The security & privacy stories our desk judged worth your time, written so anyone can follow them.
Chainstack says an attacker reached customer account data and password hashes. Customers are told to reset passwords and keys now.
Read more: Chainstack says hackers got into its systems and customer dataBelize's Bankers' Association says scammers are calling and texting customers while posing as bank staff to steal logins and reset codes.
Read more: Bank group warns of scam calls posing as your bankWorkOS says an attacker used an AI hacking tool to get into its sales app and see contact records, so customers should expect more convincing scam emails.
Read more: Hackers used an AI attack tool to break into WorkOS sales systemEau Claire police saw a spike in fake law enforcement calls on Tuesday, November 3, claiming people missed jury duty. Here is how to spot it and hang up.
Read more: Fake police calls claim you missed jury duty and demand paymentRevolve says hackers stole saved card details from at least 200,000 customers in September, and it is not offering free credit monitoring.
Read more: Fashion retailer Revolve says hackers stole card details of 200,000 customersScammers posing as police in Merseyside faked the force's real phone number to ask for money, so a trusted number on your screen is no proof.
Read more: Scammers fake a real police phone number to ask for moneyOpenAI is partnering with Cathedral, the startup that got into Anthropic's systems, to test its own defenses. AI firms hold vast data, so their security touches users.
Read more: OpenAI hires the startup that broke into Anthropic's systemsBinance says a fake recruiter and a tampered download let attackers steal $6.43 billion. The same tricks can target any employee or job seeker.
Read more: Fake job interview helped hackers steal $6.43 billion from BinanceVideo clinics with dementia specialists can shorten a wait that often runs months to a year. Here is what two families found and what to check first.
Read more: Video visits with dementia specialists can cut months off the waitMicrosoft Authenticator on Android will back up through Google One starting January 2027, so users should check their phone settings before then.
Read more: Microsoft Authenticator on Android will back up through Google OneThe FTC warns that some travel companies hide extra charges until checkout, so a cheap-looking flight or room can cost far more than it first appears.
Read more: Hidden travel fees can quietly raise the price of your holiday tripNew York's mayor says Madison Square Garden's face-scanning cameras should not be allowed, and backs city bills that would ban biometric collection in public places.
Read more: NYC mayor says Madison Square Garden's face scanning should not be allowedmSecure's maker emailed customers on November 3 to change passwords and reset security settings, but has not said what happened or whether data was taken.
Read more: Password app mSecure tells users to change passwords, gives no reasonAttackers hijacked cPGuard's update system and pushed a backdoor to Linux servers. Updating fixes the tool, but stolen passwords may still work.
Read more: Hackers turned a security tool's updates into a way into serversGoogle says attackers are stealing AI account keys and running up bills that reached $1 million at some companies. The victim pays, and the damage can come fast.
Read more: Hackers are running up huge AI bills on other companies' accountsA leak says Samsung's next two foldables may keep older camera hardware, which could make them a weaker upgrade if you buy for photos.
Read more: Leak says Samsung's next foldable phones may reuse old camerasBarracuda Networks released patches for two flaws that, combined, could let an attacker take over its devices, so owners should check their products now.
Read more: Barracuda says two flaws could give hackers full control of devicesScam sites that copy US banks show a fake 'suspended' page on a second visit, so checkers think they are dead. Victims still see the real trap on the first.
Read more: Fake bank sites show a fake 'suspended' notice to dodge shutdownPolice in six countries arrested seven people and seized over 100 servers tied to a company that allegedly supplied fake investment sites to scam call centers.
Read more: European police raid company that built fake trading sites for scammersTexts claiming an Apple Pay charge or a suspended card are meant to rush you into calling or tapping. A text alone does not prove anything happened.
Read more: Got a text about an Apple Pay charge? Don't tap or callA SEON survey finds 68% of US adults use AI agents weekly, yet half are uneasy about letting one use their card. Most would blame the agent's company for fraud.
Read more: Most Americans use AI agents weekly, but half won't let them payResearchers say AI tools found many unrecorded loopholes in German law. If that works cheaply, businesses and families could see new kinds of rule-gaming.
Read more: Researchers use AI to find hidden loopholes in German lawPeople report calls, texts and letters from 'D2 Management' demanding payment, and one BBB report calls the calls fake. Pay nothing until you see the debt in writing.
Read more: Got a call from D2 Management? Pay nothing until you see proofMarathon Health says a caller posing as an IT worker got into its systems. Letters are going out to up to 5.7 million people, many of whom never visited a clinic.
Read more: Health Provider Marathon Health Breach Hits Up to 5.7 Million
