsing activity is hidden from your ISP
Your IP address is masked, making tracking more difficult
Your connection is encrypted, even on everyday home Wi-Fi

SPRING CLEAN YOUR DIGITAL FOOTPRINT: WHY RETIREES ARE SCAM TARGETS

Many VPN services are popular for their speed, simplicity and overall feature sets. This becomes even more important if you ever use public Wi-Fi, where your data is far more exposed.

What does this mean in practice?

For starters, most VPN services are easy to use. They offer apps for nearly every device imaginable, including options that work directly with routers. These apps are straightforward to set up and configure.

Once running, a single click or tap is all it takes to change your virtual location, mask your IP address and encrypt your connection. High-speed servers mean they don't fall into the trap of slowing you down. In many cases, using a VPN can even provide more consistent, reliable speeds.

With a more anonymous IP address, your ISP is also less able to throttle (cap) your connection speeds, as some providers do.

Setting up a VPN on your router protects every device in your home automatically, including smart TVs, gaming consoles and other connected devices.

Many VPN providers now go beyond basic protection and offer additional privacy tools. These can include password managers, email protection, identity monitoring and even private AI tools designed to keep your data more secure.

In short, it's no longer just about securing your connection. It's about protecting your entire digital footprint.

A smarter way to protect your home network

Your home Wi-Fi is the gateway to everything you do: online banking, shopping, working and staying connected. Relying on just a password is like locking your door but leaving the curtains wide open.

Adding a VPN gives you an extra layer of privacy that works quietly in the background while enhancing every corner of your digital life.

It's about being prepared, sure. But it's also about peace of mind.

5 SIMPLE TECH TIPS TO IMPROVE DIGITAL PRIVACY

Ways to protect your privacy beyond a password

Use a VPN on your home network and public Wi-Fi
Enable automatic updates on all your devices
Use strong, unique passwords and consider a password manager
Turn on two-factor authentication (2FA) whenever possible
Limit app permissions and review privacy settings regularly

For the best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android and iOS devices at CyberGuy.com.

Kurt's key takeaways

A strong password is a smart first step, but it only protects who gets onto your network, not what happens to your data after it leaves. Your internet activity still passes through systems designed to track, analyze and sometimes profit from it. Adding a VPN shifts the balance back in your favor by encrypting your connection and limiting how much others can see. It is a simple upgrade that turns basic security into real privacy, without changing how you use the internet day to day.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Where should we draw the line between staying connected and staying private? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

AI is now powering cyberattacks, Microsoft warns

Mon, 13 Apr 2026 11:07:45 -0400

Artificial intelligence promised to make life easier. Write emails faster. Build software quicker. Analyze huge datasets in seconds. Unfortunately, cybercriminals noticed those benefits too.

A new report from Microsoft Threat Intelligence reveals that attackers are now using AI across nearly every stage of a cyberattack. The technology helps them move faster, scale operations and lower the technical skill required to launch attacks. In simple terms, AI has become a powerful assistant for hackers.

Instead of replacing cybercriminals, it gives them tools that make their work easier.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

5 MYTHS ABOUT IDENTITY THEFT THAT PUT YOUR DATA AT RISK

How hackers are using AI today

Cyberattacks usually involve many steps. Attackers scout victims, craft phishing messages, build infrastructure and write malicious code. According to Microsoft researchers, generative AI tools now help speed up many of those tasks.

Attackers are using AI to:

Write convincing phishing emails
Translate scam messages into different languages
Summarize stolen data
Generate or debug malware code
Build scripts and infrastructure for attacks

AI also helps threat actors move more quickly between stages of an attack. Tasks that once took hours or days may now take minutes. Microsoft describes AI as a "force multiplier" that reduces friction for attackers while humans remain in control of targets and strategy.

Nation-state hackers are already experimenting with AI

Some of the most advanced cyber groups are already experimenting with artificial intelligence. Microsoft says North Korean hacking groups known as Jasper Sleet and Coral Sleet have incorporated AI into their operations.

One tactic involves fake remote workers. Attackers generate realistic identities, resumes and communications using AI. They apply for jobs at Western companies and gain legitimate access to internal systems once hired.

In some cases, AI even helps generate culturally appropriate names or email formats that match specific identities. For example, attackers may prompt AI tools to produce lists of names or create realistic email address formats for a fake employee profile. Once inside a company, that access can become extremely valuable.

HOW TO OPT OUT OF AI DATA COLLECTION IN POPULAR APPS

AI can help build malware and attack infrastructure

Researchers also observed threat actors using AI coding tools to assist with malware development.

Generative AI can help attackers:

Write malicious scripts
Fix coding errors
Convert malware into different programming languages

In some experiments, malware appeared capable of dynamically generating scripts or changing behavior while running. Meanwhile, attackers can use AI to build phishing websites or attack infrastructure more quickly. Microsoft also observed groups using AI to generate fake company websites that support social engineering campaigns.

Hackers are trying to bypass AI safety rules

AI companies have placed guardrails on their systems to prevent misuse. However, attackers are already experimenting with ways to bypass those safeguards. One tactic is called jailbreaking. It involves manipulating prompts so that an AI system generates content it would normally refuse to produce. Researchers are also watching early experiments with agentic AI, which can perform tasks autonomously and adapt to results.

For now, Microsoft says AI mainly assists human operators rather than running attacks on its own. Still, the technology is evolving quickly.

Why AI is lowering the barrier for cybercrime

One of the biggest concerns in the Microsoft report is accessibility. Years ago, launching sophisticated cyberattacks required advanced technical skills. AI tools now help automate parts of that process. Someone with limited programming knowledge can ask AI to generate scripts, troubleshoot code or translate scams into multiple languages.

That shift could expand the number of people capable of launching cyberattacks. At the same time, AI also gives defenders new tools for detecting threats. Security teams are now using AI to analyze behavior, detect anomalies and respond to attacks more quickly. The technology is fueling both sides of the cybersecurity arms race.

INSIDE MICROSOFT'S AI CONTENT VERIFICATION PLAN

How Microsoft is responding to AI-powered cyber threats

Microsoft says its security teams are working to detect and disrupt AI-enabled cybercrime as it emerges. The company uses threat intelligence systems to monitor attacker activity, identify new tactics and share findings with organizations around the world.

Microsoft also integrates AI into its own security tools to help detect suspicious behavior, phishing campaigns and unusual account activity faster. These systems analyze patterns across billions of signals each day to identify threats before they spread widely.

The company says organizations should strengthen identity protections, monitor unusual credential use and treat suspicious remote worker activity as a potential insider risk.

How to protect yourself from AI-powered cyberattacks

The rise of AI-powered cyberattacks can sound alarming. The good news is that many proven security habits still work. A few simple steps can dramatically reduce your risk.

1) Be cautious with unexpected messages

AI-generated phishing emails are becoming more convincing. Always verify requests for passwords, payments or sensitive information before clicking links or downloading files. Also, use strong antivirus protection on all your devices. Strong antivirus software can detect malware, block suspicious downloads and warn you about dangerous websites before they load. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

2) Use strong, unique passwords

A password manager can generate and store complex passwords for every account. This prevents attackers from accessing multiple accounts if one password is exposed. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.

3) Turn on multi-factor authentication

Even if someone steals your password, multi-factor authentication adds a second layer of protection and can stop many account takeovers.

4) Keep devices and software updated

Security updates patch vulnerabilities that attackers often exploit. Turn on automatic updates whenever possible.

5) Remove personal data from public websites

Cybercriminals often gather personal information from data broker sites before launching scams. Using a data removal service can help reduce the amount of personal information attackers can find about you online.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

6) Watch for unusual account activity

Unexpected login alerts, password reset messages, or unfamiliar devices connected to your accounts may signal a breach. Act quickly if something looks suspicious.

Kurt's key takeaways

Artificial intelligence is transforming almost every industry. Cybercrime is no exception. Hackers now use AI to craft phishing messages, build malware and scale attacks faster than ever before. The technology lowers technical barriers and speeds up operations while human attackers remain in control. Security experts expect the use of AI in cyberattacks to grow as tools become more powerful and widely available. That makes awareness and strong digital habits more important than ever. Because the next phishing email you receive may not have been written by a person at all.

If AI can now help hackers launch attacks faster and at a larger scale, are tech companies moving quickly enough to protect you? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

Smart travel safety tips before your next trip

Mon, 13 Apr 2026 06:49:11 -0400

You booked the flights. You're picturing great food, new sights and a break from your routine. Travel should feel easy. But here's what most people don't think about until it's too late. The biggest problems today often come from your phone, your data and your accounts. Before we get into the essentials, here's the question from Chuck V, from Georgia, that sparked this article:

"My wife and I will be flying to Florence, Italy, next week and are wondering if there are any special tips we should be aware of before we leave."

Chuck, you're asking the right question at the right time. A few smart moves before you leave can save you from frozen credit cards, locked accounts or a phone nightmare overseas. Let's walk through what actually matters.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com - trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

HOW TO MINIMIZE YOUR DIGITAL FOOTPRINT WHEN YOU TRAVEL

Lock down your phone before you leave

Your phone holds your banking apps, email, travel confirmations and personal photos. That makes it more valuable than your passport to the wrong person. Start with updates. Install the latest version of your operating system and update your apps. Security patches close known gaps that attackers look for, especially on public networks.

Next, turn on built-in protections:

Enable a strong passcode or biometric lock on your iPhone and Android
Turn on tracking tools like Find My on iPhone or Find My Device on Android
Make sure remote wipe is enabled so you can erase your phone if it's lost or stolen. If you're not sure how it works, here's how to wipe your device if something goes wrong.
Also, take a minute to review app permissions. Many travel apps request access to location, contacts or storage. Limit that access before your trip so you are not oversharing without realizing it.

Have a real plan for staying connected

A lot of travelers assume their phone plan will work automatically overseas. Sometimes it does. Sometimes it leads to a shocking bill. Here are your main options:

International plan through your carrier

Easy to activate but often expensive if you use a lot of data.

eSIM

This is usually the best mix of price and convenience. You can install it before your trip and switch it on when you land.

Local SIM card

Often cheap but requires swapping your physical SIM and dealing with local setup.

Before choosing, make sure your phone is unlocked. If it is tied to your carrier, some options will not work. Also, turn off automatic data roaming until you need it. That one setting alone can prevent surprise charges.

Want a deeper breakdown of which option is best for you? Read this guide on how to stay connected while traveling.

Public Wi-Fi is convenient but risky

Airports, hotels and cafés offer free public Wi-Fi everywhere. It feels harmless. It is not always safe. Public networks can expose your data if they are not secured. That includes logins, credit card details and emails. Using a virtual private network (VPN) adds a layer of encryption between your device and the internet. It helps protect your activity and reduces the risk of someone intercepting your data. Even with protection, avoid logging into sensitive accounts on public Wi-Fi when possible. Wait until you are on a trusted network or use your mobile data.

Credit card safety matters more than you think

Tourist areas attract more than travelers. They attract scammers.

Keep your setup simple:

Bring one primary card and one backup
Store them in separate places
Use contactless payments when possible

When you need cash, use ATMs attached to banks. Standalone machines in busy areas are more likely to be tampered with. Pay attention to your surroundings when entering your PIN. Distraction tactics are common in crowded areas. Also, notify your bank before you leave. That reduces the chance of your card being flagged and declined mid-trip. If you want more ways to protect your cards while traveling, read this guide.

Turn your phone into a travel tool

Your phone can make the entire experience smoother if you use it right. Translation apps help you understand menus, signs and conversations in real time. Camera features can translate text instantly, which is incredibly useful in unfamiliar places. Maps can be downloaded offline, so you are not stuck without directions when your signal drops. Location sharing adds peace of mind. Let a trusted contact see where you are during your trip. These small features make things easier and help you stay focused on the experience instead of logistics.

STATE DEPARTMENT REVEALS WORLD'S MOST DANGEROUS COUNTRIES FOR AMERICANS

Watch what you share while you travel

It is tempting to post your location in real time. That can expose more than you intend. Sharing that you are away from home can signal an empty house. Posting your exact location while you are still there can also create unnecessary risk. Instead, share photos after you leave a location or after you return home. It is a simple shift that protects your privacy.

A quick pre-flight checklist

Before you head to the airport, run through this:

Notify your bank and credit card companies
Screenshot or download key documents like your passport and tickets
Download offline maps for your destination
Pack a universal power adapter
Double-check your phone security settings

These take minutes but can save hours of frustration later.

What this means to you

Travel today is as much digital as it is physical. Your phone connects everything from your boarding pass to your hotel room. If you protect that one device, you reduce most of the common travel risks. You avoid surprise charges. You lower the chance of account lockouts. You keep your personal data from being exposed. It also makes your trip smoother. You spend less time troubleshooting and more time enjoying where you are.

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.

Kurt's key takeaways

Travel should feel exciting, not stressful. Most problems people run into are preventable with a little preparation. Take a few minutes before you leave to lock things down. It is one of the easiest ways to protect your trip.

What other travel questions do you have when it comes to your tech? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com - trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

Google search led to a costly scam call

Fri, 10 Apr 2026 12:00:18 -0400

You book a flight. You reschedule. Then you try to handle travel insurance quickly so you can move on with your day. That's exactly what happened to Rosette. She was trying to reach Allianz, a large travel insurance company that many airlines direct customers to after booking.

Within seconds, she was talking to a scammer who sounded completely legitimate. Here's how she described it:

That realization hits hard. Suddenly, you start replaying everything in your head. Maybe you thought you knew what to look for. Still, the frustration sets in fast. Here's the truth: This happens every day to smart, careful people. And the scams keep getting more convincing.

TECH GIANTS UNITE TO FIGHT ONLINE SCAMS

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com — trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

How this fake travel insurance phone scam works

This is known as a search result scam, and it is one of the fastest-growing fraud tactics right now.

Here's the typical playbook:

You search for a company like a travel insurance provider, airline or your bank
A fake phone number appears at the top of the results or in an ad
You call and reach a professional-sounding call center
The scammer acts helpful, fast and confident
They ask for payment details or personal information

In Rosette's case, there were several clear signs once you step back:

The call was answered instantly
The pricing felt unusually high
The email came from a fake domain
The agent pushed for authorization

Once she questioned it, the scammer disconnected. That's classic behavior.

Why this phone scam is so easy to fall for

This is not sloppy fraud. It's polished, fast and designed to catch you when you are distracted. Here's why it works so well:

1) You trust search results

Most people assume search results are safe. Scammers exploit that trust with fake listings and ads.

2) Timing creates pressure

You are often dealing with travel changes, delays or deadlines. That lowers your guard.

3) They sound legitimate

These are not obvious scammers. Many operate scripted call centers with trained agents.

4) They move fast

Answering within seconds creates the illusion that you reached the right company.

SSA IMPERSONATION SCAMS ARE GETTING MORE PERSONAL

What information did the scammer actually get?

In Rosette's situation, the scammer obtained:

Credit card number
Date of birth

That combination matters. Even without an immediate charge, scammers often:

Test small transactions later
Attempt identity-based fraud
Sell your data to other criminals

This is why you should treat it as a compromised card situation, even if nothing has been charged yet.

What this means to you

This type of scam does not rely on hacking your device. It relies on tricking you into calling the wrong number. That means anyone can fall for it.

You could be booking travel, fixing a billing issue or calling tech support. One wrong click puts you in direct contact with a scammer who already sounds like the real company.

The danger is not just the initial call. It is what happens next if your information is reused or shared.

How to protect yourself from fake phone scams

Here's how to protect yourself from this exact scenario moving forward:

1) Never trust phone numbers from search results

Always go directly to the company's official website and find the contact page there.

2) Use the number on your card or confirmation email

These are far more reliable than anything you find through a quick search.

3) Watch for instant answers and pressure

Real companies rarely answer instantly and push for immediate payment details.

WHY THAT $4 CHARGE ON YOUR STATEMENT COULD BE FRAUD

4) Check the email domain carefully

If it does not match the official company domain, it is a red flag.

5) Replace compromised cards immediately

Do not wait for fraud to appear. Request a new card number right away.

6) Turn on real-time alerts

Enable transaction alerts so you can catch suspicious activity early.

7) Freeze your credit if personal data is exposed

This adds a strong layer of protection against identity theft.

8) Consider identity theft protection

If your personal information was exposed, identity theft protection can monitor your identity, alert you to suspicious activity and help you respond quickly if something goes wrong. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.

9) Remove your personal data from public databases

Data broker sites collect and sell your personal details. Removing your information reduces the chances scammers can find and target you again. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

What Rosette did right

It's important to call this, out because it matters.

She questioned the pricing
She challenged the caller
She stopped before a charge went through
She contacted her bank quickly

Those steps significantly reduced the damage. This could have gone much further.

Kurt's key takeaways

Scams like this are not about being careless. They are about being human. You were trying to solve a problem quickly. The scammer was ready for that exact moment. The biggest takeaway is simple: Slow down when money or personal information is involved. Even a few extra seconds to verify a phone number can make all the difference. And if something feels off, trust that instinct.

If you needed to call your bank or airline right now, would you trust the first number you see online? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com — trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

I'm a drone CEO. Our skies are dangerously exposed — here's the solution

Fri, 10 Apr 2026 05:00:01 -0400

Imagine building a solution to a problem you never fully defined.

That’s where we are with airspace sovereignty. Especially when it comes to drones.

We’ve spent billions of dollars on counter-UAS systems (C-UAS), deploying sensors and expanding capabilities. For many officials, C-UAS has become the solution. The problem is, it was never the full problem to begin with.

Before we talk about stopping drones, we should answer a more basic question: which ones belong in the air?

BORDER ON THE BRINK AS CARTEL DRONES FORCE US TO ACT AFTER YEARS OF PARALYSIS

We can’t answer that with confidence.

We’ve gotten better at seeing the sky. But seeing is not the same as knowing what is flying in it.

Today, when a drone appears in controlled airspace, we can detect it and track it. With Remote ID, we can occasionally determine who’s operating it. What we cannot do, quickly and with certainty, is determine whether that drone is authorized, meaning the aircraft, the operator and the mission are approved and operating as intended.

And in airspace security, speed is everything. This isn’t a problem you solve in minutes or hours. Decisions have to be made in seconds. In that moment, operators need to answer three questions: Is it authorized? Is it compliant? Is it a threat?

If you can’t answer those questions immediately, you don’t control your airspace.

That’s the gap.

US MILITARY SHOT DOWN PARTY BALLOON NEAR EL PASO AFTER SUSPECTING DRONE, OFFICIAL SAYS

In traditional aviation, that gap is managed far more effectively. Operations in controlled airspace tie together a verified operator, a known aircraft and an approved flight plan, all continuously monitored.

The stakes are higher, but so is the structure and the time to respond. Aircraft operate from known locations, along defined routes, over longer periods of time.

Drones don’t operate that way.

TRUMP ADMIN CUTS RED TAPE ON COMMERCIAL DRONES TO COMPETE WITH CHINA'S DOMINANCE OF THE MARKET

They can be launched from less than a mile away and reach a target in minutes, often without any of those elements being reliably connected or visible in real time.

Today, who is flying, what they are flying and why they are flying are not reliably connected, consistently verified, or available in real time to the people responsible for making decisions.

In complex airspace like the National Capital Region, this problem becomes impossible to ignore. A single drone operation may require approvals from multiple jurisdictional authorities, each operating through separate systems and timelines. There is no unified view of what’s been approved, no shared system to see what’s happening in real time and no reliable way to ensure that an approved operation is doing what it was approved to do.

BRETT VELICOVICH: ‘MYSTERY’ DRONES ARE NO MYSTERY, THEY ARE A DANGEROUS THREAT TO NATIONAL SECURITY

Authorization today isn’t a system. It’s a patchwork. An operator might go through LAANC, DroneZone, a COA, a waiver, or even a chain of emails and phone calls to get approval. Few of these systems talk to each other. Few provide a shared, real-time picture. None were built for the kind of airspace we’re trying to manage today.

Even when a drone is fully authorized, no one can immediately know that. The people responsible for securing the airspace are left piecing together fragments, seeing a drone, checking what they can and then making a judgment call.

That’s not sovereignty. That’s uncertainty.

This didn’t happen because people aren’t paying attention.

Federal, state and local law enforcement, among others, are all actively working this problem, and they’re doing it the way they were trained to, as a threat.

That’s not a criticism. It’s reality.

PENTAGON EXPLORING COUNTER-DRONE SYSTEMS TO PREVENT INCURSIONS OVER NATIONAL SECURITY FACILITIES

This is a security issue.

But it’s also an airspace problem.

And unless you’ve operated in both environments, it’s easy to focus on how to stop the threat before fully understanding how the airspace is supposed to work.

PENTAGON WATCHDOG WARNS DRONE INCURSIONS REQUIRE 'IMMEDIATE ATTENTION' AT US MILITARY BASES

I’ve seen this from both sides, operationally and from a security perspective.

I was asked during a congressional hearing, "If you’re not sure, why not just shoot it down?" It’s a fair question, until you consider where these operations happen.

Over cities. Over crowds. Over critical infrastructure.

Because when you don’t know what’s flying, what it’s carrying, or what it’s doing, you don’t know what happens when it falls. That’s not policy. That’s physics.

We’ve spent years building the ability to respond. We never built the ability to define it.

Without that distinction, every drone becomes a question, and when every drone is a question, every decision becomes slower, harder and riskier.

More sensors, better detection and improved counter-drone systems are necessary. But they don’t solve the problem on their own.

What’s missing is a system that establishes trust before a drone takes off and maintains it throughout the operation.

The missing piece is a fully integrated Digital Flight Authorization System (DFAS).

It replaces today’s fragmented processes with a single system, scattered approvals with one authoritative source and uncertainty with a real-time picture of what is authorized, who is operating, and what they are doing. It binds the operator, the aircraft, and the mission into a single, verifiable identity and confirms conformance in real time.

Instead of guessing, decision-makers know. In seconds.

CLICK HERE FOR MORE FOX NEWS OPINION

That’s the difference between reacting to the sky and controlling it.

Airspace sovereignty isn’t about seeing more. It’s about knowing.

The President has set the standard: "It is the policy of the United States to ensure control of our national airspace."

That’s the right goal. But control isn’t achieved by seeing more. Control comes from knowing.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Until we can know, in seconds, who is flying, what they are flying and why, we haven’t finished the job. And until we implement the system required to deliver that mandate, we won’t.

We’re not securing our skies. We’re leaving them exposed. And that’s not control.

We could win the AI war and still lose all of our freedoms if we aren’t careful

Thu, 09 Apr 2026 05:00:35 -0400

I have spent half a century tracking threats to American security — from Soviet armored columns to jihadist networks to the accelerating military machine of communist China. In all that time, I have never watched a danger develop quite like this one: a threat born not only from our adversaries, but one we are building ourselves, with our own capital and our own engineering genius, moving faster than we have decided what rules should govern it.

That is the unspoken risk inside this technology race. Right now, America is moving too fast to see it clearly.

To understand where this road leads without discipline, look at what Beijing has already built. In a 2025 address to China’s Politburo, President Xi Jinping called machine intelligence a "strategic technology" reshaping the foundations of state power — not merely a tool, but the engine of governance and global dominance. China has deployed more than 200 million surveillance cameras, many equipped with facial recognition and integrated into national police networks.

Human Rights Watch documented that a digital surveillance network in Xinjiang flagged Uyghur Muslims for detention not because they committed crimes, but because an AI-powered predictive surveillance system said they might.

AMERICA’S ‘UNDECLARED EMERGENCY:’ PALANTIR EXEC TALKS IRAN, DEADLY NEW US WEAPONS AND HOW TO AVOID WORLD WAR 3

China now holds roughly 70% of global surveillance patents, and through the Belt and Road Initiative it is exporting that model of control across Asia, Africa and Latin America. Countries importing these systems are not buying hardware. They are importing a governing philosophy — one where automated control has displaced constitutional rights. That is the road we must not walk. And right now, we are not as far from it as Americans assume.

America is racing to answer. It should be. On his first full day in office, President Donald Trump announced the Stargate Project — committing OpenAI, Oracle, SoftBank and MGX to up to $500 billion in U.S. computing infrastructure, with the flagship campus in Abilene, Texas, already operational.

The administration’s July 2025 AI Action Plan outlined more than 90 policy actions spanning innovation, infrastructure and international leadership. In September, Trump convened more than 30 technology executives at the White House — Apple, Google, Meta, Microsoft, Oracle, AMD and OpenAI — securing investment pledges topping $1.5 trillion through the decade.

FOX NEWS AI NEWSLETTER: PALANTIR CTO WARNS US HAS ONLY 'EIGHT DAYS OF WEAPONS' IN HYPOTHETICAL CHINA BATTLE

In November, the president signed the Genesis Mission executive order, establishing the most ambitious federal research initiative since the Manhattan Project: a national platform fusing Department of Energy supercomputers, secure cloud systems and scientific datasets to compress discovery cycles from years to months.

Microsoft just committed $10 billion to technology infrastructure in Japan, anchoring a U.S.-aligned digital ecosystem in the Pacific as a direct counter to Beijing. The pace and scale of this investment is right. The urgency is warranted.

But urgency is precisely when guardrails disappear. And that is why the alarm must be sounded.

AI RAISES THE STAKES FOR NATIONAL SECURITY. HERE’S HOW TO GET IT RIGHT

The same systems built to outcompete Beijing can be turned inward — not by any single dramatic decree from the White House, but through thousands of small decisions made in the name of speed: efficiency replacing accountability, automation replacing human judgment, convenience replacing constitutional limits.

Cybersecurity experts now warn that autonomous systems resist reliable control through conventional software frameworks. That is a sobering reality when those systems are embedded in defense, law enforcement, or the delivery of government services.

Freedom in America is rarely lost all at once. It erodes through systems that make decisions too fast to question, operate too opaquely to challenge, and reach too widely to escape. When automated systems begin to determine who receives benefits, shape what information citizens can access, or drive consequential decisions without human accountability, authority has quietly migrated — from elected officials and courts to systems no one fully understands and no one voted to empower.

Trump’s December 2025 executive order on AI rightly pushed back against the splintered maze of state regulations threatening to fragment American innovation. His March 2026 national AI legislative framework urged Congress toward a unified federal approach covering child safety, intellectual property, free speech and workforce development. Both were necessary steps. But a legislative recommendation is not law.

CLICK HERE FOR MORE FOX NEWS OPINION

There are still no binding federal standards specifying what human oversight is required before an automated system makes a binding decision about an American citizen, what transparency is owed when government systems evaluate the people they govern, or how privacy, due process, and free expression survive the age of machine rule. Congress must act — not to slow the race, but to make sure what we preserve is worth winning.

These questions are at the core of my new book, "The New AI Cold War: Liberty vs. Tyranny in the Age of Machine Empires," available later in April. The contest with China is as real as any this nation has faced. So is the internal temptation every great power confronts in a long competition: adopting the logic of your adversary in the name of defeating him.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Make no mistake — our adversaries are already deploying these technologies against American interests. But that is not where the greatest danger lies. It lies closer to home: that in the name of defeating them, we quietly build the same architecture of control ourselves — and by the time we recognize it, the infrastructure is already in place.

History will not judge us by whether we built AI first. It will judge whether we remained free while doing so.

CLICK HERE TO READ MORE FROM BOB MAGINNIS

Apple Pay text scam almost cost her $15,000

Wed, 08 Apr 2026 08:00:47 -0400

You see a charge you don't recognize. It looks like it came from a trusted brand. Your instinct kicks in. You want to fix it quickly and move on. That's exactly what happened to Dorothy.

After a simple text, she found herself on the phone with someone who sounded official, confident and completely convincing. Here's how she described it:

"I received a text from APPLE Pay, which I don't even use... It said an Apple Store in CA wants to charge me $144... If I have questions, I should call. DUH! I called and was speaking with the scammer."

Within minutes, the situation escalated.

"He knew everything about me... He said I should take out $15,000... He said he was working with the FBI and the FDIC."

That's when the pressure really started. Dorothy told me this story when she joined me on my Beyond Connected podcast, and what happened next shows just how far these scams can go.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

10 WAYS TO PROTECT SENIORS FROM EMAIL SCAMS

How this Apple Pay text scam actually works

This scam follows a pattern that is becoming more common. It combines a fake alert with a live phone call designed to build trust fast.

Here's what is happening behind the scenes:

Step 1: The fake charge alert

You get a text about a suspicious charge. It looks urgent. It often includes a number to call.

Step 2: You call the scammer

The number connects you directly to a criminal. They pose as Apple, your bank or even law enforcement.

Step 3: They build credibility

They may know your name, address or bank. That information often comes from past data breaches.

Step 4: They create fear and urgency

You are told your money is at risk. You need to act immediately.

Step 5: They control your next move

In Dorothy's case, the scammer told her to withdraw $15,000 and lie to her bank about why.

"He said he would stay on the phone with me while I drove to the bank... If anyone asked, I should say I was buying a car."

That is a major red flag.

PHISHING SCAM EXPLOITS APPLE MAIL 'TRUSTED SENDER' LABEL

The moment everything could have gone wrong

Dorothy drove to the bank with the scammer still on the phone. This is exactly what criminals want. They try to isolate you and keep control of the situation.

But something didn't feel right.

"When I got to the bank, I recognized one of the employees and told her that I was uncomfortable... She said to hang up immediately."

That decision changed everything.

The bank confirmed it was a scam. The calls kept coming from different numbers. Dorothy blocked them all. Fortunately, no money was lost.

Why the Apple Pay text scam feels so real

Scammers are getting better at one thing. They make you feel like you are solving a problem, not being scammed.

Here's why this one works so well:

It uses a trusted name like Apple Pay
It creates urgency with a fake charge
It moves quickly to a live conversation
It uses real personal details to build trust
It pressures you to act before you think

They also add authority. Claiming ties to the FBI or FDIC makes people feel like they must comply. In reality, no legitimate agency will ever ask you to move money this way.

The biggest red flags to watch for

If you remember nothing else, remember these:

A text about a charge that tells you to call a number
Someone is asking you to withdraw large amounts of cash
Instructions to lie to your bank or keep a secret
Claims that your money needs to be "protected"
Pressure to act immediately

Each one is a warning sign. Together, they confirm it is a scam.

How to stay safe from Apple Pay text scams

You do not need to outsmart scammers. You just need to slow the situation down.

1) Never trust the number in the message

If you get a suspicious text, do not call the number provided. Look up the official number yourself.

2) Pause before you act

Scammers rely on urgency. Take a moment. Real companies will not rush you like this.

3) Never move money on someone else's instructions

No bank, tech company or government agency will ask you to withdraw cash to "protect" it.

4) Use strong antivirus software

Strong antivirus software can help detect malicious links, block scam websites and warn you before you engage with risky content. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

5) Remove your personal data from the web

Scammers often use data from breaches to sound convincing. A data removal service can help reduce your exposure and limit what criminals can find about you online. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

6) Talk to someone you trust

A quick conversation with a friend, family member or bank employee can stop a scam cold.

7) Add extra protection

Consider identity monitoring services that alert you if your information is being misused. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.

What to do if this happens to you

Even if you did not lose money, take a few steps right away:

Contact your bank using the number on your card
Place a fraud alert on your credit
Consider freezing your credit
Monitor your accounts closely
Block any follow-up calls or texts

These steps help protect you from future attempts.

What this means for you

This scam did not begin with a complex hack. Instead, it started with a simple text. That is what makes it so dangerous. At first, it looks routine. Then urgency takes over. As a result, anyone can feel pressured to act quickly and without thinking.

In many cases, the situation feels real. That is how people get pulled into a conversation that seems legitimate. In Dorothy's case, she trusted her instincts at the right moment. Because of that decision, fortunately, she did not lose $15,000.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Kurt's key takeaways

Scammers target more than technology. They focus on human behavior. They create pressure, build trust and keep you engaged long enough to make a mistake. However, you can break the cycle. A single pause can disrupt the scam. Asking one question can expose it. Even a quick conversation with someone you trust can stop it. If you'd like to hear more of Dorothy's story, you can catch our full conversation on my Beyond Connected podcast at getbeyondconnected.com/

If you got a text like this right now, would you pause or would you call? Let us know by writing to us at Cyberguy.com.

Android flaw lets hackers unlock phones in under a minute

Sun, 05 Apr 2026 12:50:35 -0400

Your phone lock screen is supposed to be your last line of defense. If your device gets lost or stolen, that PIN or passcode should keep strangers out of your photos, messages and financial apps. But researchers have found a serious flaw that can break through those protections on certain Android phones in less than a minute.

Once exploited, attackers can recover your phone's PIN, unlock encrypted storage and even extract sensitive data such as cryptocurrency wallet seed phrases. Security researchers estimate that roughly one in four Android phones could be affected, particularly budget phones.

Sign up for my FREE CyberGuy Report Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com - trusted by millions who watch CyberGuy on TV daily. Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

ANDROID FIXES 129 SECURITY FLAWS IN MAJOR PHONE UPDATE

All about the Android hacking flaw

A newly disclosed vulnerability, tracked as CVE-2026-20435 in the National Vulnerability Database, affects some Android phones powered by MediaTek, a major smartphone chip maker based in Taiwan that competes with companies like Qualcomm. These phones use a security component called Trustonic's Trusted Execution Environment (TEE), which is designed to keep sensitive data, such as encryption keys, protected from the rest of the system.

It stores cryptographic keys that help keep your device encrypted and secure, even if someone tries to tamper with it. However, security analyses of the vulnerability indicate that these protections may be bypassed on affected devices.

By connecting a phone to a computer using a USB cable, an attacker with physical access may be able to exploit the flaw during the early boot process, potentially exposing sensitive data before full security protections are enforced. Think of it like accessing the master key before the safe door even closes. Once attackers gain access to these low-level components, they may be able to access encrypted storage without needing your PIN.

In a worst-case scenario, this type of access could allow attackers to extract highly sensitive information, including personal photos, stored passwords, private messages, financial data, and crypto wallet credentials. If seed phrases for crypto wallets are exposed, attackers could drain funds permanently.

What are Android makers doing about this

There's limited action manufacturers can take on their own since the issue originates at the processor level, which is manufactured by MediaTek. The company says it has released a firmware patch addressing the vulnerability. However, the update must still be distributed by individual phone manufacturers through security updates. Depending on the device and whether it is still supported, that update could arrive quickly or not at all.

The good thing is that this attack requires physical access to the phone and a USB connection to a computer. That means it cannot be done remotely over the internet. However, if your phone is stolen, briefly confiscated, or even taken during a repair, the attacker could potentially extract sensitive information.

If you're not sure whether this vulnerability affects your mobile device, you can look up your phone on a platform like GSMArena or your vendor's website to see which SoC it uses, then cross-check it with MediaTek's March security bulletin under CVE-2026-20435. You can log onto corp.mediatek.com/product-security-bulletin/March-2026 to review the list of affected chipsets and confirm whether your device may be at risk.

CyberGuy reached out to MediaTek for comment, but did not hear back before our deadline.

NEW ANDROID ATTACK TRICKS YOU INTO GIVING DANGEROUS PERMISSIONS

How to tell if your phone is affected

So how do you know if your phone is actually at risk? Not every Android phone is vulnerable. The issue primarily affects devices that use certain MediaTek processors. Here's how to check your phone:

1) Find your phone model

Go to Settings > About phone and look for your exact model name.

2) Look up your processor (chip)

Search your phone model on a site like GSMArena or your manufacturer's website to find the processor (also called the SoC).

3) Check if it uses MediaTek

If your phone uses a MediaTek chip, it may be affected. Devices with Qualcomm Snapdragon or Google Tensor chips are not part of this specific issue.

4) Install the latest security updates immediately

Check your phone's system update settings and install any available updates from your manufacturer. Go to Settings > Software update and install any available updates. MediaTek has already released a fix, but phone makers must distribute it. Installing updates quickly ensures you receive the firmware patch if your device manufacturer has released it.

7 ways you can protect your phone from getting hacked

If your phone uses one of the affected chips, a few simple precautions can help reduce the chances of someone accessing your data if the device ever falls into the wrong hands.

1) Install strong antivirus protection

A security app cannot fix this processor-level flaw. However, it can still help protect your phone from other threats that often follow stolen or compromised devices. It will not stop this specific exploit, but it can detect malicious apps, spyware, and suspicious activity that attackers may install after gaining access. That extra layer of monitoring can help stop additional data theft if your device ever falls into the wrong hands. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

2) Avoid keeping sensitive information on your phone

If you store things like cryptocurrency wallet seed phrases, recovery codes, or sensitive documents in notes apps or screenshots, consider moving them to a secure offline location. If someone extracts your phone's data through this vulnerability, that information could be exposed.

3) Keep physical control of your phone

This exploit requires someone to physically connect your phone to a computer. Do not leave your device unattended in public places, and be cautious when handing it to repair shops or unknown technicians. Physical access dramatically increases the risk.

4) Use strong screen locks and auto-lock settings

While the vulnerability bypasses encryption on affected devices, strong lock settings still protect against many other threats. Use a longer PIN or passcode instead of simple patterns, and enable automatic locking after short periods of inactivity.

5) Protect accounts with two-factor authentication

Even if attackers gain access to data on your phone, two-factor authentication (2FA) can stop them from logging into your online accounts. Enable it for email, banking apps, cloud storage, and social media wherever possible.

6) Use a password manager

A password manager stores your login credentials in a secure, encrypted vault instead of leaving them scattered across apps and notes. If someone compromises your device, the password manager still protects your accounts with strong encryption, forcing attackers to break through another security layer before they can access your logins. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com

7) Enable USB restricted mode (if available)

Some Android devices limit USB data access when locked. Turning on this setting can reduce the risk of unauthorized data extraction through a wired connection, especially in situations where someone briefly gains physical access to your phone. On Samsung phones running the latest software:

Settings may vary slightly depending on your Samsung model and software version.

Go to Settings

Tap Lock screen

Then, tap Secure lock settings

Enter your current PIN, then tap Continue

Enable "Lock network and security" (or a similarly named option) to help block USB data access while your device is locked.

Kurt's key takeaway

This vulnerability exposes a deeper issue with the Android ecosystem. Even when chipmakers release a fix, millions of phones depend on manufacturers to deliver updates that may never arrive, especially for cheaper devices that lose support quickly. We often assume our lock screen and encryption will protect our data if a phone is lost or stolen. However, incidents like this show that protection is only as strong as the update policies behind it. When devices stop receiving security patches, those protections quietly weaken over time.

Should phone manufacturers be required to guarantee security updates for several years if their devices contain critical encryption vulnerabilities? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

FBI warns some foreign apps could collect Americans’ data — even if you never download them

Thu, 02 Apr 2026 11:49:05 -0400

Americans' personal data could be collected and stored overseas — even if they've never downloaded a foreign-developed app themselves — according to a new FBI alert warning about the risks tied to popular mobile platforms.

That means information like a person's name, email address or phone number could be pulled from someone else’s contact list and potentially stored abroad if a friend or family member grants an app access to their device.

The warning comes after years of scrutiny over TikTok’s ties to China, but the FBI alert suggests the concerns extend beyond any single platform to a broader range of foreign-developed apps.

In a public service announcement, the FBI said many widely used apps developed overseas, particularly those tied to China, may access extensive data once permissions are granted, including address books containing information on both users and non-users.

5 SIMPLE TECH TIPS TO IMPROVE DIGITAL PRIVACY

The bureau also warned that some apps may continue collecting data in the background after access is granted and, in certain cases, store that information on servers in countries where local laws could allow government access.

"Developer companies can store collected data on users’ private information and address books, such as names, e-mail addresses, user IDs, physical addresses, and phone numbers of their stored contacts," the FBI said. "The app can persistently collect data and users’ private information throughout the device, not just within the app or while the app is active."

CHINESE HACKERS REPORTEDLY BREACHED PHONES AT 'HEART OF DOWNING STREET' IN GLOBAL SPY CAMPAIGN

The FBI did not name specific companies, but the warning could apply to a range of widely used apps developed by Chinese firms — including video-editing platform CapCut, shopping apps like Temu and SHEIN, and social media platforms such as Lemon8 — several of which rank among the most downloaded apps in the United States.

U.S. officials have long warned that data collected by Chinese-linked platforms could be used to build detailed profiles of Americans, map personal and professional networks, and potentially support intelligence-gathering efforts, particularly if accessed under China’s national security laws.

The FBI added that apps operating in China are subject to the country’s national security laws, which could allow the government to access user data.

The FBI also pointed to possible warning signs that an app may be collecting more data than expected, including unusual battery drain, spikes in data usage, or unauthorized account activity after installation — indicators that could suggest background data collection or other suspicious behavior.

The bureau urged users to limit unnecessary data sharing, download apps only from official app stores, and regularly review permissions granted to mobile platforms. The bureau also warned that apps obtained from third-party sites may carry malware designed to gain unauthorized access to personal data.

Years of scrutiny over TikTok culminated in a 2026 deal that forced its Chinese parent company to relinquish control of U.S. operations to an American-led group in order to address fears over data access and national security.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

The FBI’s latest warning suggests those risks may extend beyond a single platform to a broader range of foreign-developed apps used by millions of Americans.

The Chinese embassy could not immediately be reached for comment.

Tech giants unite to fight online scams

Mon, 30 Mar 2026 06:55:49 -0400

If you've ever gotten a suspicious text, a fake delivery alert or a message that felt just a little too convincing, you've already seen how fast scams are evolving. Now, some of the biggest names in tech and retail are scrambling to catch up.

Eleven major companies across those industries, including Google, Amazon, OpenAI, Adobe, Pinterest, LinkedIn, Match Group, Meta, Microsoft, Target and Levi Strauss & Co., have signed a new agreement to share information about scams and fraud.

At first glance, it sounds like a strong step forward. But this is more than a coordinated effort. It is a response to how modern scams actually work today.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide - free when you join my CYBERGUY.COM newsletter

SCAMMERS USING AI MEET THEIR MATCH AS OPENAI, TECH INDUSTRY FIGHT BACK

Why online scams are getting harder to stop

Scammers no longer operate in one place. They might find you on social media, move the conversation to a messaging app, then push you to send money through a fake website or payment service. It is all connected. That's exactly what this new agreement, called the Industry Accord Against Online Scams & Fraud, is trying to address.

Instead of companies working in isolation, they are promising to share threat data in near real time. That includes things like scam accounts, fake domains and patterns tied to organized fraud. The idea is that if one company spots a scam early, others can block it before it spreads.

What the companies are actually promising

This is not just about talking. The companies outlined a few concrete steps they plan to take:

Share intelligence faster

They will exchange information about scam networks, tactics and accounts across platforms and with law enforcement.

Use AI to detect scams earlier

Many companies already rely on AI to flag suspicious behavior. Now they want to expand those systems to catch scams faster and more accurately.

Add stronger verification

Expect tighter checks for financial transactions to confirm both sides are legitimate.

Improve reporting tools

Users should see clearer ways to report scams and get help.

Push governments to act

Companies are also calling for scam prevention to become a national priority in more countries.

That all sounds promising. But there is a catch.

The biggest limitation you should know

This agreement is voluntary. There are no penalties if companies fail to follow through. That means success depends entirely on how seriously each company takes it.

Still, even a loose collaboration could make a difference. Scammers thrive in gaps between platforms. Closing those gaps, even partially, could slow them down.

YOUTUBE JOB SCAM TEXT: HOW TO SPOT IT FAST

How AI is making online scams more dangerous

This push comes as scams are becoming more sophisticated and harder to detect. AI is a big reason why. Scammers can now:

Write highly convincing phishing emails
Clone voices to impersonate loved ones
Create deepfake videos of executives or celebrities

At the same time, companies are using AI to fight back. Google alone blocks hundreds of millions of scam-related results daily, while Meta has removed massive numbers of scam ads using automated systems. It's essentially an arms race.

What this means for your online safety

In theory, this agreement could lead to fewer scams slipping through the cracks.

You might start to notice:

Faster removal of scam accounts
More warnings when something looks suspicious
Fewer fake ads or impersonation attempts

But this won't eliminate scams entirely. Criminal networks are global, coordinated and constantly adapting. So while companies are stepping up, your own awareness still matters.

Cybersecurity expert warns scams are evolving fast

To understand what this really means in practice, it helps to hear from people who track these threats every day. Trend Micro, a global cybersecurity company, says this kind of collaboration is long overdue.

Trend Micro's VP of Consumer Marketing and Education, Lynette Owens, believes cross-industry coordination is a critical step forward as scams increasingly unfold across multiple platforms. She tells CyberGuy:

"It's encouraging to see major platforms like Google, Meta and Amazon coming together to share intelligence and disrupt scam networks. Cross-industry collaboration has proven to be helpful in fighting other types of online harms and has been a fruitful counter-measure against scams and fraud in other countries. Anything that moves us more towards prevention is a win, as so much effort is currently directed at what happens after the harm is done.

"But while it's a useful step forward, it's not a complete solution. Scammers are constantly evolving, using AI and multi-channel tactics to create more convincing, personalized attacks that are harder for people to recognize in the moment.

"What consumers really need is intervention that alerts them where scams actually happen, with clear, timely signals that something isn't right. In today's environment, scams don't come as a single message. They unfold over time and adapt faster than ever to changing consumer habits or platform best practices. Collaboration is an important piece of the puzzle, but the more tools consumers have at their fingertips to fight back, the better their chances at stopping a scam before any real damage is done."

Her takeaway is clear. Collaboration helps, but it will not be enough on its own.

SPRING CLEAN YOUR DIGITAL FOOTPRINT: WHY RETIREES ARE SCAM TARGETS

How to protect yourself from online scams

Even as companies step up their defenses, there are still simple steps you can take right now to reduce your risk and stay one step ahead of scammers.

1) Avoid unknown links

Do not click links in unexpected texts, emails or messages. Instead, go directly to the official website by typing the address yourself.

2) Use strong security software

Install strong antivirus software to help detect malicious links, phishing attempts and suspicious apps before they cause harm. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

3) Turn on two-factor authentication

Enable two-factor authentication (2FA) on your accounts whenever possible. This adds an extra layer of protection even if your password is exposed.

4) Limit where your personal data appears

The more your personal information is available online, the easier it is for scammers to target you. Consider using a data removal service to reduce your exposure on data broker and people-search sites. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

5) Monitor your accounts regularly

Check your bank, credit card and online accounts often so you can catch suspicious activity early and act quickly.

Take my quiz: How safe is your online security?

Kurt's key takeaways

This new alliance signals a shift. Tech companies are starting to treat scams as a shared problem rather than isolated incidents. That's a big step in the right direction. But whether it actually slows down scammers will depend on execution, not promises. Coordination helps, but enforcement and accountability matter just as much.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

If scams keep getting smarter, should tech companies be required to do more than just cooperate voluntarily? Let us know by writing to us at Cyberguy.com

Jewish summer camps ramping up security measures amid rising antisemitism, and parents are footing the bill

Sat, 28 Mar 2026 17:00:11 -0400

As antisemitism rises across the U.S., Jewish summer camps are ramping up security, with some introducing additional charges while working to combat threats before they arise.

FBI crime data shows that, between March 2025 and March 2026, the U.S. recorded 2,421 religion-based hate crime incidents, 1,395 of which targeted Jews. There are hundreds of Jewish summer camps across North America serving tens of thousands of children each year.

A recent attack on a Michigan synagogue highlighted the dangers facing Jewish institutions and the people who rely on them, including children.

AFTER MICHIGAN ATTACK, JEWISH TEENS SHOW ANTISEMITISM WON’T DEFINE THEM

On March 12, Ayman Muhammad Ghazali, a 41-year-old Lebanon-born American, allegedly rammed his vehicle into Temple Israel, a large reform synagogue in West Bloomfield, at approximately 12:30 p.m. before exiting the vehicle with a rifle and exchanging gunfire with a security guard, who shot and killed him.

Preschool students and staff were forced to evacuate for their safety.

After the attack, police departments across the country increased patrols at houses of worship, Jewish institutions and other vulnerable sites. With summer approaching, camps across the country are preparing so they can give children a fun and safe summer.

Secure Community Network (SCN) National Director and CEO Michael Masters told Fox News Digital the response to the attack in Michigan was the product of "years of preparedness" and investments in security.

"That investment paid off in lives saved," Masters said.

SCN, which works with Jewish institutions across North America, launched an initiative focused on summer camps in April 2024. The organization told Fox News Digital that, since the initiative's launch, it has trained over 5,000 camp-related individuals, conducted over 100 site assessments and walkthroughs and secured $2.2 million in federal funding.

Masters also spoke about SCN's recently released list of 10 questions to ask camps before sending children off for the summer and encouraged parents to "be persistent" when asking about safety. The questions cover a variety of topics, such as missing camper procedures, availability of first aid kits and tourniquets and how the camp controls access to its facility, among others.

"Parents should ask, ‘Was your camp one of those that got an assessment? Was your camp one of the those that got trained? Do your counselors know what to do?’ And the camp should be able to answer that question," Masters said. He added that SCN provides its training to institutions for free.

"At the end of the day, a summer camp is still the most vulnerable space that we need to provide security for consultation and guidance," SCN Director of National Programs Jim Tarasca told Fox News Digital.

Tarasca, who worked for the FBI for over 25 years and served as the special agent in charge of the bureau's Detroit Field Office, noted that many camps are located in rural areas, presenting challenges such as communications barriers, including bad cellphone service. He also underscored the importance of empowering staff to see safety as "everyone's responsibility," rather than the job of designated security workers.

JEWISH SECURITY ORGANIZATION WORKING TO KEEP ITS COMMUNITY SAFE AMID ELEVATED TERROR THREAT

While some camps have included security fees in their tuition, others make it a separate line in their lists of session dates and costs. Some camps that list the security fee separately note that the additional charge is meant to offset rising costs of protecting the campers and staff. While security fees vary widely based on several factors, such as session length and whether it is a day or overnight camp, the charges reviewed by Fox News Digital went as high as $250, highlighting the growing costs.

National Conference of Synagogue Youth (NCSY) Summer Director Elliot Tanzman told Fox News Digital that while the organization has always had security protocols, it has become "much more of a focus" in recent years, with the group adding new measures.

As part of its safety measures, NCSY has made changes to its apparel and giveaways because "we're trying not to scream that we are a Jewish group," according to Tanzman. While he acknowledged that the dress codes could be signals to some that the participants are Jewish, Tanzman also said there is an effort to "not be extra identifiable."

"It hurts to say something like that where instead of having the word 'Israel' on some of our T-shirts, which we've had in the past because it's part of the program name, we've shortened it just to say 'NCSY' or 'JSU' or one of our other brands in order to not bring up any forms of antisemitism that we wouldn't want to experience over the summer," Tanzman said.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Jamie Simon, CEO of Foundation for Jewish Camp, said in a statement provided to Fox News Digital that safety and security were a top priority for summer camps. The foundation, according to Simon, can provide guidance from security partners, crisis communications resources and more to help camps continue to operate while keeping kids and staff safe.

"As new challenges emerge, the field is not starting from scratch. Camps are experienced, prepared and deeply committed to the well-being of every young person in their care," Simon said.

"This is a pivotal moment for Jewish life, and Jewish camp offers a joyful, immersive and proven space where young people develop pride in their Jewish identity, deep friendships and a sense of belonging that lasts a lifetime."

Summer camp has played a large role in Jewish American life for more than 120 years. Surprise Lake Camp, which was founded in 1902, is one of the oldest in the country.

The Museum of Jewish Heritage in New York noted that Surprise Lake Camp was initially founded to give boys in urban areas a chance to experience nature and escape the city heat. Surprise Lake Camp alumni include several celebrities, such as Neil Diamond, Jerry Stiller and Gene Simmons.

Fox News Digital's Eric Mack contributed to this report.

Why that $4 charge on your statement could be fraud

Sat, 28 Mar 2026 14:46:13 -0400

A $4 charge is easy to ignore. It might appear as a parking fee, a small purchase or a vague merchant name that doesn't raise any red flags. Consumer protection groups and law enforcement say scammers are counting on that.

Recent warnings describe a pattern sometimes called "ghost tapping," where small, unfamiliar charges show up on contactless payment cards without a clear point of purchase. The amounts are easy to miss, but they can signal unauthorized access to your payment method rather than a simple billing error.

Sign up for my FREE CyberGuy Report. Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

GHOST-TAPPING SCAM TARGETS TAP-TO-PAY USERS

How does ghost tapping work?

Better Business Bureau (BBB) warnings use the term "ghost tapping" to describe these incidents in consumer alerts. In simple terms, it means a payment can be triggered without you actively making a purchase.

One reported method involves compromised payment terminals that quietly process low-value contactless charges. Another involves unauthorized NFC readers operating at close range, sometimes in crowded places. In these cases, a card or mobile wallet can be charged within inches.

Because these transactions run through standard contactless payment networks, they appear as normal card-present purchases. There is usually no clear sign on your statement that anything was wrong.

The small charges aren't arbitrary

Low-dollar transactions are used to confirm that a card can be charged without being declined. When a small charge goes through, it signals that the payment details are active and usable. Once that charge goes through, it establishes a working payment path. Scammers can then run additional transactions using the same card details, sometimes across different merchants or terminals. Many people only notice these charges after they post to an account. At that point, the transaction appears as a completed purchase, not a pending authorization.

Why acting quickly matters

This means a charge that looks harmless could actually be the first step in a larger fraud attempt. Over time, these fraudulent charges may extend beyond a single card. If your payment details have been exposed or are stored in a compromised system, they can be reused until you cancel the card. That can result in multiple charges over several days or even billing cycles.

Delays in reporting also affect how quickly you can stop fraud. The Federal Trade Commission (FTC) advises you to report unauthorized charges as soon as they are identified. In practice, that means contacting your card issuer as soon as you see a charge you don't recognize, either through the issuer's app or customer service line.

Credit cards typically offer stronger fraud protections than debit cards, where money may be withdrawn directly from your bank account. Under federal law, liability for unauthorized credit card charges is limited, but those protections depend on when you report it.

Scammed? What federal agencies say to do next

If you spot a charge you don't recognize, acting quickly can limit damage and protect your rights under federal law.

Review transactions as they post

The FTC recommends checking account activity regularly and flagging any unfamiliar charges as soon as they appear.

Contact your card issuer immediately

The Consumer Financial Protection Bureau (CFPB) advises reporting the charge right away and opening a dispute through your issuer's app or customer service line.

Submit a formal dispute within 60 days

To preserve protections under the Fair Credit Billing Act, you must send a billing error notice within 60 days of the statement that includes the charge.

Understand the investigation timeline

Card issuers must acknowledge your dispute within 30 days and resolve it within two billing cycles, typically no more than 90 days.

Confirm the charge details before disputing

Check the merchant name, date and amount, since some transactions may appear under payment processors or parent companies.

Replace or block the card if needed

If the charge is unauthorized, the issuer can cancel the card and issue a replacement to stop further transactions.

Simply keeping an eye on your accounts may not be enough

Even if you check your statements regularly, small charges can still slip through and delay detection.

Timing can work against you

A lot hinges on when you check your account. If you review transactions infrequently or rely on monthly statements, unauthorized charges may only surface after they've already posted. By then, multiple transactions can appear across different dates or merchant names, making them harder to spot.

Alerts don't always catch small charges

Notifications are not always consistent across accounts. Some banks alert you only after a transaction is completed, while others set thresholds that don't flag low-dollar amounts. That can allow small charges to slip through without notice. If the same payment details are used elsewhere, activity may not appear in one place.

Ways to protect yourself from ghost tapping

These simple steps can help reduce your risk and catch suspicious charges before they turn into bigger fraud.

1) Turn on transaction alerts

Set up real-time alerts for all charges, even small ones, so you can spot suspicious activity immediately.

2) Use mobile wallets when possible

Apple Pay and Google Pay use tokenization, which means your real card number is not shared with merchants.

3) Keep your card secure in crowded places

Contactless cards can be read at close range, so avoid leaving them exposed in busy environments.

4) Check your accounts more frequently

Do not rely on monthly statements. Review transactions every few days to catch issues early.

How broader monitoring can help

Even with these steps, some suspicious activity may not show up in one place or right away. That's where broader monitoring comes in. Identity and credit monitoring services are designed to track changes tied to your financial and personal information as they happen. This can include transaction monitoring along with three-bureau credit monitoring, so activity linked to your identity can be seen across accounts and credit files at the same time. That includes new inquiries, account openings and changes that would not appear in any one banking app.

Some services also scan known data breach records and dark web marketplaces for exposed personal information. If your data appears in those sources, you can receive an alert tied to the specific identifier that was found.

HOW DEBIT CARD FRAUD CAN HAPPEN WITHOUT USING THE CARD

If suspicious activity is detected, many platforms offer tools to take action quickly. This may include locking your credit file and working with a U.S.-based fraud resolution team to contact card issuers, dispute charges and close affected accounts.

Some identity protection services also include insurance coverage, often up to $1 million per adult, to help cover eligible losses and legal fees, along with 24/7 fraud resolution support to help restore your identity.

No service can prevent every kind of identity theft. If it happens, monitoring and guided support can make recovery easier to manage.

How to check if your personal information was exposed

If you are unsure whether your personal information has already been exposed, take action now. Our No. 1 identity theft protection pick includes a free identity breach scan, which allows you to see whether your data appears in known leaks. Early detection gives you more control and helps you respond before fraud spreads.

See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.

Kurt's key takeaways

A small charge is easy to ignore, especially when it blends in with everyday purchases. But as these reports show, that's exactly what scammers are counting on. A few dollars can be the first sign that your payment details are active and vulnerable, giving attackers a way to test and expand access without raising alarms.

The sooner you catch it, the easier it is to stop. This is one of those situations where habits matter. Checking your transactions regularly, acting quickly on anything unfamiliar and adding an extra layer of monitoring can make a real difference. Fraud doesn't always start big, but it often starts small.

Have you ever spotted a small charge you almost ignored that turned out to be fraud, and how did you handle it? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

DarkSword leak puts millions of iPhone users at risk

Fri, 27 Mar 2026 10:01:57 -0400

Last week, researchers warned about a sophisticated iPhone hacking tool called DarkSword. Now the situation has escalated. A newer version of that tool has been leaked online and posted to a public code-sharing site. That changes everything. What was once limited to advanced attackers is now far easier to access and use. Security experts say this could quickly turn into a widespread threat, especially for people using older Apple software.

DON'T IGNORE APPLE'S URGENT SECURITY UPDATE

Why the DarkSword iPhone hack is more dangerous now

Before the leak, tools like DarkSword required skill, resources and time. Now, much of that barrier is gone. The leaked version is surprisingly simple. It uses basic web technologies like HTML and JavaScript. That means someone with minimal experience could copy the code, host it and launch an attack in a short amount of time. Researchers say the exploits can work right away with little setup. No deep knowledge of iOS is required. That is the real shift here. The tool itself did not suddenly become more powerful. It became easier to use.

Which Apple devices are at risk

This is where the numbers get concerning. DarkSword targets iPhones and iPads running older operating systems, especially iOS 18 and earlier. According to Apple's own data, a large share of active devices still falls into that group. With billions of Apple devices in use worldwide, that could leave hundreds of millions of users exposed. Apple says these attacks specifically target outdated versions of iOS, often through malicious links or compromised websites. If your device is not updated, it could be vulnerable.

What the DarkSword iPhone hack can access

This is not a minor nuisance. The leaked code includes instructions for pulling sensitive data directly from a device. Once it gains access, it can:

Extract contacts and messages
Access call history
Pull data from the iOS keychain, including saved passwords
Send that information to a remote server

There are also references to activity that happens after the initial compromise, which suggests attackers can dig deeper once they are inside. In simple terms, this is full access to your digital life.

Apple's response and what helps

Apple has already addressed the issue for newer devices. The company pushed updates that block these attacks on current versions of iOS. It also released a security update for older devices that are unable to run the latest version of iOS. Apple says these attacks target out-of-date software and can be triggered through malicious links or compromised websites. If your iPhone is up to date, you are already protected. Apple also says keeping your software updated is the single most important step you can take to protect your device. Devices running the latest versions of iOS were not at risk from these attacks. For older devices, Apple released updates on March 11, 2026, to extend protections. Devices running iOS 13 or iOS 14 must update to iOS 15 to receive those protections.

We reached out to Apple for comment, and the company pointed us to its official security guidance at support.apple.com/en-us/126776 for more details.

THOUSANDS OF IPHONE APPS EXPOSE DATA INSIDE APPLE APP STORE

What you should do right now

If you have been putting off software updates, now is the time to stop. This situation shows how quickly a targeted threat can turn into a mass risk. Once tools like this are public, they spread fast. Even if you are not specifically being targeted, attackers can automatically scan for vulnerable iPhones and go after them in large numbers.

A quick check can make a big difference:

Go to Settings
Tap General
Tap Software Update
Install the latest version available

Ways to stay safe from DarkSword attacks

If this sounds concerning, it should. The good news is that there are a few simple steps that can significantly reduce your risk.

1) Update your iPhone right away

As I mentioned above, this is the most important step. Apple has already patched the vulnerability in newer versions of iOS. If your device is updated, you are protected from this specific attack.

2) Turn on Lockdown Mode if you want extra protection

Lockdown Mode is designed for high-risk situations, but anyone can use it. It limits certain features that attackers often rely on.

Go to Settings > Privacy & Security > Lockdown Mode to enable it.

Keep in mind: Lockdown Mode is an extreme security setting. It restricts some apps, websites and features, and certain functions may not work as expected while it is turned on.

3) Avoid clicking on unknown links or pop-ups

Many of these attacks rely on you to click on malicious links or open a compromised website. If you receive a strange link in a message or email, do not tap it. Also, use strong antivirus software to help detect malicious links and block suspicious activity before it can compromise your device. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

YOUR PHONE SHARES DATA AT NIGHT: HERE'S HOW TO STOP IT

4) Keep apps and browsers up to date

Even if your iOS is current, outdated apps can still create security gaps. Regular updates close those openings.

5) Reduce your exposure with a data removal service

If your personal information is already circulating online, it can make you an easier target. Data removal services help delete your details from data broker sites, which reduces the amount of information attackers can access in the first place. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

6) Use strong device security habits

Set a strong passcode, enable Face ID or Touch ID and avoid using public Wi-Fi without protection. These steps add another layer of defense.

7) Consider using a security or identity monitoring service

Some identity theft companies can alert you if your personal data is exposed or being used without your knowledge. That can help you act faster if something goes wrong. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com

Kurt's key takeaways

This is one of those moments where a simple step makes a real difference. Keeping your phone updated is easy to put off, but it is one of the most effective ways to stay protected. When tools like DarkSword become widely available, outdated devices stand out as easy targets. This is real, and it is happening now. So, update your iPhone today.

So here is the bigger question. If a basic update can block a serious attack, what is stopping people from doing it? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

5 simple tech tips to take back control of your social media

Fri, 27 Mar 2026 08:07:17 -0400

Social media platforms collect more data than most people realize. They track what you click, who you interact with and even where you go. Over time, that information builds a detailed profile of your habits and behavior.

The good news is you can take back control. A few simple setting changes can limit tracking, reduce data sharing and improve your privacy across your favorite apps.

Many of these privacy controls also exist inside each app, so it's important to check both your device settings and in-app options.

Here are five simple tech tips to help you regain control of your social media today.

HOW TO MAINTAIN AND PROTECT YOUR ONLINE PRIVACY

1) Turn off personalized ad tracking

Social media platforms use your activity to build advertising profiles. These profiles follow you across apps and websites to deliver targeted ads. Turning off ad tracking helps reduce how much data is used to profile you.

iPhone:

Open Settings
Tap Privacy & Security
Tap Tracking
Turn off Allow Apps to Request to Track

Android:

Settings may vary depending on your Android phone’s manufacturer

Open Settings
Tap Security & privacy
Scroll to More privacy settings
Tap Ads
Tap Delete advertising ID. Then, confirm your decision by tapping Delete advertising ID
Tap Reset advertising ID. Then, confirm your decision by tapping Confirm

This limits how social media apps track your behavior across other apps and services.

2) Limit access to contacts, photos and microphone

Many social media apps request access to your contacts, camera, microphone and photos. In many cases, they collect more data than necessary. Reducing permissions helps limit what these platforms can gather about you.

iPhone:

Open Settings
Tap Privacy & Security
Tap Contacts, Photos, Microphone or Camera
Select the social media app
Choose None, Limited Access (Photos), or turn access off

Important notes for accuracy:

Photos: You will see options like None, Limited Access or Full Access
Microphone/Camera: Toggle access off
Contacts: Toggle access off (no "None" label appears)

Android:

Settings may vary depending on your Android phone’s manufacturer

Open Settings
Tap Security & privacy
Tap More privacy settings
Tap Permission Manager
Select a permission (Contacts, Photos & videos, Microphone, Camera)
Choose the social media app
Tap Don't allow or Allow only while using the app

Limiting permissions reduces how much personal data social platforms can access and store.

5 TECH TERMS THAT SHAPE YOUR ONLINE PRIVACY

3) Turn off location tracking inside social apps

Many social media platforms track your location to suggest content, ads and nearby connections. You can reduce this by limiting location access both on your device and inside the apps themselves.

iPhone:

Open Settings
Tap Privacy & Security
Tap Location Services
Select the app
Choose Never or While Using the App

Android:

Settings may vary depending on your Android phone’s manufacturer

Open Settings
Tap Location
Tap App location permissions or App permissions
Select the app
Choose Don't allow or Allow only while using

You should also check the app's internal settings and turn off location sharing or tagging.

4) Disable contact syncing

Some social media apps upload your contact list to find friends and connections. This can expose your personal network without you realizing it.

iPhone:

Open Settings
Tap Privacy & Security
Tap Contacts
Select the app
Tap None

Android:

Settings may vary depending on your Android phone’s manufacturer

Open Settings
Tap Security and privacy (or Privacy)
Tap More privacy settings
Tap Permission manager
Tap Contacts
Select the app
Choose Don't allow

Then check inside the app:

Open the app and go to Settings
Tap Privacy, Account or Permissions
Turn off Contact syncing or Upload contacts
Delete previously uploaded contacts if the option is available

This prevents the app from accessing your contacts and removes any data that may have already been uploaded.

5) Review your privacy and security settings regularly

Social media platforms update their features and policies often. That means your settings may change without you noticing. Take a few minutes every few months to review:

Account privacy settings
Ad preferences
Connected apps
Login activity

This helps ensure your account stays secure and your data stays protected over time.

FAKE GOOGLE SECURITY PAGE CAN TURN YOUR BROWSER INTO A SPYING TOOL

Bonus: Turn off off-platform activity tracking

Some social media platforms track your activity even when you are not using their apps. This is often called off-platform activity or off-app tracking. It allows companies to collect data from websites and apps you visit and connect it back to your profile. This type of tracking is most clearly available on Meta platforms like Facebook and Instagram, where it can be turned off inside your account settings.

To turn it off on Facebook or Instagram:

Open the app and go to Settings
Tap Accounts Center
Tap Your information and permissions
Tap Your activity off Meta technologies
Tap Clear previous activity (optional)
Tap Manage future activity → Disconnect future activity

Other platforms may offer similar controls under names like Data sharing, Ad preferences or Partner activity, though the steps vary. Disabling these settings reduces how much data platforms collect about your behavior outside their apps.

Pro tip: Add a safety layer for malicious links and scams

Even if you lock down your privacy settings, social media platforms are still filled with malicious links, fake ads and scam messages designed to trick you into clicking. These attacks often bypass built-in protections and rely on human behavior. Using strong antivirus software or an antivirus app on your phone adds an extra layer of protection by detecting harmful links, blocking phishing attempts and warning you before you interact with suspicious content. This is especially important if you ever accidentally tap on a link in a message, comment or ad. One wrong click can expose your personal information or lead to account compromise. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

What this means to you

Social media platforms are built to collect and analyze your behavior, often in ways that are not obvious. The longer you use them, the more detailed that profile becomes. Taking a few minutes to adjust your settings can significantly reduce how much of your personal information is tracked, stored and shared.

Take my quiz: How safe is your online security?

Kurt's key takeaways

You do not need to quit social media to protect your privacy. You just need to be more intentional about how these apps access your data. Most people never check these settings, which is exactly why they matter. Taking a few minutes today to review your permissions and tracking options can help you stay in control instead of letting algorithms control you.

Have you ever checked how much data your social media apps are collecting about you, or would it surprise you? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Stefanik grills University of Michigan leader on lack of audit after string of Chinese national arrests

Thu, 26 Mar 2026 15:24:04 -0400

Rep. Elise Stefanik, R-N.Y., continued her relentless cross examinations of college administrators Thursday – this time pressing Michigan's interim president Domenico Grasso on Chinese student spies at the university.

Stefanik wanted to know why Chinese nationals in Michigan were accused of spying on America and his university is not auditing potential national security vulnerabilities in research there.

"Last year, facing congressional pressure, Michigan ended its partnership with Shanghai Jiao Tong University after five Chinese students were caught spying at night and taking illegal photos of U.S. military drills and equipment on the remote Michigan installation Camp Grayling," Stefanik said. "These students lied and misled U.S. law enforcement about their motives and later conspired on the CCP-controlled messaging app WeChat to clear their phones and cameras of photos and evidence."

"Has the university conducted a full audit to determine what intellectual property or federally funded research was compromised?" the congresswoman asked.

CHINESE UNIVERSITY OF MICHIGAN STUDENTS CHARGED AFTER ALLEGEDLY SPYING ON MILITARY BASE

Without an audit, Grasso responded, "we are unaware of any research that was compromised by these individual students," noting the alleged spying occurred "miles and miles away from campus."

But Stefanik was nonplussed by the answer.

"I understand Camp Grayling is off campus, but was there an audit conducted?"

TRUMP DOUBLES DOWN ON PLAN FOR 600,000 CHINESE STUDENT VISAS DESPITE MAGA BACKLASH

Grasso admitted Michigan did not.

"Well, they were not researchers," he said, doubting "they did something nefarious." "They were undergraduate students. So, we did not do an audit."

And, adding, "they did not have any access to any of our research."

FOREIGN-BACKED INFLUENCE IN SCHOOLS TO BE EXPOSED UNDER GOP ‘TRACE ACT’ GIVING PARENTS ACCESS TO CURRICULUM

But Stefanik noted they were accused of spying.

"Well, they did do something nefarious off campus," she said. "I think it would be important for the university to ensure that there is a full audit conducted to make sure that no research, that they didn't take any nefarious acts there."

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Grasso admitted he does "not know what all of our researchers are involved in," but doubted the Department of War would clear them for access to U.S. secrets on campus.

"Congresswoman, we have improved, and we're continuing to improve our background checks for all of our researchers and students that come into the country, but we also have to partner more closely with our federal intelligence community to make sure that these students are vetted before they're allowed to get visas to enter our country as well," he concluded.

YouTube job scam text: How to spot it fast

Sun, 22 Mar 2026 14:25:37 -0400

Most of us have received a random text that makes us pause for a second. Maybe it promises a prize. Maybe it claims to be from a delivery company. Lately, another type of message is spreading quickly: the remote job scam.

That is exactly what happened to Peter from New York. He wrote in after receiving a suspicious message about a high-paying YouTube job.

Here is what he sent:

"I received this text today, and I think it's a scam. How can I tell for sure, and what do I do next?"

Below is the message Peter received. At first glance, it looks like a job opportunity. However, when you break it down line by line, several warning signs appear. Let's walk through them.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

FAKE GOOGLE SECURITY PAGE CAN TURN YOUR BROWSER INTO A SPYING TOOL

Red flag 1: A random job offer from a stranger

The text comes from an unknown international phone number starting with +63, which is the country code for the Philippines. Legitimate companies rarely recruit through random text messages from unknown numbers. Real employers usually contact candidates through job platforms, email or professional networks like LinkedIn. When a job appears out of nowhere and promises high pay, it should immediately raise suspicion.

Red flag 2: The pay is wildly unrealistic

The message claims:

$200 to $600 per day
$10,000 or more per month

Those numbers are a major warning sign. Entry-level remote work, such as "boosting video views" or "YouTube optimization," does not pay anywhere near that range. Scammers often use unusually high pay to trigger excitement and urgency. When money sounds too good to be true, it usually is.

Red flag 3: No experience required but huge income

The text says "no experience required, free paid training provided." Scammers often combine high income with zero qualifications. That combination is designed to attract as many people as possible.

Real digital marketing jobs usually require:

SEO or marketing experience
Analytics knowledge
Platform expertise

A company offering $10K per month with no requirements is not realistic.

BE AWARE OF EXTORTION SCAM EMAILS CLAIMING YOUR DATA IS STOLEN

Red flag 4: The job description is vague

The text claims the job is to "increase video exposure and view count."

That description is extremely vague. It does not explain:

What tools you would use
What company you would work for
How the work is measured

Scam job offers often stay vague so they can adapt the story later.

Red flag 5: Pressure to respond immediately

The message says: "5 urgent openings available, first come first served." This is a classic scam tactic. Urgency pushes people to respond quickly before they have time to research the offer. Real companies rarely hire qualified candidates on a first-come basis through text messages.

Red flag 6: The strange reply instructions

The message tells recipients to reply "OK" and then send a numeric code. This step is often used to move the conversation to another messaging platform, such as Telegram or WhatsApp, where scammers continue the scheme. Once the conversation moves there, victims may be asked to:

Complete fake tasks
Send cryptocurrency
Pay deposits for "training"

These scams are often called task scams, where victims complete simple online tasks and may even receive small payments at first before scammers demand larger deposits for payouts that never come. They have exploded worldwide over the past few years.

Red flag 7: No company information

The message never names a real company. It mentions a "manager" named Goldie but provides:

No company website
No corporate email
No office address

Legitimate employers want applicants to know who they are. Scammers avoid details that can be verified.

How these YouTube job scams usually work

Many of these scams follow the same pattern. First, scammers promise easy money for simple tasks lsuch as liking videos or boosting views. At the beginning, they may even send a small payment to build trust. Then things change. Victims are asked to deposit money to unlock larger payouts or complete "premium tasks." Once payments are sent, the scammers disappear. The Federal Trade Commission says Americans lost hundreds of millions of dollars to job scams in recent years, and text message recruitment scams are rising fast.

Google warns about growing job scams and how to verify recruiters

We reached out to Google, and a spokesperson provided the following statement to CyberGuy:

"Google is aware of these job scams happening across the industry and believes they're growing around the world. We strongly encourage any candidate, or individual receiving them, to exercise caution and report it to the platform you received it on as a phishing attempt and/or spam. Our recruiting team focuses on contacting candidates in official capacities and are very clear about who we are, why we're reaching out, and do so from legitimate emails or profiles on job sites. Jobseekers should verify anyone contacting them by email addresses, looking up the person online, such as on LinkedIn, and if something does seem suspicious, flag it to the outlet where it was received. Folks can also vet and report these scams to Google at support.google.com. Our Google careers page reflects all of our current job postings, so candidates should check offers against those. Generally speaking, Google also continues to offer a range of tools and insights that help people automatically spot and avoid scams like these whether they receive them via email, search results, text messages, etc."

FAKE GOOGLE GEMINI AI PUSHES ‘GOOGLE COIN’ CRYPTO SCAM

Ways to stay safe from job text scams

If you receive a message like Peter's, here are some smart steps to take.

1) Never respond to unknown job texts

Replying confirms your number is active. That can lead to more scam messages.

2) Do not click links or download attachments

Scam texts sometimes include links that lead to phishing pages designed to steal login credentials or financial information. Install strong antivirus software on your devices, which can help detect malicious links, block dangerous websites and warn you before you open something risky. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

3) Reduce how easily scammers can find your information

Scammers often harvest phone numbers and personal details from data broker sites and public profiles. Using a data removal service to remove your information from these sites can make it harder for criminals to target you with job scams and other fraud. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

4) Research the company independently

Search for the company name online. Look for an official website, verified social media or job listings.

5) Avoid jobs that ask for money

Legitimate employers never require deposits for training, equipment or task access.

6) Block and report the number

You can report scam texts directly from your phone.

On iPhone:

Open the message, tap the phone number at the top of the screen, scroll down and select Block Contact. You can also tap Report Spam under the message. If the option appears, then click Delete and Report Spam, which sends the report to Apple and deletes the message.

On Samsung Galaxy phones:

Steps may vary slightly depending on your Samsung model and software version.

Open the Messages app and select the conversation. Tap the three-dot menu in the upper right corner, then tap Block and report spam, then confirm by tapping Yes. This blocks the number and helps Samsung identify and filter future scam messages.

7) Report it to the FTC

In the United States, you can report scams at reportfraud.ftc.gov. Reports help investigators track large scam networks.

So what should Peter do next?

The safest move is simple. Peter should not reply to the message. Instead, he should block the number and report it as spam. If he has already responded, he should stop communicating immediately and avoid clicking any links or sending money. If he shared personal information such as his phone number, email address or financial details, it may also be wise to monitor his accounts closely and consider signing up for an identity theft protection service. The good news is that spotting the red flags early can prevent a much bigger problem later. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.

Kurt's key takeaways

Scammers constantly adapt their tactics. Today, it might be a fake delivery notice. Tomorrow, it might be a high-paying remote job. The message Peter received hits many of the classic warning signs: unrealistic pay, vague job duties, urgent language and a request to reply quickly. When a stranger promises easy money through a random text message, pause for a moment. That short pause can save you a lot of trouble.

Now I am curious. If a text suddenly promised you $10,000 a month for simple online tasks, would you recognize the warning signs before replying? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Fake Google security page can turn your browser into a spying tool

Sat, 21 Mar 2026 10:24:16 -0400

A new phishing scam is tricking people into installing malware by pretending to be a Google security check. The page looks convincing and tells you that your Google account needs additional protection. It walks you through a simple setup process that appears to strengthen your security and protect your devices.

If you follow those steps, you may end up installing what looks like a harmless security tool. In reality, security researchers say the page installs a malicious web app that can spy on your device. It can steal login verification codes, watch what you copy and paste, track your location and quietly send internet traffic through your browser.

The most troubling part is that nothing is technically hacked. Instead of exploiting a software flaw, attackers simply trick you into granting the permissions they need. Once that happens, your own browser can start working for them without you realizing it.

THE NO. 1 GOOGLE SEARCH SCAM EVERYONE FALLS FOR

All about the fake Google security page

Security researchers at Malwarebytes, a cybersecurity company, recently discovered a phishing website that pretends to be part of Google's account protection system. The site uses the domain google-prism[.]com and presents what looks like a legitimate security page asking you to complete a short verification process.

Visitors are told they should complete a four-step setup to improve their account protection. The page explains that these steps will help secure your Google account and protect your devices from threats. During the process, the site asks you to approve several permissions and install what it claims is a security tool.

The tool it installs is actually a Progressive Web App. This type of application runs through your browser but behaves like a regular app on your computer. It opens in its own window, can send notifications and can run tasks in the background.

Once installed, the malicious web app can collect contacts, read information you copy to your clipboard, track GPS location data and attempt to capture one-time login codes sent to your phone. These codes are commonly used when you sign in to accounts that use two-factor authentication.

The fake security page may also offer an Android companion app described as a "critical security update." Researchers found that this app requests 33 permissions, including access to text messages, call logs, contacts, microphone recordings and accessibility features.

Those permissions give attackers the ability to read messages, capture keystrokes, monitor notifications and maintain control over parts of the device. Even if the Android app is never installed, the web app alone can still collect sensitive information and quietly run activity through your browser.

How it works and why it matters to you

The scam works because it looks like something you would normally trust. Many people expect security alerts from the services they use, especially when it comes to protecting email or cloud accounts. Attackers take advantage of that trust by presenting the fake page as a helpful security feature. When you approve the permissions and install the web app, you are essentially giving the attackers access to certain parts of your device. One of the main things they try to capture is one-time passwords. These are the short codes you receive when logging in to accounts that require two-factor authentication.

If attackers manage to capture those codes while also knowing your password, they may be able to break into your accounts. That could include your email, financial services or cryptocurrency wallets, depending on which accounts you use. The malware also watches what you copy and paste. Many people copy cryptocurrency wallet addresses before sending digital currency, and those addresses can be valuable to criminals. The malicious app can collect that information and send it back to the attackers.

Another feature allows attackers to route internet requests through your browser. This means they can run online activity through your device so it appears to come from your home network. The app can also send notifications that look like security alerts or system warnings. When you click those notifications, the app opens again and gains another opportunity to capture information such as login codes or clipboard data.

Google says built-in protections can block the threat

After learning about the phishing campaign, we asked Google about the malicious site and whether users are protected.

A Google spokesperson told CyberGuy that several built-in security systems are designed to stop threats like this before they cause harm.

"We can confirm that Safe Browsing in Chrome warns any user who tries to visit this site. Chrome also shows a confirmation dialog whenever anyone attempts to download an APK. Android users are automatically protected against known versions of this malware by Google Play Protect, which is on by default on Android devices with Google Play Services."

Google also said that its current monitoring shows no apps containing this malware are available on the Google Play Store.

ANDROID MALWARE HIDDEN IN FAKE ANTIVIRUS APP

Even if malicious apps are installed from outside official stores, Google says Android devices still have an additional layer of protection. Google Play Protect can warn users or block apps known to exhibit malicious behavior, including apps installed from third-party sources.

However, it is important to note that Google Play Protect may not be enough. Historically, it isn't 100% foolproof at removing all known malware from Android devices, which is why we recommend additional strong antivirus software to detect malicious downloads, suspicious browser activity and phishing attempts before they cause serious damage. It acts as an early warning system that helps block dangerous apps and websites before they gain access to your device or your data.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

7 ways to protect yourself from fake security pages

If you ever come across a suspicious "security check" like this, a few simple habits can help you avoid falling into the trap and protect your accounts and devices.

1) Never run security checks from random websites

Google does not ask you to install security tools through pop-ups or unfamiliar websites. If a page claims your account needs a security check, close the tab and go directly to Google's official account page by typing the address yourself. Visiting the real account settings page prevents attackers from redirecting you to a fake site.

2) Check website addresses carefully before trusting them

Phishing pages often use domains that look similar to real companies. Attackers rely on people clicking quickly without paying attention to the address bar. If the website address is not an official Google domain, do not trust it. Even a small change in the spelling can indicate a fake site designed to steal information.

3) Remove suspicious web apps from your browser

If you installed an app through a website and it opens like a standalone program, check your browser's installed apps or extensions list. Remove anything you do not recognize or do not remember installing. Uninstalling the app immediately prevents it from collecting more information or running commands through your browser.

4) Check your Android phone for unfamiliar apps

Researchers say the malicious Android app may appear as "Security Check" or "System Service." If you see unfamiliar apps with these names, review the permissions they request and remove them if they look suspicious. Apps asking for extensive permissions such as SMS access, accessibility features and microphone control should always be investigated.

5) Use a password manager for your accounts

A password manager helps you create and store strong, unique passwords for every account you use online. If attackers obtain one password, they will not automatically gain access to other accounts. Password managers can also help prevent you from entering credentials on fake sites because they usually refuse to auto-fill on lookalike domains.

Check out the best expert-reviewed password managers of 2026 at Cyberguy.com

6) Enable two-factor authentication whenever possible

Two-factor authentication (2FA) adds an extra layer of protection beyond your password. Even though this attack tries to capture SMS verification codes, many services allow you to use authenticator apps instead. These apps generate login codes on your device and make it much harder for attackers to intercept them.

7) Monitor your accounts for unusual activity

If you think you interacted with a suspicious security page, keep a close eye on your accounts over the following days. Watch for login alerts, password reset emails or transactions you do not recognize. Acting quickly after suspicious activity can help prevent attackers from gaining full control of your accounts.

Pro tip: Reduce how easily scammers can target you

Scammers often gather personal details from data broker sites to make phishing messages look more convincing. A data removal service can help remove your personal information from many of those databases, reducing the amount of information criminals can use to impersonate companies or craft targeted scams.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

Kurt's key takeaway

Attackers are changing tactics. Instead of breaking into systems through technical flaws, they are relying on convincing security messages that persuade people to install tools themselves. All of us rely on familiar brands like Google when making security decisions, and attackers know that. Preventing these scams will likely require faster action against impersonation sites and stronger safeguards around what web apps are allowed to do once installed.

Should companies like Google be required to automatically block lookalike domains that pretend to run official security checks before people fall for them? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

FBI warns Russian hackers targeting Americans on Signal; thousands of accounts compromised

Fri, 20 Mar 2026 17:26:54 -0400

Russian intelligence-linked hackers are targeting users of popular messaging apps like Signal, gaining access to private messages and impersonating victims in a sweeping global campaign, according to a joint warning from the FBI and U.S. cybersecurity officials.

The FBI and the Cybersecurity and Infrastructure Security Agency said the operation has already compromised "thousands of individual" commercial messaging app (CMA) accounts, allowing attackers to read messages, access contact lists and send messages posing as the victim.

FBI Director Kash Patel warned the campaign is targeting individuals of "high intelligence value," including U.S. officials, military personnel and journalists, and has already resulted in widespread account compromises.

Patel warned the attackers could exploit compromised accounts to impersonate victims and target others using a trusted identity.

MILLIONS OF AI CHAT MESSAGES EXPOSED IN APP DATA LEAK

"This global campaign has resulted in unauthorized access to thousands of individual CMA accounts," the agencies said in a joint public service announcement.

"After compromising an account, malicious actors can view the victims’ messages and contact lists, send messages, and conduct additional phishing against other CMA accounts."

Officials said the activity is linked to actors associated with Russian intelligence services.

MALICIOUS BROWSER EXTENSIONS HIT 4.3M USERS

"RIS actors have compromised individual CMA accounts, but not CMAs’ encryption or the applications themselves," the FBI and CISA said.

The agencies emphasized the activity does not involve breaking Signal’s encryption. Instead, it relies on tricking users through phishing schemes.

"Phishing remains one of the most unsophisticated, yet effective means of cyber compromise, often rendering other protections irrelevant, including end-to-end encryption," the agencies said.

SPOTIFY VOTING SCAM EXPOSED

According to officials, the hackers often pose as messaging app support or send fake security alerts designed to create urgency, prompting users to click malicious links or share verification codes or PINs.

If a user complies, attackers can link their own device to the account or take it over entirely, allowing them to monitor private conversations and impersonate the victim.

Patel cautioned that the scheme allows cybercriminals to "conduct additional phishing."

"After gaining access, the actors can view messages and contact lists, send messages as the victim and conduct additional phishing from a trusted identity," Patel said.

The PSA said users who believe they may have been targeted should report incidents to the FBI’s Internet Crime Complaint Center.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

The link to "cyber actors" associated with Russian Intelligence was not made more specific in the agencies' joint PSA.

Signal did not immediately respond to Fox News Digital's request for comment. The FBI did not provide further comment to Fox News Digital.

Hospital cyberattacks threaten patient safety

Fri, 20 Mar 2026 12:57:36 -0400

If you watched a recent episode of "The Pitt" on Max, a streaming medical drama about life inside a high-pressure emergency department, you saw how quickly a hospital can spiral during a cyberattack. It made for gripping television. But in Mississippi, it was not a script. It was real life.

After a ransomware attack hit the University of Mississippi Medical Center, clinics across the state closed. Elective procedures were canceled. Phone systems and emails went down. Emergency care continued, but access to electronic medical records was disrupted.

When a hospital's systems fail, the impact goes far beyond IT. It affects real people waiting for care. That is why hospital cyberattacks are no longer just a tech problem. They are a public safety issue.

Sign up for my FREE CyberGuy Report

FIGURE DATA BREACH EXPOSES NEARLY 1M ACCOUNTS

Why hospitals have become prime targets

Hospitals cannot afford downtime. When systems fail, patient care is immediately affected, and the pressure to restore operations is intense. Ricardo Amper, founder and CEO of Incode Technologies, a digital identity verification and biometric authentication company, explains the reality.

"Hospitals are in a uniquely difficult position. If systems go down, patient care is immediately affected. That creates real pressure to restore operations fast, which is why ransomware groups often target healthcare." He points to another major factor driving hospital cyberattacks. "Hospitals hold some of the most sensitive data that exists, including medical records, identity information and insurance details. That combination of urgency and high-value data makes them very attractive targets."

Healthcare systems also rely on vendors and service providers. One weak link can open the door. "In healthcare, you're only as secure as the entire ecosystem around you," Amper said.

How AI-powered impersonation is changing the game

Many people imagine hackers breaking through firewalls. That still happens. But today, attackers often target people instead of systems. "What we're seeing more and more is that attacks aren't always about breaking into systems, they're about tricking people," Amper said.

Artificial intelligence (AI) has made impersonation easier and scalable. Criminals can clone voices, generate convincing emails or create deepfake videos that appear to come from a trusted doctor, vendor or IT administrator. "AI doesn't replace social engineering, it supercharges it."

In practical terms, that might mean an employee receives what looks like a legitimate request to reset a password or approve a login. One click can open the door. "An employee is tricked into giving up credentials or approving a fraudulent authentication request. The attacker logs in as a legitimate user, and from there, they move quietly through internal systems," Amper explained. Because the activity appears to come from a real employee, it may go undetected until significant damage is done.

5 MYTHS ABOUT IDENTITY THEFT THAT PUT YOUR DATA AT RISK

Why hospitals are especially vulnerable to cyberattacks

Inside a hospital, speed matters. Decisions happen quickly, and staff move from one urgent task to the next. That constant pressure creates opportunities for attackers who rely on deception. "Healthcare professionals are focused on patients, not cybersecurity. They work in high-pressure environments where speed matters. That urgency can make it easier for attackers to exploit trust or distraction," Amper said.

Many hospitals also operate with legacy systems layered over time. Security was often added after the fact rather than built in from the start. That complexity increases risk. He also challenges how leaders think about the problem. "One misconception is thinking of cybersecurity as just an IT problem," Amper said.

Today's hospitals depend on digital systems for intake, diagnostics and billing. When those systems fail, care delivery suffers. "Cybersecurity today is fundamentally about operational resilience. It's about keeping the hospital running safely and continuously."

What happens to your data after a breach

When a hospital is breached, the exposed data often goes beyond a credit card number. "Breaches can expose medical histories, Social Security numbers, insurance information, billing details and contact data," Amper said.

That combination is powerful. Criminals can use it for identity fraud, insurance fraud and highly targeted scams. Unlike a credit card, a medical identity cannot simply be replaced. "Stolen medical data can't simply be canceled and replaced. That makes it especially valuable and long-lasting in criminal markets."

The impact may not show up right away. "The impact isn't always immediate; it can surface months or even years later."

How hospitals can strengthen defenses

Identity now sits at the center of cybersecurity. "Identity has become the front line of cybersecurity. If an attacker can successfully impersonate a trusted user, many traditional defenses can be bypassed," Amper said. Stronger identity verification, layered authentication and systems that can detect impersonation or deepfakes are becoming essential. The more certain a hospital is about who is accessing its systems, the harder it becomes for attackers to move quietly.

How to check if your information is on the dark web

After a hospital breach, many patients worry about whether their data has been sold or shared. One simple step is checking whether your email address appears in known data breaches. You can visit haveibeenpwned.com and enter your email address into the search bar. The site will show whether your information has appeared in past breaches tied to that email. If your email appears in a breach, take action immediately. Change passwords for affected accounts and make sure each account uses a unique password.

What patients should do after a hospital breach

If you receive a breach notification letter, do not panic. But do act. Amper offers clear guidance. "First, stay calm but take it seriously. Read the notice carefully and enroll in any credit or identity monitoring services offered."

Then take practical steps right away:

Review insurance statements for unfamiliar claims
Check medical records for incorrect diagnoses or procedures
Monitor your credit reports
Consider placing a free credit freeze with the major credit bureaus if your Social Security number was exposed
Enable two-factor authentication (2FA) on email, financial and healthcare accounts wherever it is available
Be cautious of emails or calls referencing the breach
Reducing the amount of personal information available on data broker sites with a data removal service can also limit how easily scammers craft convincing follow-up attacks using your real details. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

"If something feels off, contact the hospital directly using official contact information. Don't rely on links or numbers provided in unexpected messages." He adds one final reminder. "Take your medical identity as seriously as your financial identity. Monitor your records, question anything unfamiliar and stay alert."

Protect your accounts from long-term damage

Even if everything appears normal right now, take steps to secure your accounts. Credential leaks often surface weeks or months later.

Consider identity theft protection. Identity monitoring services can alert you if criminals try to open accounts in your name or misuse your personal information. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com
Stop reusing passwords immediately. If attackers gain access to one working login, they often test it across dozens of websites automatically.
Change reused passwords first, starting with email, financial and cloud accounts. Each account should have its own unique password.
Consider using a password manager to generate and store strong passwords securely. You can also use breach scanning tools that alert you if your email address or passwords appear in future leaks. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.
Install strong antivirus software on your devices to help detect malware, phishing links and credential-stealing threats that could target you after a breach. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

Taking these steps now can prevent a hospital breach from turning into long-term identity damage later.

Kurt's key takeaways

When hospital cyberattacks disrupt care, the consequences ripple across entire communities. Appointments get canceled. Surgeries are delayed. Families worry. This is not only about stolen records. It is about trust in the healthcare system. Technology has transformed medicine. It has also created new risks. The challenge now is building resilience into every layer of care. Because the next cyberattack will not feel like a TV episode. It will feel personal.

And that raises an uncomfortable question. If your local hospital went offline tomorrow, would you trust that your medical identity and your care are truly protected? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report