The security & privacy stories our desk judged worth your time, written so anyone can follow them.
Experts warn that letting AI firms use copyrighted work in Australia could force the government to pay compensation to rights holders around the world.
Read more: Australia's AI copyright plan could cost it a huge payout, experts warnDutch police say AI-made bank calls tricked 170 people into letting their cards be copied, and the lesson applies to anyone who gets an urgent call.
Read more: AI phone calls helped a gang drain $423,114 from bank customersCursor, a coding tool, says malware reached up to 5,000 of its users. Details are thin, so anyone who uses it should check their accounts and devices.
Read more: Cursor coding tool says up to 5,000 users hit by malwareFlaws in the networks that connect phone carriers let attackers track you and redirect your text codes without ever touching your phone.
Read more: Hackers can track your phone and read your texts without touching itA new report warns that AI-cloned voices and fake video calls are being used to impersonate bosses and trick staff into sending money. Here is what to know.
Read more: Fake video calls from the boss are a growing fraud risk for firmsPolitical campaigns are exempt from the Do Not Call list, but the FCC says you can still cut down on their texts with a few simple steps before Election Day.
Read more: You can stop political texts, but campaign calls may not stopIndia's Supreme Court says banks should be held responsible for fraud losses caused by weak security, which could mean stronger checks and better odds of getting money back.
Read more: India's top court says banks should repay customers hit by online fraudPolice say a Bucks County man lost over $17,000 after a dating app match, a fake deputy's calls and a used credit card. Here is what to watch for.
Read more: Man loses over $17,000 after meeting a woman on a dating appThe US cyber agency says attackers are using a top-severity GitLab flaw that was fixed this month. Companies running their own GitLab server should update now.
Read more: Hackers are now attacking a serious flaw in GitLab softwareA new white paper says many firms already own security protections they never switch on, and a test-first process can turn them on without breaking anything.
Read more: Why known security fixes sit unfinished for days, and how to speed them upA hacker who hijacked the AP's Twitter account in 2013 got 42 months in prison. His fake post briefly wiped $136 billion off the Dow, and a stolen password started it.
Read more: Hacker behind fake White House bombing tweet gets 42 months in prisonA security blog says an Anthropic hack was used to spread hidden remote-control software to Claude developer laptops. It is one report, so details are thin.
Read more: Anthropic hack reportedly spread remote-control malwareResearchers showed a free AI model can turn a public Firefox fix into a working attack in hours, so putting off updates now carries more risk.
Read more: Free AI model hacked six Firefox versions before users got fixesScammers are posing as real charities to collect donations and personal details, and checking before you give is the best defense against them.
Read more: Scammers are posing as real charities to steal donationsO2, a UK mobile network, now blocks calls it suspects are scams before the phone rings. The free service is automatic and expects to stop over 3 million calls a week.
Read more: O2 now blocks suspected scam calls before your phone ringsFintech firm Reap launched Sentry, a service where its specialists run card fraud controls for clients. Wrongly blocked customers can cost as much as fraud.
Read more: Reap launches Sentry, a service that spots card fraud as it happensMicrosoft has fixed a bug that left work VPN connections stuck on Windows 11 after September updates. The fix is available now, with a workaround if you prefer to wait.
Read more: Microsoft fixes work VPN failures caused by September Windows updatesLehigh Valley Health Network will pay $800,000 to settle federal privacy charges after hackers leaked the records of 248,359 patients, including Social Security numbers.
Read more: Hospital network pays $800,000 after hackers leaked patient dataA security expert says scammers are sending fake Google login emails through Google's own systems, so a real sender name no longer proves a message is safe.
Read more: Scammers are sending fake login emails through Google itselfShelly Store UK says unauthorized software on its website may have copied card details, and one customer saw a charge from Australia before any warning.
Read more: Smart home shop warns customers their card details may be stolenAARP is warning that scammers push people to feed cash into crypto kiosks, and that money sent this way is very hard to get back.
Read more: Crypto kiosk fraud in North Carolina: what AARP wants you to knowA bank has warned customers about an elaborate phone scam in which callers pose as bank staff. One convincing call could put your account at risk.
Read more: Banks warn about phone scam where fraudsters pose as your bankAdyen is rolling out Visa Payment Passkey in the UK, so some online card purchases can be confirmed with the same unlock you use on your phone.
Read more: Adyen lets UK shoppers confirm online card payments with a phone unlockThe Acadia Parish Sheriff's Office in Louisiana is warning residents about scam phone calls, and a rushed answer to one can cost you money or your identity.
Read more: Louisiana sheriff warns residents about scam phone calls
