Scam-style extortion is rising: attackers post fake data breach claims on leak sites with no real intrusion. Here's how the bluff works and how to verify before you panic.
Read more: Fake Data Breach Claims: Why Scam-Style Extortion Is Surging in 2026
A malicious Google Ad leads to a real chatgpt.com link, where a fake "Codex" install command hides a base64 payload that drops the MacSync infostealer. Here's the full chain.
Read more: How a Real ChatGPT Link Delivers Phishing via a Fake Codex InstallScam-style extortion is rising: attackers post fake data breach claims on leak sites with no real intrusion. Here's how the bluff works and how to verify before you panic.
Read more: Fake Data Breach Claims: Why Scam-Style Extortion Is Surging in 2026
The Vatican's Click to Pray app leaked the personal data of 700,000 users for over six months through a basic IDOR flaw. Here's how sequential user IDs and zero auth checks did the damage.
Read more: Click to Pray Exposes 700k Users: Inside a Textbook IDOR Failure
A firmware bug silently weakened seed generation on Coldcard hardware wallets, letting an attacker recreate and drain vulnerable wallets at scale. Here's how the entropy failure worked.
Read more: A Hard Lesson in Randomness: Understanding the Coldcard Entropy Incident
How multi-accounting detection works in iGaming and Gambling, why it matters beyond the financial hit, and how gnoming and chip-dumping schemes actually get caught.
Read more: Multi-Accounting Detection: Stopping Gnoming and Chip-Dumping
Gaming fraud prevention goes beyond iGaming: in-game currency abuse, account trading, and esports match-fixing all need a different detection approach. Here's how they compare.
Read more: Gaming Fraud Prevention: How It Differs From iGaming Across Platforms