Help deskLet’s talk
Alerts

What to act on, this week.

Scams, breaches, outages, deadlines and updates you should not put off. Each one says who is affected and what to do, in order.

40 activeRSS feedAll stories
AlertScams · Phone calls

Mississippi sheriff warns residents about scam phone calls

Act this week
What happenedThe Attala County Sheriff's Office warned the public about scam calls reaching local residents.
Who is affectedAnyone with a phone in Attala County, Mississippi, especially older adults and people who pick up calls from unknown numbers.
  1. 1Hang up if a caller demands money or personal details.
  2. 2Look up the official number yourself and call back to check.
  3. 3Never pay with gift cards, wire transfers or cash apps on a caller's request.
  4. 4Report the call to your local sheriff's office and warn family.
Read the full story
AlertTexas · Phone scam

Fake jury duty calls spoof a real Texas sheriff's phone number

Act this week
What happenedThe Howard County Sheriff's Office warned of an active scam where callers pose as officers and falsely say people missed jury duty.
Who is affectedResidents of Howard County, Texas, and anyone who gets phone calls from people claiming to be law enforcement.
  1. 1Hang up right away if a caller says you missed jury duty.
  2. 2Do not give personal or financial information over the phone.
  3. 3Do not trust caller ID, since scammers can make a real police number appear.
  4. 4If you are worried, look up the office's number yourself and call it directly.
Read the full story
AlertScams · PayPal

Got a fake PayPal message? Skip its link and check your account yourself

Act this week
What happenedFake messages that pose as PayPal, some calling themselves a security report or case, try to scare people into tapping a link and giving up their login.
Who is affectedAnyone with a PayPal account who gets an email or text, on iPhone, Android, tablet or computer.
  1. 1Do not tap any link, button or phone number in the message.
  2. 2Open the PayPal app or type the PayPal address yourself and check your activity.
  3. 3Report the message: email to APWG, text to 7726, or either to ReportFraud.ftc.gov.
  4. 4Delete it, and turn on multi-factor sign-in for PayPal, your email and your bank.
Read the full story
AlertScams · Payments

Fake QR stickers and loan offers are draining bank accounts

Act this week
What happenedPolice in Bhubaneswar, India, say cyber fraud is rising through fake QR stickers, loan ads, cashback offers, traffic fine texts and gas booking calls.
Who is affectedAnyone who pays by QR code or UPI-style apps, shoppers at small stores, borrowers, vehicle owners and households that book gas cylinders.
  1. 1Check that a shop's QR code is the original and not a sticker pasted over it before you scan.
  2. 2Never share OTPs, PINs or banking details with anyone, even if they sound official.
  3. 3Do not click links in messages about loans, cashback, fines or gas bookings from unknown senders.
  4. 4If you are scammed, call the national helpline 1930 or file a report on the official cybercrime portal right away.
Read the full story
AlertHNB · Scam warning

Sri Lankan bank warns of fake pages and calls that copy trusted names

Act this week
What happenedHNB PLC warned the public about a rise in impersonation scams where fraudsters pose as trusted financial institutions or organisations to get personal and financial details.
Who is affectedBank customers, job seekers and anyone who uses social media, websites, phone calls or messaging apps, especially people dealing with banks and known brands.
  1. 1Never share your OTP, password, PIN or other private details, no matter who is asking.
  2. 2Be wary of urgent messages, surprise prizes, giveaways and job offers using a known name.
  3. 3Check the source yourself through the official website or phone number before acting.
  4. 4Read the scam guidance on your bank's official site and report anything suspicious.
Read the full story
AlertMoney · Tax scams

How to spot a tax scam before you send money or personal details

Act this week
What happenedA tax law firm is warning that tax scams in 2026 look more convincing, using spoofed phone numbers, fake websites and AI-generated voices.
Who is affectedIndividual taxpayers and business owners, especially those who handle payroll, vendor payments and online tax accounts.
  1. 1End any call that demands payment right away, then check the claim through an IRS contact you confirmed yourself.
  2. 2Do not click links, scan QR codes or open attachments in unexpected emails or texts.
  3. 3Avoid any preparer who will not sign your return or give a valid Preparer Tax Identification Number.
  4. 4Businesses should turn on multi-factor sign-in and confirm bank detail changes through a second channel.
Read the full story
AlertRetail · Fraud

Scammers are targeting store refunds and gift cards before the holidays

Act this week
What happenedSecurity firm Flashpoint reported underground activity around refund abuse, gift card fraud, fake retailer support and access to compromised online stores.
Who is affectedOnline and brick-and-mortar retailers, their customer support and payments teams, and shoppers who deal with support channels.
  1. 1Set a clear verification step for every refund, replacement and account change.
  2. 2Make sure agents can see if a refund or replacement was already issued for the same order.
  3. 3Remove old admin accounts, turn on multifactor login, and check for unexpected changes to your checkout page.
  4. 4Publish your official support channels and give customers a way to report fake accounts.
Read the full story
AlertScams · Fake delivery

A $1.95 fake delivery fee text can hand over your card number

Act this week
What happenedScammers are sending fake package delivery texts that link to look-alike carrier websites built to steal card numbers and personal details.
Who is affectedAnyone waiting on online orders, especially holiday shoppers, who might get texts posing as USPS, FedEx, UPS or DHL.
  1. 1Do not tap the link in an unexpected delivery text.
  2. 2Check your order in the store's account or type the carrier's official web address yourself.
  3. 3If you entered card details, call your bank right away and ask about a replacement card.
  4. 4Report the scam to the Federal Trade Commission.
Read the full story
AlertScams · Deepfakes

Scammers use fake celebrity videos to push bogus investments

Act this week
What happenedScammers are using AI-made videos, fake news articles and planted reviews of well-known people to push fake investment platforms.
Who is affectedAnyone who sees investment ads on social media, especially in Australia, where the scam ads are heavily concentrated.
  1. 1Treat any ad where a celebrity or politician promotes an investment as suspect.
  2. 2Do not rely on a web search alone, since scammers can plant fake reviews and articles.
  3. 3Check the company on your country's official financial regulator website before investing.
  4. 4Hang up on unexpected broker calls and never send money to someone who contacted you first.
Read the full story
AlertIndia · Scam alert

Delhi Police warn of Diwali scams: fake gifts, fake shops, fake couriers

Act this week
What happenedDelhi Police issued a cyber-safety advisory before Diwali about fraudulent gift messages, fake shopping sites, malicious APK files and courier scams.
Who is affectedOnline shoppers and digital payment users, including UPI and net banking users, WhatsApp users and anyone expecting a delivery.
  1. 1Do not tap links or open APK files sent as gifts or greeting cards, even from people you know.
  2. 2Check the website address carefully and shop through official apps, not unfamiliar sites with huge discounts.
  3. 3Never share your UPI PIN or bank one-time password, and remember you do not need to scan a QR code to receive money.
  4. 4If scammed, call your bank to block cards and net banking, then call 1930 or file a report at cybercrime.gov.in.
Read the full story
AlertiPhone · Privacy

Five iPhone settings to change now so a thief or snoop gets nothing

Act this week
What happenedEngadget lists five iPhone settings that many people overlook and that limit what others can see or do with your phone.
Who is affectedAnyone with an iPhone, especially people who carry payment apps, lend their phone to others, or worry about theft.
  1. 1Go to Settings, Notifications, Show Previews, and choose When Unlocked.
  2. 2In Face ID & Passcode, under Allow Access When Locked, turn off Control Center.
  3. 3Open Privacy & Security, then Safety Check, and remove access you no longer need.
  4. 4Press and hold payment or message apps and choose Require Face ID.
Read the full story
AlertOpenAI · Usage limits

OpenAI to put ChatGPT and Codex on one shared usage limit

Act this week
What happenedOpenAI says ChatGPT and Codex will share one usage allowance, tracked in tokens, on its Plus, Pro and Business plans from December 2026.
Who is affectedPaying users of ChatGPT Plus, Pro and Business, especially people who also use Codex for coding or run complex tasks.
  1. 1Check which ChatGPT plan you or your team pays for.
  2. 2Note how often you use advanced models or long, complex tasks.
  3. 3Watch for OpenAI's announcement of exact allowances and the start date.
  4. 4Plan big jobs around reset times once the limits are published.
Read the full story
AlertTennessee · Phone scam

Fake police callers in Cookeville demand money to clear warrants

Act this week
What happenedCookeville police say several residents reported calls from people posing as officers who demand money to settle a warrant.
Who is affectedCookeville residents who get phone calls, especially older people and others who may be more vulnerable to scams.
  1. 1Hang up if a caller says you owe money for a warrant.
  2. 2Do not share personal or financial information, send money or buy gift cards.
  3. 3Call Cookeville police directly at 931-526-2125 to verify.
  4. 4Share the warning with family members who may be vulnerable.
Read the full story
AlertScams · Work email

That 'phishing training' email could be a real test or a scam

Act this week
What happenedMessages about phishing training can be real company tests or scam emails that copy the idea to steal passwords.
Who is affectedAnyone with a work, school or club email, especially staff at organizations that use tools like Microsoft Defender for Office 365.
  1. 1Do not click the link or type a password or one-time code on a page you reached from the message.
  2. 2Confirm the message with your IT or security team using a number or address you already had.
  3. 3Open your organization's training portal by typing its address or using your bookmark.
  4. 4If you already clicked or typed a password, change it, turn on two-step sign-in, run a security scan and tell IT.
Read the full story
AlertScams · Phone calls

Scammers are posing as a Texas police chief on phone calls

Act this week
What happenedThe Gainesville Police Department in Texas reported calls from people pretending to be Police Chief Kevin Phillips.
Who is affectedResidents of Gainesville, Texas, who may get calls from someone claiming to be the chief or another officer.
  1. 1Hang up if a caller says they are the police chief or any officer.
  2. 2Do not share personal or payment details on that call.
  3. 3Call the department directly at (940) 668-7777 to check.
  4. 4Tell family and neighbors, especially older relatives, about the scam.
Read the full story
AlertMonaco · Phone scams

Scammers are faking Monaco police phone calls using the real number

Act this week
What happenedMonaco police warned that scammers are making calls that display the force's official phone number.
Who is affectedResidents of Monaco who receive phone calls from someone claiming to be police.
  1. 1Do not trust a call just because the police number shows on your screen.
  2. 2Never give out bank details, passwords or codes to a caller.
  3. 3Hang up and call the police back using a number you look up yourself.
  4. 4Tell older relatives about this scam and report suspicious calls to the police.
Read the full story
AlertScams · Phone fraud

Scammers fake consulate calls to drain victims' bank accounts

Act this week
What happenedThe Atlanta consulate warned of a surge in scam calls that spoof its real main number and pose as consulate staff, police and financial regulators.
Who is affectedEthnic Koreans in the Southeastern US, especially anyone with bank accounts, a passport or a US driver's license that scammers could pressure them over.
  1. 1Hang up and call the consulate or agency back using a number you find yourself.
  2. 2Never enter your name or ID number on a site that does not end in .go.kr.
  3. 3Do not move money to a 'safe account' or deposit cash at a crypto ATM.
  4. 4Tell family right away, even if the caller demands secrecy, and contact your bank if you sent money.
Read the full story
AlertScams · Gift cards

Fake free gift cards from big brands never pay out, report finds

Act this week
What happenedScammers run fake gift card giveaways that push people through a fake verification step into paid subscriptions and offers, and no reward is ever given.
Who is affectedAnyone on social media who sees ads for free gift cards from brands like PlayStation, Sephora, SHEIN, Walmart and Amazon, plus the brands being imitated.
  1. 1Skip any ad offering a free gift card, especially one using a celebrity.
  2. 2Never enter your phone number or a text message PIN to unlock a reward.
  3. 3Check your mobile bill for charges you do not recognize and ask your carrier to cancel them.
  4. 4Report the ad to the social platform and warn family members who use it.
Read the full story
AlertSamsung · Phone bugs

Samsung's big Galaxy update is knocking phones offline

Act this week
What happenedAfter Samsung's One UI 9 update, many Galaxy owners report broken Wi-Fi, mobile data and, in some cases, Wi-Fi calling or SIM detection.
Who is affectedOwners of Galaxy phones such as the Z Fold 7, Flip 7, S24 series, A55, A36 and A56 who installed One UI 9.
  1. 1Restart your phone or toggle airplane mode when the connection drops.
  2. 2Check if the problem is limited to one Wi-Fi band or one network.
  3. 3Report the issue to Samsung or on its community forum.
  4. 4Install Samsung's November update when it arrives and test your connection.
Read the full story
AlertScams · CAPTCHA

Fake CAPTCHA tests are being used to steal your data

Act this week
What happenedScammers are using fake CAPTCHA tests, the puzzles that prove you are human, to steal people's data.
Who is affectedAnyone who browses the web, on phones or computers, and sees these tests on websites every day.
  1. 1Treat any CAPTCHA that asks for more than a simple puzzle or click as suspicious.
  2. 2Never enter passwords, card numbers or personal details into a CAPTCHA box.
  3. 3Close the tab if the test feels odd, and go to the site again by typing its address.
  4. 4If you already followed odd instructions, change your passwords and watch your accounts.
Read the full story
AlertTikTok · Teen safety

Report says TikTok helps adult-site stars reach teenage girls

Act this week
What happenedResearchers from two campaign groups say TikTok lets OnlyFans performers market adult content through coded, family-friendly lifestyle videos.
Who is affectedTeen and young TikTok users and their parents, plus brands that work with influencers who also sell adult content.
  1. 1Ask your teen which creators they follow and what they like about them.
  2. 2Explain that most OnlyFans performers earn about $1,000 a year, not millions.
  3. 3Check the TikTok teen safety and Family Pairing settings on your child's account.
  4. 4Report posts that seem to promote adult content using the in-app report button.
Read the full story
AlertAI shopping · Security

Never give your shopping assistant the code texted to you

Act this week
What happenedA security article warns that AI shopping agents should not receive the one-time codes retailers send to confirm a buyer's identity.
Who is affectedAnyone who shops online or lets AI assistants buy for them, and the retailers and payment companies building these tools.
  1. 1Never paste or read a security code to an AI assistant, chatbot or anyone who asks.
  2. 2Approve purchases yourself on your own phone, after checking the item, price and merchant.
  3. 3Set spending limits and allowed stores for any AI agent you let buy for you.
  4. 4Review and remove the permissions you gave an AI shopping tool if you no longer use it.
Read the full story
AlertScams · Food delivery

Fake restaurant ordering sites are stealing card details and bank codes

Act this week
What happenedCriminals built 820 look-alike restaurant ordering sites that show real menus but swap in a fake payment form that collects card details and bank text codes.
Who is affectedAnyone ordering online from big US chains such as Jersey Mike's, Jimmy John's, Firehouse Subs, Chipotle and Dave's Hot Chicken, especially people who click search ads.
  1. 1Skip search ads and type the restaurant's web address yourself, or use its official app.
  2. 2Check the address before paying and be wary of odd spellings or a .delivery ending.
  3. 3Never type a bank text code into a checkout page unless you know you are paying that store.
  4. 4If you entered details on a suspicious site, call your bank right away and ask to freeze the card.
Read the full story
AlertAARP · Scam alerts

AARP shares fraud and scam alerts for Indiana residents

Act this week
What happenedAARP published a Hoosier Scam Report, a page of fraud and scam alerts for Indiana residents.
Who is affectedPeople in Indiana, especially older adults and the family members who help them with money and phone calls.
  1. 1Open the AARP page and read the current scam alerts for your state.
  2. 2Pause before paying anyone who contacts you out of the blue and pushes you to act fast.
  3. 3Check any claim by calling the company or agency on a number you look up yourself.
  4. 4Share the alerts with family and friends who may be targets.
Read the full story
AlertSonicWall · Security flaw

SonicWall firewall flaw lets attackers skip the second login step

Act this week
What happenedSonicWall released updates for seven flaws in its SonicOS firewalls, including one that lets attackers bypass SAML sign-in and possibly multi-factor checks, and it is being exploited.
Who is affectedOrganizations running SonicOS Gen7 7.3.3-7015 or earlier, or Gen8 8.2.2-8015 or earlier, especially those using SAML for their SSL-VPN remote access.
  1. 1Update SonicOS to version 7.3.4-7013 (Gen7) or 8.2.3-8015 (Gen8) as soon as possible.
  2. 2Check whether your remote-access VPN is set to use SAML sign-in, and tell your IT provider.
  3. 3Review recent VPN logins for unfamiliar users, places or times.
  4. 4Do not count on a workaround, because SonicWall says none exists.
Read the full story
AlertNonprofits · Accessibility

Website accessibility rules reach some nonprofits starting April 2027

Act this week
What happenedNew federal rules require some government bodies and federally funded groups to meet WCAG 2.1 Level AA web accessibility standards, starting April 26, 2027.
Who is affectedNonprofits that run programs for local governments or receive Department of Health and Human Services funding, such as community health centers and hospitals.
  1. 1Check your grant agreements and ask your funder or a legal advisor which rules apply to you.
  2. 2Run an accessibility scan, then try your key pages using only the Tab key.
  3. 3Fix the pages people depend on first: applications, registration, contact and donation forms.
  4. 4Write down issues that need developer help, and keep reviewing new pages and documents.
Read the full story
AlertTravel · Scam alert

Fake Europe travel permit sites are charging Americans for something that doesn't exist yet

Act this week
What happenedScam websites are charging travelers for ETIAS, a European travel authorization that has not launched and cannot be applied for yet.
Who is affectedAmericans planning trips to Europe who search online for entry rules and may land on look-alike sites posing as official government pages.
  1. 1Do not pay anyone for an ETIAS authorization right now, because the program has not started.
  2. 2Check entry rules for each country on your route using official government sources only.
  3. 3If you already paid, call your credit card company and watch for fraudulent charges.
  4. 4If you gave passport details, consider identity monitoring.
Read the full story
AlertCanada · Phone scams

Police warn scam calls can fake a real police station's number

Act this week
What happenedKitscoty RCMP warned that scammers are faking phone numbers, emails and texts to look like police, banks or government offices.
Who is affectedAnyone who gets calls, texts or emails, especially bank customers and people who may trust a call from a local police number.
  1. 1Hang up if a caller pushes you to act fast or says your money is at risk.
  2. 2Never share passwords, security codes or banking details with an incoming caller.
  3. 3Look up the real number for the bank or agency yourself and call back.
  4. 4If money was sent, call your bank right away and report it to police and the Canadian Anti-Fraud Centre.
Read the full story
AlertArtex · Cybersecurity

Hundreds of AI hacking tools left open on the web for anyone to use

Act this week
What happenedResearchers at Censys found more than 800 copies of the AI hacking tool Artex exposed online without a password, and the tool has been linked to real attacks.
Who is affectedBusinesses that use Microsoft cloud services, IT support vendors like ConnectWise customers, and companies in finance, payments and gaming.
  1. 1Turn on multi-factor authentication for every business and cloud account.
  2. 2Replace weak or reused passwords with long, unique ones.
  3. 3Ask your IT provider how they protect the access they have to your systems.
  4. 4Watch for unusual logins or data downloads and report them quickly.
Read the full story
AlertGitHub · Malware

Fake security tools on GitHub are infecting the pros who download them

Act this week
What happenedAttackers published fake security and scanning projects on GitHub that install a backdoor and an information stealer on Windows computers.
Who is affectedCybersecurity workers, developers, crypto wallet users and gamers who download code from GitHub and run it on Windows PCs.
  1. 1Do not run code from GitHub unless you trust the author and have reviewed it.
  2. 2Try unfamiliar tools in a separate virtual machine or spare computer, not your main one.
  3. 3If you ran one, disconnect the PC from the internet and have a professional check it.
  4. 4Change passwords, log out of Discord and browsers, and move crypto funds from a clean device.
Read the full story
AlertNY · Data breach

Hacked software vendor exposes data of NY counseling patients

Act this week
What happenedHackers broke into Accumedic Computer Systems, a records software vendor, and may have taken patient data from two New York counseling practices.
Who is affectedPatients of Hispanic Counseling Center on Long Island and Brooklyn Counseling Services (BCS Group), mainly in the New York area.
  1. 1Open any letter from either practice and read it fully.
  2. 2Sign up for the free credit monitoring if it is offered to you.
  3. 3Consider freezing your credit with the three major credit bureaus.
  4. 4Watch insurance statements and bank accounts for charges or care you do not recognize.
Read the full story
AlertQNAP · Plex attacks

Hackers are breaking into home storage drives through Plex

Act this week
What happenedHackers are exploiting four chained flaws in Plex Media Server, known as Plex2Shell, to take over QNAP network storage drives.
Who is affectedAnyone running Plex Media Server on a QNAP NAS drive, especially if it is reachable from the internet.
  1. 1Update Plex Media Server in the QNAP App Center to version 1.43.3.10861 or later.
  2. 2Check your drive for signs of compromise listed in the QNAP security bulletin.
  3. 3If you find signs, reinstall the QNAP operating system cleanly, then reset Plex and NAS passwords.
  4. 4Turn off remote Plex access and stop forwarding port 32400, or use a VPN if you need to connect from away.
Read the full story
AlertOpenSSH · Security flaw

Hackers exploit a server login flaw within hours of its disclosure

Act this week
What happenedA flaw nicknamed SSHole in OpenSSH lets attackers log in to password-disabled accounts using an oversized password, and hackers began exploiting it within hours.
Who is affectedLinux systems running OpenSSH on the musl library with PAM disabled, including Alpine Linux's default setup. Dropbear, glibc-based Linux and PAM-based systems are not affected.
  1. 1Install OpenSSH 10.6p2 or your distribution's patched package.
  2. 2Restart the sshd service after updating.
  3. 3Search /var/log/messages for 'Accepted password for' entries on accounts that should not allow passwords.
  4. 4If you cannot rule out a login, treat the machine as compromised.
Read the full story
AlertWordPress · Security flaw

Installing the WordPress security fix can still expose your site

Act this week
What happenedA WordPress flaw that is already being attacked can still be exploited during the very update that installs the fix, because the update uses the site's old code.
Who is affectedOwners of WordPress sites running versions 4.7 through 7.1.3, especially those that update automatically or use complete update packages.
  1. 1Back up your site files and database before you update.
  2. 2Ask your host or developer to block web access to the wp-content/upgrade folder first.
  3. 3Then update to WordPress 7.1.4 or the matching fix for your older version.
  4. 4If you run version 4.6 or earlier, move to a supported version, since it gets no fix.
Read the full story
AlertFraud · AI scams

Three charged over $129 million fake-boss scam using AI voices

Act this week
What happenedThe FBI charged three people with running an AI-powered scam that copied executives and lawyers to trick employees into wiring $129 million.
Who is affectedEmployees who handle payments at companies of any size, including hospitals, banks and fintech firms, and the finance staff who approve wires.
  1. 1Treat any urgent, secret request to wire money as suspicious, even if it looks and sounds like the CEO.
  2. 2Verify by calling the person back on a number you already have, not one they give you.
  3. 3Require a second approver for large wire transfers.
  4. 4Tell staff that voices, faces and lawyers on a call can all be faked, and report odd requests right away.
Read the full story
AlertAI · Scams

AI fakes now fool even careful people. Here is how families can fight back

Act today
What happenedCheap AI tools can now make realistic fake video, audio and text, and scammers use them to pose as loved ones and other trusted people.
Who is affectedEveryone, including older parents and younger relatives, through phone calls, social media, email, romance, tech support and job scams.
  1. 1Treat any request that is urgent or involves money as a red flag.
  2. 2Set up a family codeword to confirm someone is who they say they are.
  3. 3Hang up and call back using the number saved in your contacts.
  4. 4Check how old a suspicious social media account is, since new accounts are more suspect.
Read the full story
AlertPA · Scam awareness

Pennsylvania officials hold a workshop to teach people to spot scams

Act this week
What happenedThe Union County Sheriff's Office, the state Attorney General's Office and a local aging agency are offering a workshop on fraud and scams.
Who is affectedResidents of Union County, Pennsylvania, especially older adults and families who get scam calls.
  1. 1Hang up on any call that pressures you to pay or act fast.
  2. 2Never share bank details, passwords or codes with a caller who contacted you first.
  3. 3Call the organization back using a number you look up yourself.
  4. 4Tell a family member or report the call to your local sheriff or the state Attorney General.
Read the full story
AlertHoliday · Scams

Fake online stores now look like real luxury shops

Act this week
What happenedA new holiday shopping scam report says AI is helping scammers build full fake online stores, not just single product pages.
Who is affectedOnline holiday shoppers, especially those buying clothing, electronics, tools, luxury watches and evening wear.
  1. 1Pay with a credit card, not a debit card, because disputes are easier.
  2. 2Run unfamiliar store websites through a free checker like Scamwise before you buy.
  3. 3Be wary of polished luxury shops you have never heard of, since AI makes fakes look real.
  4. 4Report a suspected fake store to the BBB Scam Tracker.
Read the full story
AlertD-Link · Security flaws

D-Link warns of unpatched flaws in business network switches

Act this week
What happenedD-Link disclosed several unpatched flaws in its DGS-3130 series switches and shared temporary protections while it works on a fix.
Who is affectedBusinesses and network administrators using D-Link DGS-3130 series managed switches, especially the DGS-3130-30TS model.
  1. 1Turn off the D-Link Discovery Protocol (DDP) on affected switches.
  2. 2Remove default or unneeded SNMP community strings.
  3. 3Limit SSH, web and SNMP access to an isolated management network and approved admin computers.
  4. 4Keep offline backups of switch settings and watch logs for unexpected changes, reboots or factory resets.
Read the full story
AlertMicrosoft · Security

Fix for a serious Windows Paint flaw comes only through the Microsoft Store

Act this week
What happenedMicrosoft released a fix for CVE-2026-83844, a serious flaw in Windows Paint, but it is delivered only through the Microsoft Store.
Who is affectedAnyone using Paint on a Windows PC, including every user account on shared computers and business machines.
  1. 1Open the Microsoft Store, go to Library, and install any available updates for Paint.
  2. 2Confirm Paint is at version 11.2609.401.0 or newer.
  3. 3On shared or business PCs, check every user account, since each has its own copy of Paint.
  4. 4If nobody needs Paint, consider removing it, though that step is untested.
Read the full story
Next step

Let’s talk

845 378 9733Montebello, New York
Terms of ServicePrivacy Policy©2026