The security & privacy stories our desk judged worth your time, written so anyone can follow them.
D-Link says its DGS-3130 business network switches have unpatched security flaws, so owners should apply the company's temporary protections now.
Read more: D-Link warns of unpatched flaws in business network switchesMicrosoft fixed a serious flaw in Windows Paint, but Windows Update will not deliver the fix. It arrives only through the Microsoft Store.
Read more: Fix for a serious Windows Paint flaw comes only through the Microsoft StoreUpLevel Rewards is not a proven scam, but many users say it denies rewards, and its paid trials and ID checks can cost you money and personal data.
Read more: UpLevel Rewards is not proven a scam, but many users say it won't payWhich? says scam messages promise hundreds of pounds in energy help and lead to fake government sites, ahead of the real £100 payment in January 2027.
Read more: Scam texts are using the new £100 energy payment to trick UK householdsMichigan says scammers are using Medicare sign-up season to get Medicare numbers by phone, mail and door knocks, and the deadline is Dec. 7.
Read more: Scammers target Medicare sign-ups to steal personal informationCashfree's checkout pages now let browser-based AI assistants read orders and show a payment QR code, but shoppers still approve every payment themselves.
Read more: Cashfree lets AI assistants help you check out, but you still payA PYMNTS report says banks can use limited digital tokens so an AI assistant can buy your groceries without holding a card number that works anywhere else.
Read more: Banks eye single-purpose digital tokens to let AI shop safely for youAmazon's cloud arm now sells a tool that proves a software flaw can be exploited before suggesting a fix. The price rises with every flaw it handles.
Read more: Amazon launches a tool that tests software flaws before fixing themThe Los Angeles County Sheriff says scammers use AI to copy voices and faces of people you trust, so a familiar voice asking for money is no longer proof.
Read more: Sheriff warns scammers now fake voices and videos of people you knowMetaMask says an attacker diverted about 0.385 ETH in staking rewards, but regular wallets and customers' staked ETH were not touched.
Read more: MetaMask says hackers took a small amount of staking rewards, not walletsChainalysis says an AI-driven attack exposed names, usernames, password hashes and live tokens for every user, and key services are offline.
Read more: Chainalysis says hackers got every customer's login detailsA UK survey finds only 49% of recent texts came from someone people know, and many adults are deleting real messages from friends by mistake.
Read more: Fewer than half of our texts now come from people we knowBarracuda patched two flaws that together let an attacker take full control of its Email Security Gateway with no login. Businesses using it should update.
Read more: Barracuda email filter flaw lets hackers take full controlA free hosting control panel, Control Web Panel, has a hidden backdoor that runs attacker commands and leaves no trace in access logs, XLab researchers say.
Read more: Hidden backdoor found in free Linux web hosting control panelNews18 published a guide to spotting a hijacked WhatsApp account, and a takeover can put your friends, family and customers at financial risk.
Read more: How to tell if your WhatsApp was hacked and get it backMeta paid a researcher $300,000 for a flaw that exposed chats and access keys on test machines for its Muse AI agent. Here is what business users should take from it.
Read more: Meta pays $300,000 to a researcher who found a flaw in its AI agentFraudsters are calling people across Canada from what looks like the real Stephenville RCMP line, claiming you are a fraud victim. Here is how to spot it.
Read more: Scam callers are posing as Stephenville police using the real numberFake Windows warnings, served through ads on real websites, tell people to call a scam number. The same kit reached users at 80 organizations since March.
Read more: Fake Windows virus warnings on trusted sites push people to call scammersThe FBI and CISA say hackers are changing temperatures on commercial freezers and coolers, and businesses that use remote cooling controls should check them now.
Read more: US agencies warn hackers are attacking commercial freezers and coolersThe RCMP says scammers are faking its Ontario communications centre number, so a call that looks official on your screen may not be real.
Read more: Scammers are faking police phone numbers in OntarioA Ghana Business News piece says AI agents should pass a permission test before they touch mobile money. Here is why that matters if software ever pays for you.
Read more: Ghana's mobile money needs a permission test for AI agentsAdyen and Checkout.com are adding passkeys, so some card purchases could be confirmed with a fingerprint or face scan instead of a bank prompt.
Read more: Online checkout may soon let you confirm a card payment with your fingerprintThree recent cases in British Columbia show scammers using a pharmacy, a police phone number and a real person's name to get card details and personal information.
Read more: Scammers are posing as your pharmacy, police and friends this holiday seasonA now-fixed flaw let attackers get around ChatGPT's Lockdown Mode and possibly pull chat data out without the user clicking anything.
Read more: Researchers find a way around ChatGPT's strictest privacy setting
