Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

[New Threat Trend Data] When Bad Actors Use Reality Against Us

“Is it real?” has become a common question across our digital lives thanks to the rise of AI-generated content. A fair one, with deepfakes and AI-produced imagery flooding nearly every channel we use daily. A skeptical eye is a must, but our most recent Phishing Threat Trends Report reveals why that might not even be enough.

Why Emulators Fail Device Checks: What Security Teams Should Know

For anti-fraud systems, the device can become a trust signal before a login, payment, or other sensitive action takes place. Google says apps using Play Integrity features see 80% lower unauthorised usage on average than other apps, which helps explain why device checks have moved well beyond simple emulator detection. An emulator does not fail because of one obvious property. Modern integrity systems look at several layers at once, including signals tied to hardware-backed trust that a standard emulator cannot reproduce in the same way as a genuine certified Android device.

How a Vishing Attack Really Works - And Where Your Brand Gets Exposed

Voice-based fraud now accounts for billions in annual losses, and the FBI has flagged AI-assisted voice fraud as one of the fastest-growing financial crime vectors in the country. Your email security didn’t catch it. Your DMARC configuration didn’t fire. Neither did your anti-phishing stack. That’s not a gap in your tools. It’s a gap in your threat model. How does vishing work?

ClickFix: How a fake CAPTCHA becomes a malware delivery mechanism

CAPTCHAs are designed to distinguish humans from automated systems. A user types distorted letters or clicks a few crosswalks, and in doing so proves there is a human behind the keyboard rather than a script. The whole idea rests on one assumption: A human, unlike a bot, will pause and think for a moment before acting. ClickFix takes that assumption and turns it into the attack itself. The fake verification screen does not ask the user to prove they are human by thinking.

Staying Private and Safe on Random Chat Sites

Talking to a stranger online has a pull that social media lost long ago. There is no feed and no follower count, just a new person and an empty chat box. That openness is also the risk. When you know nothing about the person on the other side, ideally they know nothing about you either, and keeping it that way is most of what staying safe comes down to.

Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters

Phishing attacks are increasingly using legitimate calendar invites to bypass security filters, according to researchers at Netcraft. Attackers send ICS calendar invite files that plant phishing lures directly on users’ calendars, often under the guise of work-related meetings.

5 AI scams that look legitimate in 2026 and the clues most people miss

Top Tips is a weekly column where we explore practical ways to make technology work better for you. From improving productivity and strengthening digital security to discovering smarter ways to use everyday tools, we share simple, actionable insights to help you navigate the ever-evolving world of technology with confidence. AI is making online scams harder to recognize. From fake government announcements to convincing video calls, fraudsters are using synthetic content to exploit trust.

Job Seekers Who Use AI for Applications Need to be on the Lookout for Scams

Researchers at Malwarebytes warn that job seekers are increasingly vulnerable to scams as AI enables them to take a “spray-and-pray” approach to job applications. Users who have automated their job application process are more likely to forget where they’ve applied, and an unsolicited message from a recruiter may seem more plausible. Job seekers can also be more willing to overlook or ignore red flags associated with scams, since they’re anxious to avoid missing an opportunity.

Report: 9 out of 10 Americans Have Been Targeted by Scams

91% of Americans have been targeted by a scam, and 17% have fallen victim to one, according to a new survey by Consumer Reports. Notably, 20% of respondents said the latest scam they encountered was personalized, indicating that attackers are increasingly using automation and public or leaked information to craft targeted phishing attacks.