
A guide to recognizing and avoiding phishing scams
A guide to identifying phishing tactics, securing digital accounts, and handling suspicious communications based on consumer guidance.
Our coverage: 8 reports since October 8, 2026. Latest: A guide to recognizing and avoiding phishing scams, October 13, 2026.

A guide to identifying phishing tactics, securing digital accounts, and handling suspicious communications based on consumer guidance.

The fine is the largest ever issued by Norway's Data Protection Authority.

Cisco Talos says AI-driven agents attacked Hugging Face, DSEWiki and RubyGems, and warns that attackers could soon shift from loud volume-based campaigns to stealthy persistence-focused operations.

A joint FBI and US Secret Service advisory says the credential-based campaign against FortiGate firewalls and SSL VPN gateways involves attacker-created accounts and deleted or reset original credentials.

Prosecutors in Brooklyn allege Zohar Pinhasi's recovery firm secretly paid ransomware attackers while billing clients far more; he is presumed innocent.

Prosecutors allege Zohar Pinhasi's firm billed clients more than $19 million while facilitating more than $8 million in ransom payments; he has pleaded not guilty.

Days after Dutch police arrested a man once linked to the ShinyHunters handle Umbreon, the group claimed it hit the FBI's own jobs site and turned on the ransomware gang Cl0p, a pattern researchers say can follow arrests of cybercrime group members.

Zohar Pinhasi faces federal fraud charges for allegedly faking a decryption business while quietly funding the same ransomware gangs he claimed to beat.