Technology News Articles on Fox News

Millions of students caught in California data breach

Thu, 29 Oct 2026 16:30:34 -0400

You send your child to school expecting teachers to protect their education. You probably don't think much about what happens to their personal information after they take a standardized test. But a massive data breach in California is raising some uncomfortable questions about who has access to student records and how safely that information is stored.

Hackers accessed and copied sensitive records belonging to millions of current and former California public school students. The stolen information includes home addresses, birth dates and even details about disabilities. And here's something families need to know. You could live thousands of miles from California today and still be caught up in this breach if you or your child previously attended a public school there.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt "CyberGuy" Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register for free now at CyberGuyLive.com.

ORACLE HEALTH DATA BREACH EXPOSES NEARLY 20 MILLION PATIENTS

The breach involves Educational Testing Service (ETS), a nonprofit organization that works with the California Department of Education. ETS helps administer statewide student assessments and maintains information connected to those tests. According to state officials, someone gained unauthorized access to an ETS-operated secure file transfer site. Investigators determined that the attacker used a compromised login credential to enter the system. The intruder then copied files containing student information at various times between May 22 and Sept. 18, 2026.

ETS discovered the suspicious activity on Sept. 25. The company disabled the affected account and took the file transfer site offline. It also brought in outside cybersecurity specialists to investigate. The company says it has since built a replacement system with stronger security controls. So far, ETS reports finding no evidence that the stolen information has been made publicly available. However, investigators have confirmed that someone accessed and copied the records.

The California student data breach involved far more than test scores. Depending on the student, the compromised files may contain information that could help someone identify a child or learn personal details about their family circumstances.

The exposed records may include:

Some records also identified whether a student qualified for programs serving children experiencing homelessness or other educational needs. Fortunately, officials say the stolen files did not contain Social Security numbers, financial account details, driver's license numbers, passwords or parent and guardian personal information.

However, there is still plenty to be concerned about. Someone who knows a child's name, school and address could potentially use that information to create a convincing message that appears to come from a teacher or school administrator. Disability information also raises additional privacy concerns because those details are particularly personal.

This is where the story gets especially troubling. Although the breach involves California's public school system, the people whose records were stolen may now live anywhere in the United States. According to the California Department of Education, the compromised information includes records covering all students enrolled during the previous three school years. However, the affected population extends beyond those students.

The state also identifies a group of former students who left California public schools as far back as 2006 and whose transfers to another school were never confirmed with the department. That creates a situation many families may never have considered. Say your child attended elementary school in Los Angeles before your family relocated to Texas. Perhaps you graduated from a California public school years ago and now live in Florida. Your old student information could still be among the compromised records if it falls within the affected groups.

Former students who are now adults may also be eligible for the free identity-protection services being offered. Importantly, this does not mean every student attending school outside California has been affected. In a statement to CyberGuy, ETS confirmed that no other ETS customers were affected by the incident. The concern for families elsewhere comes from their past connection to California's public schools. California has roughly 5.7 million public school students, according to reporting on the breach. Since the compromised files span multiple school years, millions of people are potentially involved. Officials have not yet released a final count of unique affected individuals.

The California Department of Education and the State Board of Education are coordinating with cybersecurity specialists and other state agencies. The California Cybersecurity Integration Center is assisting with the technical investigation. Meanwhile, state officials are reviewing ETS's compliance with applicable data security requirements and its contractual obligations.

In its statement to CyberGuy, ETS said, "We have implemented additional safeguards, including enhanced monitoring, strengthened access controls, and further third-party review of our security practices." ETS says it continues monitoring for signs that the stolen information has surfaced publicly. For families, the unresolved question is what happens to the copied information next. Even without evidence of a public leak, sensitive student records in unauthorized hands create a privacy risk that deserves continued attention.

A SCAMMER HAS YOUR NAME, PHONE NUMBER AND ADDRESS. WHAT CAN THEY ACTUALLY DO?

ETS began notifying affected students and families on October 16, 2026. The state expects notifications to continue through early November. Letters and emails will explain the incident and identify the types of information involved. They will also include instructions for accessing complimentary identity-protection services. However, here's an important warning. Not receiving a notification does not necessarily mean your information is safe. Some former students may have outdated contact information on file.

Families who are concerned should visit the official California ETS incident webpage. It contains frequently asked questions and links to breach notifications available in 27 languages. You can also call the incident assistance line at 833-931-8488, Monday through Friday, from 6 a.m. to 6 p.m. Pacific Time.

ETS is offering affected current and former students 24 months of free identity theft protection. Parents or legal guardians can enroll eligible children under 18, while adults, including former students, can enroll themselves. The services are designed to help monitor for potential identity theft and provide assistance if someone misuses their personal information.

The enrollment deadline is March 19, 2027. Eligible minors who turn 18 before March 19, 2029 may also qualify for adult coverage using the activation code provided in their notification. Enrollment is free, and no credit card is required. Identity restoration assistance is also available to eligible individuals for 24 months from their notification date, even without enrolling in monitoring services. For complete eligibility details and enrollment instructions, visit the California Department of Education's official incident webpage at at cde.ca.gov/nr/in/ets-incident.asp.

Even without stolen passwords or financial account numbers, student records deserve serious attention. Here are practical steps I recommend taking if your family may be affected.

Scammers frequently use real data breaches as an excuse to send fraudulent emails. A message claiming to come from ETS or Experian could direct you to a fake enrollment website. Instead of clicking an unexpected link, open your browser and visit the official California Department of Education incident page. Follow the verified instructions from there.

Eligible families should take advantage of the 24 months of free identity-protection services being offered following this breach. Follow the enrollment instructions in your official notification and keep a copy for your records. No credit card is required.

For additional protection, consider an identity theft protection service which offers identity monitoring, alerts about suspicious activity and access to restoration specialists if identity theft occurs. Some services also offer paid family plans that can cover children, making it an option for parents concerned about protecting their family's personal information over the long term. Coverage and benefits vary by plan. See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.

One of the strongest steps you can take against certain forms of identity theft is placing a security freeze on a child's credit file. The Federal Trade Commission says parents and legal guardians can request a free credit freeze for children under 16. Teenagers ages 16 and 17 can request their own freezes. Contact Equifax, Experian and TransUnion separately. Each bureau has its own process for handling minors. A freeze can make it harder for criminals to open new credit accounts using a child's identity. However, it cannot prevent every form of fraud.

Pay closer attention to unexpected emails or text messages claiming to involve school records. A scammer with access to personal details could make a fraudulent communication seem unusually credible. For example, someone might claim that your child's testing account requires immediate verification. Before responding, contact the school using a phone number you already trust. Avoid sharing personal information through unexpected links or attachments. Consider using strong antivirus software on your family's devices. It can help detect malicious links, suspicious downloads and malware hidden in fake school notifications. While it cannot recover stolen student information, it adds another layer of protection against scammers who may try to exploit the breach. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

Scammers can use information found online to build a more detailed profile of you or your family. That's why I recommend considering a personal data removal service. These services can help remove personal information from data broker websites that collect and sell details such as names, addresses and phone numbers. While these services cannot retrieve information stolen in this breach, they can help reduce how much additional information is publicly available. If you're concerned about your child's information, check whether the service offers protection for minors before signing up. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Adults who may have been affected can review their credit reports for unfamiliar accounts or suspicious activity. Visit AnnualCreditReport.com to obtain free reports from the three major credit bureaus. Parents should also watch for unexpected bills or collection notices addressed to their children. Those can be warning signs that someone has misused a minor's identity. If you discover evidence of identity theft, report it through IdentityTheft.gov . The FTC provides a recovery plan to help you address fraudulent accounts and document the problem.

You can also contact your child's school district to better understand how it handles student records. Ask what information outside contractors receive and how long they retain it. Schools may have legal obligations to maintain certain records. Still, parents can ask about retention policies and security safeguards. This conversation is worthwhile regardless of where your family lives.

I've covered plenty of data breaches over the years, but this one bothers me because we're talking about children who had no choice about handing over their information. They went to school, took required tests and trusted the adults and organizations handling their records. Now, some of those details have ended up in the wrong hands. What I find especially troubling is how far back some of these records could go. Think about someone who left California years ago and has no reason to believe their old student information is still sitting on a testing company's system. That person could be living on the opposite side of the country and suddenly have to worry about a breach involving records from childhood. I appreciate that ETS is offering free identity protection, but I'd like to see schools and testing companies explain more clearly how long they keep sensitive student information and why. Parents deserve answers before a breach happens.

Should schools and outside testing companies be allowed to keep sensitive student records for years after a child leaves, or should families have more control over when that information gets deleted? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Apple confirms some iPhone Duo screen problems after launch

Thu, 29 Oct 2026 11:56:28 -0400

Apple's first foldable iPhone has barely reached customers, and some owners are already dealing with cracked screens. The iPhone Duo launched on Oct. 23 with a starting price of $1,999. Within hours, complaints began appearing online from people who said their new phones developed cracks along the folding display.

Even more concerning, several reports describe damage appearing in nearly the same location. Some owners say their phones made unusual noises before the screens failed. Others noticed bright white lines spreading across the display. Now Apple has acknowledged the issue and says affected customers can request replacements. However, the company has yet to explain exactly what's causing the failures.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register for free now at CyberGuyLive.com.

SAMSUNG GALAXY Z FOLD8 LINEUP ADDS THREE CHOICES

Apple spent years developing its first folding iPhone. The device opens to reveal a 7.6-inch display, giving people a much larger screen without carrying a separate tablet. When closed, it looks like a compact smartphone with a 5.4-inch outer display. The design generated enormous excitement when Apple introduced it in September. However, that excitement took an unexpected turn shortly after the first phones reached customers.

Multiple iPhone Duo owners have reported cracks developing along the center of the inner display. In several cases, a bright line of damaged pixels extended from the fold toward the right side of the screen. Some owners have shared photos of the damage on Reddit, along with accounts of how quickly their new phones failed.

One owner, u/leftyhyzer16, said the screen cracked before setup was complete, after opening and closing the phone only a few times. Another owner, u/Midnight_Slump, reported a failure within six hours and received a replacement from Apple. Reddit moderators also checked additional photos and Apple paperwork provided by the owner. They confirmed the damaged phone and its replacement were genuine. Meanwhile, u/chimchambam said the display failed after just three hours. That owner reported being turned away by an Apple Store before ultimately returning the phone through Verizon. All three owners described problems appearing after very little use. Their experiences don't tell us how widespread the issue is, but they help explain why these early screen failures are getting so much attention.

On Oct. 26, Apple acknowledged reports about the damaged displays. In a statement provided to news outlets, the company said: "We are aware of an issue impacting the inner display on a small number of iPhone Duo units." Apple has instructed affected owners to contact AppleCare for a replacement. That's encouraging news for anyone whose new phone has already failed, especially considering its $1,999 starting price.

However, Apple hasn't disclosed exactly how many devices are affected or identified what's causing the screens to crack. We also don't know whether the problem involves a manufacturing defect affecting certain phones or something in the overall design. We reached out to Apple for additional comment but did not receive a response before our deadline.

Here's what caught my attention. Several of the damaged screens appear to crack near the hinge, right where the phone folds. That's a pretty troubling place for something to go wrong on a $2,000 folding phone. So what's happening inside? The repair experts at iFixit took the iPhone Duo apart and used CT scans to get a closer look at its hinge. They spotted something that could help explain the damage. A small support bar may not move far enough out of the way when the phone folds. If the display presses against that bar, it could put enough pressure on the screen to cause a crack.

Now, I want to be clear. This is still a theory. iFixit hasn't confirmed that the support bar caused the reported damage, and Apple hasn't explained what's going wrong. But it does raise questions about how well the hinge and flexible screen work together, especially when people are already reporting similar cracks just days after buying the phone.

IOS 27 IS HERE: 10 IPHONE FEATURES YOU’LL WANT TO TRY NOW

Here's another detail that caught my attention. Although iFixit found that the iPhone Duo was more repairable than other foldable phones it had tested, replacing its inner display remains complicated. The company gave the device a provisional repairability score of 5 out of 10. More importantly, it reported that an out-of-warranty inner-screen repair costs $999. That's roughly half the starting price of the phone.

Fortunately, Apple says customers affected by this particular display issue should contact AppleCare for a replacement. An AppleCare+ subscription is not required to request help for the acknowledged defect. However, accidental damage and unrelated screen repairs may fall under different coverage terms. You can learn more in our guide to checking your Apple warranty and what it covers.

If you recently purchased an iPhone Duo, pay attention to how the hinge feels when you open and close the device. A sudden increase in resistance or an unfamiliar popping sound deserves attention. If you notice something unusual, avoid forcing the phone open or closed. Don't repeatedly fold it to see whether the problem happens again. If your screen develops cracks or bright lines, here are some steps worth taking.

Ask about replacement availability. Some affected customers have received immediate exchanges at Apple Stores. However, replacement inventory may vary. Contact Apple before making a special trip and confirm the next steps for your particular device.

The concerns go beyond cracked screens. My colleague Chris was excited to switch from his Samsung Galaxy Fold to Apple’s new iPhone Duo. But after trying it, he was so disappointed that he decided to return it to Best Buy and get an iPhone 18 Pro instead.

He found the interface buggy and cumbersome, missed having Face ID and felt the cameras fell short of his expectations. He also preferred the display quality of other phones. At nearly $2,000, he simply couldn’t justify keeping it, saying, "I think the craftsmanship is phenomenal. I love the heft and the solid nature of the device, but because I’m coming from a foldable, there were so many glaring missteps that Apple made along the way, and at first they were little, but little things add up to the point where you genuinely question whether this truly was ready for prime time."

Now, Chris’s phone didn’t crack. His complaints are about the overall experience. But when someone who already enjoys using a foldable phone decides Apple’s version isn’t worth keeping, that gets my attention. I still think the Duo has some impressive features, but between these early screen problems and Chris’s experience, I’d want to try one in person before spending that kind of money.

I've been looking forward to seeing what Apple could do with a foldable iPhone, and I still think the Duo is an impressive piece of technology. But I have to admit, these early screen failures would make me nervous about spending nearly $2,000 on one. I give Apple credit for acknowledging the problem quickly and offering replacements. That's the right response. What I want to know now is why these screens are failing and whether Apple can prevent the same thing from happening to replacement devices. Then there's my colleague Chris, who already knows his way around a Samsung foldable and still found Apple's version disappointing enough to return it. That tells me Apple has some convincing to do beyond fixing the screen issue. At this price, I want a phone that feels like an upgrade, not one that makes me question what I'm giving up. For now, I'd be inclined to wait rather than rush out and buy one.

If you spent nearly $2,000 on Apple's newest iPhone and the screen cracked within days, would a free replacement restore your confidence, or would you demand your money back? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Newsletter

50,000 airline miles stolen from a travel expert

Wed, 28 Oct 2026 14:30:26 -0400

If you're anything like me, you've probably spent years collecting airline miles, dreaming about the trip you'll eventually take. Maybe it's a business class seat to Europe or that vacation you've been putting off. You keep earning points and watching the balance grow. But what happens when you finally check your account and discover someone else has already spent them?

That's exactly what happened to Katy Nastro, a travel expert with Flighty, a flight-tracking app that provides real-time updates on delays, cancellations and gate changes. During our conversation on "The CyberGuy Report" podcast, Katy shared how more than 50,000 American Airlines miles vanished from her account. Someone had redeemed them for a flight without her permission.

What surprised me was that Katy knows the travel industry inside and out. Yet she still found herself dealing with a problem that could happen to anyone with a frequent flyer account. Her experience offers a warning, especially as holiday travel approaches.

9 WARNING SIGNS OF IDENTITY THEFT YOU SHOULD NEVER IGNORE

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, Oct. 31, at 11 AM ET/8 AM PT. Register free now at CyberGuyLive.com.

Katy had just landed in New York and was riding home in an Uber. Like many frequent travelers, she opened her American Airlines app to check how many miles she'd earned from her latest trip. Instead, she noticed a substantial drop in her balance. At first, she figured the app had made a mistake. She remembered redeeming about 10,000 miles recently, but the balance was off by roughly 50,000. So she refreshed the app. The missing miles were still missing. That's when she called American Airlines.

The airline told her that someone had redeemed the miles for a ticket in another person's name. Katy had been saving for a trip to Asia. Unfortunately, those miles were now associated with a flight she knew nothing about.

"I really had this just stomach drop moment," Katy told me.

She had spent years earning those rewards, including through long flights to Australia. Suddenly, someone else had benefited from all that travel.

"I naively never thought this could happen to me because I work in the industry," she admitted.

I found that particularly revealing. Katy had previously warned people about loyalty account theft. Even with that experience, she never expected to become a victim herself.

You might assume the airline could simply reverse an unauthorized redemption. After all, the ticket was booked in someone else's name. Unfortunately, Katy discovered that getting her miles back required additional work. American Airlines instructed her to submit a formal fraud complaint by email. She also had to file a police report and provide documentation before the airline would restore her miles.

"I had to have the police report filed with them before anything was credited," Katy explained.

She eventually recovered her miles, but the process didn't end there. Katy also had to create a new email address and establish a replacement American Airlines AAdvantage account. Thankfully, the airline transferred her existing status along with her restored rewards. What caught my attention was the police report requirement. Katy had to involve local law enforcement even though the theft happened entirely online. She understood why the airline might want official documentation, but she questioned whether the process needed to be so cumbersome.

There's another concern for travelers. Airline loyalty points generally don't carry the same protections as money stolen through an unauthorized credit card purchase. In fact, American Airlines' current AAdvantage terms say the airline has no general obligation to restore miles withdrawn without authorization.

The company may review requests submitted within three months of the unauthorized withdrawal, but reimbursement remains discretionary. That makes discovering suspicious activity quickly especially important. Also, keep in mind that each loyalty program has its own fraud procedures. A police report may be requested, but the requirement isn't universal.

I asked Katy something that had been bothering me. Who was actually flying around using her miles? She had no idea. The airline identified a redemption involving someone else's name, but Katy didn't know who was behind it or where the traveler was headed. Loyalty programs often allow members to book tickets for other people. Some also permit mileage transfers or gifts. Those legitimate features can create opportunities for criminals who gain unauthorized access to an account.

For example, someone who controls your account could redeem miles for a ticket under another person's name. Depending on the program, the points might also be transferred or exchanged for other rewards. However, Katy never learned exactly how someone accessed her account. During our conversation, she acknowledged that password reuse may have played a role.

"I think I fell into the trap of using the same password for everything," she said.

That's an easy habit to fall into. If criminals obtain a password from one compromised service, they may try using it to access other accounts. And here's something worth remembering. A loyalty balance may look like a collection of numbers on your screen, but those numbers can pay for expensive flights.

Katy shared another piece of advice that might surprise anyone who's been patiently saving miles for years. She believes travelers should think twice about holding on to their rewards indefinitely.

"I would highly suggest that you should not be waiting on those miles," she told me.

Her concern comes down to depreciation. Airlines can change their award pricing, which means a flight that once required 50,000 miles might eventually require considerably more. I compared holding on to miles to buying a new car and watching its value drop after driving off the lot. Katy agreed. In her view, people often wait too long for that perfect first-class redemption. She recommends considering redemptions within a year instead of endlessly saving for a future trip.

Of course, you still want to check whether an award flight offers reasonable value. Spending 80,000 miles on an inexpensive economy ticket could be a poor deal. However, if you need to travel during a busy holiday period, using miles for an economy seat may make sense.

Award tickets can also offer more flexibility than certain restrictive cash fares. Just check the airline's cancellation and redeposit rules before booking. We've shared more strategies in our article, Are airline miles still worth it?

And if you're looking to earn more rewards for your next trip, check out my picks for the best airline credit cards of 2026 at CyberGuy.com to see which programs might work best for you.

YOUR CREDIT CAN LOOK NORMAL WHILE SOMEONE STEALS YOUR IDENTITY

Watch out for fake airline alerts and customer service scams

During our conversation, I told Katy about something I've been seeing more frequently. I receive emails that look like legitimate airline notifications, claiming miles were redeemed from my account. Some are convincing enough that I've nearly clicked them myself. That's a particularly sneaky approach because many airlines send real notifications when members redeem rewards. Criminals can imitate those messages to create panic and lure people toward fake login pages.

Katy warned that scammers also create fake airline support accounts on social media. Someone looking for help with a delayed flight or missing miles might contact what appears to be an official account. The conversation can then move to a private message or even WhatsApp, where the criminal asks for personal information. Katy's warning was clear. Avoid sharing sensitive account information through social media conversations. If you receive a suspicious redemption notice, open the airline's official app yourself. Check your account activity directly rather than following links in the message.

Before your next trip, take a few minutes to secure the loyalty accounts you've spent years building. These steps can help you spot unauthorized activity sooner and make your accounts harder to compromise.

Open your airline and hotel loyalty apps at least once a month. Review recent redemptions and compare your current balance with what you expected. Katy said she sometimes went several months without checking her account. That made it harder to know when the unauthorized redemption occurred. Setting a recurring calendar reminder can help you catch unusual activity sooner. Also, enable account activity and redemption alerts if your loyalty program offers them. That way, you may find out about suspicious transactions before you notice missing miles.

Never reuse your airline password on another website. A password manager can generate strong, unique passwords and store them securely. Also, protect the email account connected to your loyalty program. Someone who gains access to that inbox may be able to reset your rewards password.

Look for two-factor authentication (2FA), passkeys or other login verification options offered by your airline or hotel program. These protections vary by provider, so check your account's security settings. Also, review any unfamiliar changes to your contact information and remove devices or sessions you no longer recognize when the service allows it.

If an email or text claims someone used your points, resist clicking its links. Instead, open the official airline app or type the website address into your browser. Legitimate-looking logos and familiar formatting offer no guarantee that a message is genuine.

Also, be skeptical of anyone claiming to represent airline support through an unsolicited social media message. Use strong antivirus software to help detect malicious links, block dangerous websites and protect against malware designed to steal your passwords. While antivirus software can't stop every phishing scam, it provides an additional layer of protection if you accidentally click something suspicious.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

FAKE BOOKING.COM TRAVEL CREDIT SCAM TARGETS TRAVELERS

Contact your loyalty program through its verified customer service channels as soon as you notice an unauthorized redemption. Ask the airline to secure your account and investigate the transaction. Save your account statements and any correspondence. If the airline requests a police report, follow its instructions and keep a copy. Don't delay because some programs impose deadlines on fraud claims.

Katy suggested using a dedicated email address for loyalty programs. That can make account notifications easier to track and reduce exposure if an unrelated service suffers a breach. Another option is to use an email alias, which helps keep your primary address private. It lets you create unlimited email aliases, helping you organize travel accounts while reducing spam and unwanted exposure. You can also follow my guide on how to create and use email aliases.

For recommendations on private and secure email providers that offer alias addresses, visit CyberGuy.com.

Your personal information may already be circulating on data broker websites, making it easier for scammers to target you with convincing airline phishing emails or impersonation attempts. Consider using a personal data removal service. It helps remove your personal information from hundreds of data broker and people search sites and continues submitting removal requests when your details reappear. While no service can erase everything or directly prevent someone from stealing your airline miles, reducing your online exposure can make it harder for scammers to gather personal details and tailor their attacks.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Be careful about sharing photos of boarding passes, luggage tags or travel confirmations online. These documents can contain booking reference numbers, frequent flyer details or barcodes that expose information about your trip. Criminals may use those details to access reservations or impersonate travelers. Avoid posting travel documents on social media, and securely dispose of printed boarding passes after your trip.

You can use an AI assistant like ChatGPT with scheduled tasks to monitor airline loyalty programs for changes that could reduce the value of your miles. Set up a daily alert to check for announced changes to redemption rates, award pricing or loyalty program rules. You can even ask it to track news about American Airlines AAdvantage or other programs you use.

That way, you may hear about upcoming changes while there's still time to redeem your miles at current rates. Keep in mind that airlines don't always announce devaluations in advance, so AI can't predict every change. For step-by-step guidance, check out my article on 8 seriously annoying tasks you can hand off to an AI agent.

I keep thinking about Katy sitting in the back of that Uber, casually checking her mileage balance and discovering that 50,000 hard-earned miles had disappeared. I've collected airline miles for years, and I know how much planning goes into using them. The thought of some stranger enjoying a trip on my points would make me furious. What concerns me even more is that Katy works in the travel industry and still couldn't explain exactly how someone got into her account.

That tells me we should give our loyalty accounts the same attention we give our financial accounts. Check your balances, use unique passwords and pay attention to unusual activity. And while I love saving miles for a great trip, Katy makes a convincing argument for enjoying those rewards while they still offer good value.

I encourage you to listen to The CyberGuy Report podcast at cyberguy.com/podcast/ to hear my full conversation with Katy Nastro. Her experience might change how you think about the miles you've been collecting. And if you want more ways to make those rewards go further, visit CyberGuyLive.com to sign up for my free upcoming webinar: 5 Ways to Travel Smarter and Save Money on Oct. 31 at 11 AM ET/8 AM PT.

If someone stole 50,000 airline miles from your account, do you think the airline should be legally required to give them back, or should that responsibility fall on you? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

How to get rid of unwanted AI on your phone

Wed, 28 Oct 2026 09:12:06 -0400

You pull out your phone to look something up on Google. Maybe you're researching a purchase or trying to find a restaurant. You expect a list of websites. Instead, Google serves up a lengthy artificial intelligence-generated answer before you even get to the search results. Sound familiar? I like AI when it helps me get something done. But sometimes I just want to search the internet without an AI summary appearing every time.

Fortunately, there are ways around it. One involves adding a few characters to your search. Another uses a built-in Google filter. And if you've had enough of Siri suggestions on your iPhone or AI features popping up on your Samsung Galaxy or Google Pixel, there are settings worth changing there, too.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

HOW TO SEARCH ANYTHING ON IPHONE, GALAXY AND PIXEL

Google calls those automatically generated summaries AI Overviews. They appear above traditional search results when Google's systems decide an AI-generated answer might be helpful. Sometimes they save time. However, they can also get in the way when you'd rather read information directly from a website. Unfortunately, Google confirms that AI Overviews cannot be permanently turned off through a standard Search setting. However, you have a few ways to avoid them.

This trick takes only seconds and is worth trying on an iPhone, iPad, Samsung Galaxy or Google Pixel.

Here's how.

For example, instead of searching for: best walking shoes

Try: best walking shoes -AI

Adding -AI can keep an AI Overview from appearing. However, this is an unofficial workaround, and Google doesn't guarantee that it will work every time. There's another catch. Google uses the minus sign to exclude terms from search results. Adding -AI could also remove some relevant pages containing that term. If the trick doesn't work, Google's next option is more dependable.

Google has a built-in filter that shows traditional web links without AI Overviews.

Here's how to find it.

Google will display text-based links without its AI Overview. The downside is that you generally need to select the Web filter again when starting another search. Still, it's a useful way to get straight to websites without an AI-generated answer taking up the top of the screen.

One important note: Turning off an AI Overviews experiment in Google Search Labs won't necessarily remove AI Overviews from regular Google searches.

If you're really tired of AI showing up in searches, there's another option worth knowing about. DuckDuckGo offers a dedicated search experience called DuckDuckGo No-AI. You can access it at noai.duckduckgo.com. According to DuckDuckGo, this version removes its AI-assisted answers and AI feature suggestions. It also filters AI-generated images from image searches. The company acknowledges that AI-image filtering may not catch everything. You can use the website directly without changing your phone's default search engine.

If you want to use a different search engine more regularly, Apple makes switching easy.

These instructions apply to iOS 27 and iPadOS 27.

Keep in mind that choosing regular DuckDuckGo as your default doesn't automatically activate its separate No-AI experience. You can visit the No-AI website whenever you want to use it.

MALICIOUS BROWSER EXTENSIONS CAN HIJACK AI ASSISTANTS

Now let's talk about another feature that can get annoying. Ever swipe down on your iPhone's Home Screen to search for something and immediately see a collection of suggested apps? Those suggestions come from Siri, which can recommend apps based on your activity. Maybe you appreciate the shortcuts. Or maybe you would rather see a clean search screen until you start typing. Apple lets you turn those suggestions off.

Your iPhone should stop showing those suggested apps before you begin searching. While you're there, you can also disable Show in App Library if you don't want suggestions appearing there. You can turn off Show When Sharing if you'd rather not see suggested contacts or other Siri recommendations when sharing content. These controls change where Siri suggestions appear. They don't disable Siri itself.

Apple's more conversational Siri AI is available in beta on supported iPhones running iOS 27.

If you enabled it and would rather return to the previous Siri experience, Apple provides that option.

If you don't want to use Siri at all, leave it turned off.

Important: Siri AI requires an Apple Intelligence-compatible iPhone, including the iPhone 15 Pro, iPhone 15 Pro Max and iPhone 16 models or later. Availability also depends on language and region. Older iPhones won't have the same Siri AI options.

There's another AI feature that may bother some iPhone owners. Apple Intelligence can summarize notifications, messages and emails. While that may sound convenient, AI summaries can leave out details or misunderstand what someone wrote. If you'd rather read the original text, you can disable those features.

Turn off AI notification summaries

Disable AI summaries in Messages

You can also open Settings, tap Apps, select Mail and turn off Summarize Message Previews.

These options are available on compatible devices running iOS 27. Disabling them won't affect your ability to receive regular messages or notifications.

Samsung has been adding AI tools to its Galaxy phones, including features that help with calls or photos. Some can be useful. However, you may have no interest in having AI analyze information or suggest actions throughout your day. Fortunately, Samsung provides individual controls for many Galaxy AI features.

Samsung notes that some AI features are built into the operating system and cannot be disabled. Also, available controls vary depending on your Galaxy model and software version. Samsung recommends restarting your device after disabling Galaxy AI features to ensure the changes take effect.

Samsung's Now brief can show personalized information about your day, including upcoming events and other recommendations. If you don't want those briefings appearing on your Lock screen, try this.

You can also open Settings, tap Galaxy AI and select Now brief to adjust the information included in your briefings. On supported devices, you can disable Show Now brief while phone is locked. Keep in mind that removing Now brief from the Lock screen doesn't necessarily remove the feature from your Galaxy phone.

If you're concerned about information being sent to the cloud for AI processing, Samsung offers another option.

This tells supported Samsung Galaxy AI features to process data locally instead of using cloud processing. However, some AI features require an internet connection and may become unavailable. Also, this control applies to Samsung's supported Galaxy AI features. It doesn't prevent every app on your phone from connecting to its own cloud services.

Circle to Search lets you search for something displayed on your screen. However, you might accidentally activate it while navigating your phone.

You can switch it off.

Google Pixel phones have their own AI features designed to anticipate what you might need. Depending on your device, these can include Magic Cue or Google's newer Proactive Assistance. Both can provide suggestions using information from supported apps, depending on your settings and permissions. However, you may prefer to keep those suggestions out of your conversations.

On supported Pixel 10 models, Magic Cue can display helpful information while you're using your phone. For example, it might surface flight details during a conversation.

Here's how to adjust it.

Magic Cue is available only on supported Pixel models and in supported regions.

Google introduced a newer feature called Proactive Assistance on Pixel 11 devices in supported markets, including the United States. When enabled, it can use screen information and notifications to provide suggestions. It may also use information from connected apps and location data.

If you'd rather skip those suggestions, Google gives you a direct switch.

You can also tap Connected apps to decide which apps the feature can access. Proactive Assistance is opt-in, so you won't necessarily see suggestions unless you've enabled it.

Circle to Search is also available on supported Pixel phones. If you find yourself activating it accidentally, you can turn it off.

Google also lists the feature under System on supported Pixel devices.

On supported Pixel phones, the Pixel Screenshots app can generate summaries and help you search through saved screenshots. If you don't want those AI features processing screenshot content, Google provides an option to disable them.

If you also want to delete previously generated AI information, select Delete all AI summaries and metadata. That last option removes the generated summaries and metadata associated with the feature. Only select it if you're comfortable deleting that information.

ANTI-SCAM SETTINGS ON IPHONE, PIXEL AND GALAXY YOU SHOULD CHECK

Finally, there's Gemini, Google's AI assistant. On many Android phones, Gemini can launch when you say "Hey Google" or press and hold the power button. If you're tired of activating it accidentally, there are several ways to stop that behavior.

Turn off Hey Google in Gemini

This prevents Gemini from responding to the wake phrase. You can still open the app manually if you want to use it.

On Google Pixel and other supported Android phones:

On Samsung Galaxy phones, search Settings for Side button to find the equivalent shortcut control.

If you'd rather stop using Gemini as your phone's main assistant, Google provides another option.

You can also switch back to Google Assistant through the Gemini app on supported devices. Removing Gemini as the default assistant won't necessarily uninstall the Gemini app or erase any previous Gemini activity.

There isn't one universal switch that removes every AI feature from an iPhone or Android device. Some functions are built directly into the software. Others come from individual apps or online services.

However, you can make a noticeable difference by disabling the features you never use. And remember, turning off an AI assistant won't automatically remove AI Overviews from Google Search. Those require separate controls. If you're concerned about how AI services collect information, we've also covered how to opt out of AI data collection in popular apps.

I use AI regularly, and I appreciate what it can do. But I also understand why people get annoyed when it starts showing up everywhere. Sometimes I want to Google something and read what an actual person wrote. I don't need an AI summary making that decision for me. That's why I like having Google's Web filter available. And discovering DuckDuckGo's No-AI search option gives people another choice. I also think it's worth taking a few minutes to look at the AI settings on your phone. You may discover features running that you never use. Turning them off can make your phone feel more like your own again. I want AI available when I need it, but I don't want companies deciding that I need it all the time.

Are Apple, Google and Samsung giving us useful AI features, or are they pushing the technology so aggressively that we're losing control of our own phones? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Is that campaign merch store official? Here's how to tell

Tue, 27 Oct 2026 15:00:11 -0400

You're scrolling online when you spot a campaign T-shirt supporting your favorite candidate. The website looks professional, the merchandise looks legitimate and the address includes the candidate's name. You might even see the word "official" at the top of the page. So, you assume your purchase supports the campaign. But what if the candidate has nothing to do with that store?

With the Nov. 3 midterm elections approaching, new research shared with CyberGuy reveals a troubling discovery in Texas. Researchers at cybersecurity company Attaxion identified 626 unofficial election-related domains, including 30 online merchandise stores presenting themselves as official campaign shops.

Attaxion says it could not verify an official campaign connection for any of the 30 stores. Even more surprising, researchers found that nearly all appeared to come from just two sellers offering merchandise for competing Republicans and Democrats. The findings arrive as the FBI warns about election-related scams involving fake merchandise, fraudulent donations and websites designed to steal personal information. And while this investigation focuses on Texas, the warning signs apply to elections and online shopping across the country.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

DON'T LET FAKE ELECTION WEBSITES FOOL YOU BEFORE 2026 MIDTERMS

Texas voters are already heading to the polls. Early voting for the Nov. 3 general election began Oct. 19 and continues through Oct. 30. Meanwhile, researchers are finding that candidates' names have become valuable online real estate. Attaxion, a cybersecurity company that helps organizations identify vulnerable websites and other online threats, examined domains connected to the state's U.S. Senate race, governor's race and six competitive congressional districts. The investigation also included websites resembling election offices and voter information pages.

Researchers initially identified 704 domains. After excluding 25 official sites and another 53 domains connected to campaigns or election offices, 626 unofficial addresses remained. Of those, 553 had DNS records when checked. That means the domains had some internet configuration, although it does not establish that each hosted an active website. The Senate race accounted for 323 unofficial domains. Another 75 referenced House candidates, while 70 used gubernatorial candidates' names. The remaining domains referenced election offices or general election-related terms.

Importantly, an unofficial domain is not automatically a scam. Some may belong to supporters, critics or independent businesses. Others may be registered without hosting an active website. However, the researchers identified a smaller group that deserves closer attention.

Of the 626 unofficial domains, Attaxion identified 30 online stores that presented themselves as official merchandise sellers for Texas political candidates. The stores promoted products associated with Republican U.S. Senate candidate Ken Paxton and Democratic opponent James Talarico. Others used the names of Republican Gov. Greg Abbott and his Democratic challenger, Gina Hinojosa.

Researchers also identified stores featuring congressional candidates. Alexandre François, research contributor at Attaxion, worked on the investigation and shared the findings with CyberGuy. "Two things stood out. The first is how little the politics seem to matter to the people selling," François told CyberGuy.

He explained that nearly all the stores appeared to come from the same two sellers, despite promoting candidates from opposing parties. In Texas' 23rd Congressional District, researchers found stores supporting the Republican and Democratic nominees that appeared to share an operator. That raises an obvious question. If a business is selling merchandise for competing candidates, is it really connected to either campaign? According to the investigation, none of the 30 stores could be verified as campaign-operated.

Attaxion traced most of the merchandise websites to two seller identities: ShirtGoat and madetoprints. ShirtGoat appeared to operate 12 stores and was likely connected to two more. Meanwhile, madetoprints was associated with another 15. The researchers found that both sellers used similar website templates while swapping out candidates' names and merchandise. Some sites also borrowed slogans that appeared on official campaign products.

For example, when Talarico's campaign responded to a political nickname with an "I'm a Talafreako" shirt, similar products appeared in three unofficial stores. "It suggests that the motive is most likely commercial rather than political," François explained. "Someone with a political agenda would be unlikely to sell merchandise for both sides of the same race."

Researchers also noticed that several domains were registered on the same day. Some stores reused identical policies with only the candidate's name changed. A few terms-of-service pages even contained apparent chatbot responses left behind during the creation process. That suggests some operators may be creating these stores quickly and repeatedly. However, the researchers could not establish the legal identities of the people controlling all the websites.

One of the biggest challenges is how convincing the stores can appear. A website might feature professional product photos and familiar campaign slogans. It may also offer a functional shopping cart with a normal-looking checkout. Those features can create confidence before someone even thinks to check who operates the business. François says that assumption can be risky. "The first thing to know is that appearance is no longer a reliable guide. With AI, anyone can quickly build a polished store with well-written text, so the old signs of poor design and clumsy language rarely apply, and neither does the word ‘official.’"

Attaxion found that none of the 30 unofficial stores included the campaign-related "Paid for by" disclosure the researchers expected to see. However, independent businesses selling political merchandise are not automatically required to display campaign finance disclaimers. The missing disclosure is one warning sign, not proof of fraud or a legal violation. The stores also failed to provide a verifiable company identity and business address. Some listed a seller name or customer service email address. However, those details did not establish an official relationship with a candidate.

To investigate the websites, Attaxion compared them against verified campaign information from the Federal Election Commission and Texas Ethics Commission. Researchers also examined registration records and revisited the stores on Oct. 20 to check their contact pages, policies and checkout processes. None of those checks established a connection to the campaigns.

119,000 FAKE SHOPS COULD STEAL YOUR CREDIT CARD DETAILS

The researchers uncovered another unusual example involving an expired election website. The domain elpasoelections.com sounds like it could belong to an election office in El Paso, Texas. However, it previously served El Paso County in Colorado. That county used the address for election information for years before allowing its registration to lapse in February 2026. A domain buyer acquired the address in May.

When researchers examined the website, it displayed an online casino promoting itself to Australian users. The investigation identified a new registrant organization associated with Hong Kong, although that record does not independently establish who operates the casino.

François highlighted the discovery as an example of how a once-legitimate web address can change hands. "It is a good reminder that a familiar-looking address does not tell you who holds it today."

The example extends well beyond politics. An expired website previously used by a government office, nonprofit or business can eventually lead somewhere completely unrelated. For accurate Texas election information, the state's official website is VoteTexas.gov. For voting information elsewhere in the country, you can start with Vote.gov.

The Texas findings follow an Oct. 15 warning from the FBI's Internet Crime Complaint Center. The agency warned that criminals exploit political campaigns to target people across the United States. Some scammers impersonate candidates to solicit fraudulent contributions. Others advertise political merchandise that customers never receive.

The FBI also warned about fraudulent voter-registration messages that direct people to websites designed to collect personal information. Artificial intelligence can make these schemes harder to recognize. Criminals can generate convincing written messages and realistic voices that appear to come from legitimate organizations. However, there's an important limitation to the Texas investigation.

"At this stage we do not know. We did not place test orders, and our research does not include payment records or customer complaints, so we have no evidence either way," François told CyberGuy.

The researchers also did not investigate whether the operators promoted their stores through Google ads, social media or political text messages. They did examine observed DNS traffic and found that some unofficial domains had received lookups. However, those records cannot establish how someone discovered a website or whether they completed a purchase. The findings raise concerns about misleading campaign connections without proving that all the stores committed fraud.

These precautions apply to political merchandise stores and fundraising pages nationwide. They can also help you recognize ordinary shopping scams and websites that impersonate trusted organizations.

Before buying political merchandise or making a donation, find the candidate's established campaign website. Look for the merchandise or contribution page linked directly from that website. For federal candidates, you can also use the Federal Election Commission's database to verify campaign committees and find their reported information. If you're shopping from an unfamiliar retailer, visit its official website independently rather than following a promotional link. This approach also works when someone claims to represent a bank, charity or government agency.

Scammers and unauthorized sellers can register web addresses that closely resemble legitimate ones. Look for misspellings or added words that make an unfamiliar address appear trustworthy. Don't assume a website belongs to an organization simply because the address contains its name or the word "official." You can also use a WHOIS lookup to investigate when a domain was registered. A newly created website deserves closer attention, especially when it claims to represent an established organization. However, domain age alone cannot establish whether a website is legitimate. And remember, HTTPS encryption protects information while it travels between your browser and a website. It does not prove that the site's operator is trustworthy.

WHY VERIFIED SOCIAL MEDIA ACCOUNTS CAN STILL LEAD YOU INTO A SCAM

Before contributing to a political campaign, confirm the organization receiving the payment. Federal political committee websites generally must include a disclaimer identifying who paid for the communication. When applicable, the disclosure also identifies the campaign or committee that authorized it. Look for a "Paid for by" statement and compare the information with official campaign records. Many political campaigns use fundraising platforms such as ActBlue or WinRed. Others use different payment systems. The key is reaching the contribution page through the campaign's verified website. Independent businesses may legally sell political merchandise without supporting a campaign. However, they should not mislead you about who receives your money. A missing or suspicious disclosure deserves attention, but a disclaimer alone does not guarantee legitimacy.

Take a closer look at any online store you've never used before. Search for the company name along with terms such as "reviews," "complaints" or "scam." Read its return and refund policies. Look for a legitimate way to reach customer support. The Better Business Bureau at bbb.org/ can be another place to check for complaints, although the absence of complaints does not prove a company is trustworthy. If you cannot establish who operates a website, consider buying elsewhere.

A scammer may send a message claiming that your voter registration needs attention. Another might pressure you to contribute immediately or purchase merchandise before an offer disappears. The same tactics appear in fake bank alerts and fraudulent delivery notifications. Avoid clicking payment or account-verification links in unsolicited messages. Instead, open the organization's established website yourself. For election-related messages, check information through Vote.gov or your state election office. Be especially cautious about messages asking for passwords, Social Security numbers or payment details.

When shopping online, paying with a credit card generally gives you stronger protections if an order never arrives or a charge is incorrect. Avoid unfamiliar sellers that insist on payment through gift cards, cryptocurrency or wire transfers. Those methods can make recovering your money difficult. Keep your purchase confirmation and review your statements after paying. Also, check whether a political contribution involves recurring payments before submitting it. The FTC's online shopping guide explains how to research sellers and protect yourself when making purchases.

A suspicious shopping site may ask you to create an account before checking out. Never reuse a password from your email, banking or other important accounts. Use a password manager to create unique passwords and enable two-factor authentication (2FA) when available. Strong antivirus software can also help detect malicious downloads and block some dangerous websites. However, it cannot verify whether a political merchandise store is actually affiliated with a campaign. Be selective about the information you share, especially when you cannot verify who operates the website. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

If you've purchased merchandise or sent money through a questionable website, act promptly when something appears wrong.

If you entered sensitive identity information into a suspicious website, visit IdentityTheft.gov for personalized recovery guidance.

What stands out to me about this investigation is that the people behind these stores appear willing to sell merchandise for candidates on both sides of the same race. That raises serious questions about what shoppers are being led to believe. I have no problem with an independent business selling political merchandise. But I do have a problem when a website gives people the impression they're supporting an official campaign without making clear who's actually taking their money. And here's something else worth remembering. The FBI is already warning about election scams involving merchandise that never arrives and fake donation requests. Meanwhile, AI makes it easier than ever to create a convincing website. I wouldn't judge a store by its design or the word "official" in its address. I'd go straight to the organization I want to support and use the links it provides. The same advice applies when you're shopping online or responding to an unexpected request for money. A few extra moments of checking can make a difference.

Have you ever purchased something from a website you thought was official, only to discover later that it wasn't connected to the company or organization you wanted to support? Should websites that falsely claim official affiliations face tougher consequences? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

GM wants drivers to take their eyes off the road by 2028

Tue, 27 Oct 2026 11:44:44 -0400

Would you feel comfortable watching a movie while your car cruises down the highway at 70 mph? General Motors is betting that someday you will. The automaker plans to introduce technology in 2028 that could let drivers take their hands off the steering wheel and their eyes off the road. That means you could potentially answer emails, watch a show or attend a virtual meeting while your vehicle handles the driving.

The technology is expected to debut in the Cadillac Escalade IQ electric SUV. However, GM still has plenty to prove before drivers can safely look away from traffic. The company is testing how people react when a vehicle suddenly needs their attention. That research could help GM determine how much warning drivers need before safely taking control.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

IKEA TURNS TO DRIVERLESS SEMIS WITH NOBODY IN THE CAB

GM already offers Super Cruise, a hands-free driving system available on more than 20 models across Cadillac, Chevrolet, GMC and Buick. It can manage steering, acceleration and braking on compatible roads under certain conditions. However, drivers must continue watching the road and remain ready to take control.

The next version of Super Cruise would remove that constant attention requirement when the eyes-off feature is active. GM plans to introduce it on compatible highways before eventually expanding to other roads. The system will use lidar, radar and cameras to monitor its surroundings. Turquoise lights on the dashboard and exterior mirrors will signal when eyes-off driving is available and active. GM says the technology could arrive as early as 2028. However, the launch depends on further development, safety testing and other requirements. Availability will also depend on state laws.

GM's ambitions are also growing. On Oct. 21, the company announced plans to bring autonomous highway driving to its full-size SUVs and light-duty pickup trucks, including gas-powered vehicles. Those vehicles represent some of GM's biggest sellers. However, the automaker has not announced when the technology will reach those additional models.

Before asking drivers to trust a vehicle with their safety, GM wants to understand what happens when people stop concentrating on driving. At its Global Technical Center in Warren, Michigan, hundreds of volunteers have climbed into real GM vehicles, including the Cadillac Lyriq. However, instead of driving onto an actual highway, they enter an immersive simulator that recreates different road conditions. Researchers can introduce sudden traffic changes, construction zones and hazardous situations.

Meanwhile, sensors monitor drivers' eye movements, heart rates and stress responses. The tests help GM understand how people behave when the technology encounters something unexpected. GM also tests its automated driving technology on closed courses and public roads with trained safety drivers. According to the company, its simulation tools can reproduce the equivalent of 100 years of driving in a single day. That gives engineers opportunities to study dangerous situations without exposing everyday drivers to those risks.

Here's something I didn't expect to see in automotive safety research. GM is asking some participants to play Candy Crush while researchers study their reactions. The game creates an engaging distraction. Players become focused on improving their scores, which gives researchers a way to measure what happens when they must suddenly shift their attention back to driving. According to reporting by The Associated Press, Maureen August, a senior manager at GM Research & Development, explained that the game helps researchers draw participants into an activity before interrupting them.

That interruption is especially important. Consider how long it takes to understand what's happening around you after you've been concentrating on your phone. Now consider making that adjustment while sitting behind the wheel of a moving SUV. At 70 mph, a vehicle travels roughly 103 feet every second. Even a five-second delay means it covers more than 500 feet. That's a lot of highway to travel while someone figures out why the car needs help.

WHAT HAPPENS IF THE WAYMO COMPUTER FAILS?

This may be the biggest question surrounding GM's plans. What happens when an automated vehicle encounters a situation it cannot safely handle? Perhaps there's debris blocking the highway. Maybe road markings disappear during construction. An unexpected maneuver by another driver could also create a dangerous situation.

GM's engineers are studying how much warning drivers need before taking control. Researchers also examine whether people understand the system's alerts and feel comfortable trusting the technology. However, an eyes-off system must be designed around the possibility that someone cannot respond immediately. That's why the vehicle's ability to handle unexpected conditions and safely manage a failed takeover becomes especially important. GM has not yet publicly detailed every situation its planned system will handle or exactly how it will respond when a driver fails to take over.

Several automakers already offer systems that reduce the work involved in highway driving. However, their capabilities vary considerably. Ford's BlueCruise allows hands-free driving on compatible roads, but drivers must continue paying attention. Tesla's Full Self-Driving (Supervised) can handle many driving tasks, although it still requires active human supervision.

Mercedes-Benz previously introduced its DRIVE PILOT system, which allowed conditional eyes-off driving in limited situations. However, the automaker has since pulled back from that technology in the U.S. as it develops its next generation of automated driving systems. GM's larger ambition is to make eyes-off driving available at highway speeds across a broader network of compatible roads. The company hopes to expand the capability to additional models after the Escalade IQ.

There's a financial incentive behind the push toward automated driving. Automakers increasingly offer advanced features through paid software subscriptions. GM already charges for continued Super Cruise access after the included service period expires. According to the company's August 2026 update, equipped vehicles include three years of service, followed by plans starting at $39.99 per month.

GM has not announced pricing for its future eyes-off technology. Some industry analysts believe drivers will be more willing to pay for technology that frees up their time behind the wheel. Still, there's a practical question for buyers. If you're already paying a premium for a luxury SUV, how much more would you be willing to spend each month to use its most advanced driving features?

WAYMO RECALLS ROBOTAXIS OVER CONSTRUCTION-ZONE RISK

If you're considering a vehicle with advanced driving technology, pay attention to what the manufacturer actually promises. Today's hands-free systems generally require you to keep watching the road. GM's planned eyes-off feature would allow you to look away only when the system is properly engaged under compatible conditions. Before paying for that capability, you'll want to know where it works and how the vehicle handles emergencies. It's also worth asking what happens if the system requests your attention while you're distracted.

Also, don't overlook the ongoing cost. Subscription fees could make a vehicle more expensive to own than its original purchase price suggests. And remember, GM's planned system remains under development. Until a manufacturer explicitly authorizes eyes-off operation under the appropriate conditions, keep watching the road and follow the system's instructions.

I love the idea of a less stressful drive, especially on those long stretches of highway where you're staring at the same traffic for miles. But handing over control is one thing. Taking my eyes off the road while traveling at highway speed is another. GM's research is encouraging because the company is studying how people actually behave when they're distracted. Still, I want to know what happens when the car encounters something it wasn't expecting. And if automakers plan to charge us every month for this technology, they'd better be able to show that it's safe and dependable. I'd be curious to try it, but I'd want a lot more evidence before settling in to watch a movie.

Would you trust your car enough to watch a movie while it drives at 70 mph, or would you always want to keep an eye on the road? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Data brokers don't just collect facts. They guess about you

Mon, 26 Oct 2026 16:00:09 -0400

They know where you live. They may know your phone number, your relatives' names and roughly what your house is worth. By now, most people have at least a vague sense that data brokers collect personal information. What many don't realize is what happens next.

Data brokers also analyze that information. They use algorithms, compare records from different sources and sort people into categories that predict their interests, circumstances and behavior. Those predictions can involve your health, finances, religious beliefs and potential vulnerabilities.

WHY CAREFUL PEOPLE STILL END UP ON DATA BROKER SITES

Some may be wrong. Others could reveal sensitive details you never intended to share. And depending on the company and the type of information involved, those profiles may be sold or shared with businesses you have never heard of. Here's a closer look at the labels data brokers assign to you, how they come up with them and what you can do to protect your personal information.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

Data brokers do far more than maintain databases of addresses and phone numbers. Some build detailed profiles designed to help advertisers identify specific audiences. The Federal Trade Commission documented this practice years ago. Its investigation found that brokers combined information from multiple sources to infer sensitive characteristics, including income, religion, political views and health conditions.

Acxiom, a major data company, developed a segmentation system called PersonicX that grouped households into lifestyle categories. One documented historical category was called "Rural Everlasting." According to the FTC, it described older adults with relatively low income and educational attainment. Other categories included "Urban Scramble" and "Mobile Mixers."

These were classifications built from data, not personal descriptions written by the people involved. The FTC also documented how companies used location information to create even more specific advertising audiences. For example, InMarket offered audience categories such as "Christian church goers," "parents of preschoolers," and "wealthy and not healthy." The FTC subsequently restricted InMarket's use and sale of sensitive location data.

Then there was Oracle's BlueKai advertising business, which helped advertisers use extensive consumer data for targeting. Oracle shut down its advertising products in September 2024. Still, its history illustrates how sophisticated this industry became. The important point is that a label doesn't have to be accurate to influence how a company views you.

Want to see how much of your personal information may already be exposed? Get a free scan to find out what data brokers may have on you at CyberGuy.com.

Some of these classifications sound harmless. Others are surprisingly personal. Here are examples of the information brokers have historically inferred or used to create consumer segments.

Data broker research and enforcement cases have documented categories involving:

A major concern is that these classifications can originate outside the medical system. HIPAA protects health information handled by covered healthcare organizations and their business associates. However, health-related information independently gathered or inferred by other businesses may fall outside HIPAA's protections.

For example, searching for information about diabetes doesn't mean you have diabetes. You could be researching the condition for a family member. Yet advertising systems may still use that activity as one of several signals when building a profile. Other federal and state privacy laws may apply, but they don't necessarily provide the same protections as HIPAA.

AMAZON ABOUT YOU MAY KNOW YOU A LITTLE TOO WELL

Data companies have also offered categories based on estimated income, spending behavior and financial circumstances. These can include people classified as affluent, price-sensitive or likely to respond to certain financial offers. One particularly troubling example comes from the Justice Department's case against Epsilon Data Management. According to federal prosecutors, Epsilon used sophisticated modeling to identify consumers likely to respond to solicitations. The company sold information about more than 30 million Americans to operators of fraudulent schemes, including fake sweepstakes promotions. Epsilon agreed to pay $150 million as part of its deferred prosecution agreement. This is a documented example of consumer data being used to help fraudsters identify potential victims.

Data brokers have also inferred people's religious interests and political leanings. These predictions may draw on information such as location patterns, purchases, public records and other available data. For example, the FTC documented the use of a "Christian church goers" advertising segment. A person visiting a church doesn't necessarily belong to that faith. Similarly, someone researching a political candidate doesn't automatically support that candidate. Nevertheless, profiling systems can use these signals to group people into audiences.

Another category focuses on what may be happening in your personal life. Data companies have developed segments involving parents with young children, empty nesters and households at different stages of life. These classifications can help businesses decide what products or services to advertise. However, they can also reveal potential pressure points. Someone approaching retirement may receive different financial offers than a young parent. A household believed to be managing health expenses may attract another type of marketing. And when those assumptions are wrong, the resulting profile may still influence what someone sees.

Consider what you've done online recently. Maybe you searched for joint pain relief. Perhaps you compared retirement plans or looked up treatment options for a relative. Individually, these activities might reveal very little. However, companies can combine information from websites, apps, purchase histories, public records and commercial databases.

Then predictive models look for patterns. For example, a company may consider your age range, estimated income and browsing activity when deciding whether you fit a particular advertising category. These classifications are often called modeled attributes or inferences. They represent predictions rather than verified personal facts. And here's the problem: a company buying access to an audience segment may use the prediction without knowing how accurately it describes each person.

Basic information helps a scammer contact you. More detailed personal information can help make the approach believable. For example, someone who knows your name and address could send a convincing-looking financial notice. Now suppose that same person also has information suggesting you're approaching retirement or researching medical expenses. A criminal could use those clues to tailor a fraudulent Medicare offer, investment pitch or fake medical service.

This doesn't mean every scammer buys sophisticated consumer profiles. However, the Justice Department's case against Epsilon Data Management shows how targeted consumer information can end up in the hands of fraudsters. The company sold consumer data to operators of fraudulent schemes, helping them identify people more likely to respond.

Meanwhile, the FBI reported that Americans age 60 and older lost approximately $7.7 billion to internet crime in 2025, up from $4.9 billion in 2024. While those losses weren't all connected to data brokers, the documented sale of targeted consumer lists shows how personal information can help criminals identify potential victims and make their scams more convincing.

Finding every profile attached to your name can be difficult. Unlike a credit report, there isn't one centralized system where you can review all the marketing predictions companies have generated about you. However, some state privacy laws give residents rights to access, correct or delete personal information, including certain inferences.

California provides one important example. Under the California Consumer Privacy Act, eligible residents can request information held by covered businesses, subject to legal exceptions. California also launched its Delete Request and Opt-out Platform, known as DROP at privacy.ca.gov/DROP/, in January 2026.

It allows eligible California residents to submit one deletion request covering registered data brokers. Those companies began processing requests in August 2026. Matching records, including inferences, generally must be deleted unless an exception applies. Other states have different privacy protections, so your options depend on where you live.

IS YOUR PERSONAL DATA CHANGING WHAT YOU PAY ONLINE?

You may not be able to eliminate every prediction about yourself. However, you can take practical steps to reduce how much personal information remains available.

Here's where to start:

Reducing publicly accessible personal information can make it harder for unfamiliar businesses and scammers to build detailed profiles. However, removal services cannot guarantee that every existing inference will disappear or prevent companies from collecting new information.

I've warned you before about data brokers collecting your personal information, but I find the predictions they make about us even more troubling. Think about it. You could search for a medical condition on behalf of someone you love and end up in a category suggesting you have that condition yourself. Someone buying access to that profile may have no idea the assumption is wrong. And when personal information gets into the wrong hands, it can help scammers make their pitches sound much more convincing. What concerns me is how little most of us know about the profiles being built around our names. You may never see every label a company assigns to you, but you can start reducing the information available to build those profiles. I recommend checking what appears when you search for yourself and taking advantage of the privacy protections available in your state. A reputable data removal service can also help by automatically sending removal requests to data brokers and continuing to check when your information reappears. You won't disappear from the internet, but you can make it harder for strangers to assemble a detailed profile of your life.

What would concern you more, a data broker accurately predicting something deeply personal about you or selling a completely false prediction as if it were fact? Let us know by writing to us at CyberGuy.com

Sign up for my FREE CyberGuy Newsletter

Elon Musk vows to give every US child SpaceX stock

Mon, 26 Oct 2026 12:12:29 -0400

You probably don't expect Elon Musk to show up in your child's investment portfolio. But that's exactly what could happen next year. The billionaire behind SpaceX has made a remarkable promise. He says he'll give one share of his space company to every kid in America.

We're talking about a potential giveaway worth more than $10 billion. Free SpaceX stock for kids sounds appealing, especially when you're thinking about your child's financial future. But before you start looking for a way to sign up, there are some pretty important details Musk has yet to explain.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

NEW BOOK ON ELON MUSK EXAMINES THE BILLIONAIRE’S MIND, MOTIVATION AND MAKING LIFE MULTI-PLANETARY

Musk recently announced on X that he plans to give one of his SpaceX shares to every kid in America in 2027. "Next year, I will give one of my SpaceX shares to every kid in America. This will be the first of many," Musk wrote.

That's a sweeping commitment. SpaceX, which went public in June 2026, operates the Starlink satellite internet network and develops rockets for commercial spaceflight. Now Musk wants millions of American children to own a tiny piece of the company. The promise has already attracted attention because of its enormous potential cost. However, Musk hasn't provided a detailed plan explaining how the shares would reach families or which children would qualify.

For perspective, SpaceX shares closed at $147.49 on Oct. 23. There are just over 72 million Americans under age 18. Using that closing price, giving every one of them a share would cost approximately $10.6 billion. For a family with two eligible children, that could mean roughly $295 worth of SpaceX stock based on the Oct. 23 valuation. Of course, that amount could change considerably by 2027. Stock prices rise and fall, and owning a single share offers no guarantee of future profits. Still, there's something intriguing about the idea of a child becoming an investor before graduating from high school. If SpaceX continues to grow, that share could become more valuable over time. On the other hand, families could also watch its value decline.

The timing is especially interesting. Just one day before Musk made his announcement, artificial intelligence company Anthropic revealed a major philanthropic commitment of its own. The company behind Claude AI announced plans to commit 5% of its shares to a new Anthropic Public Benefit Fund, subject to stockholder approval. The fund could support nonprofit organizations or provide direct financial assistance to certain populations, including workers affected by AI-driven economic changes. The company also described a structure that could increase its contribution as its valuation grows, subject to future board decisions.

Musk responded to Anthropic's announcement by recommending that companies give shares directly to the public. He then followed up with his own pledge involving SpaceX. This exchange raises an interesting question about the enormous wealth accumulating around AI. As technology companies become increasingly valuable, executives are facing greater scrutiny over how that wealth should benefit the public.

SEN DAVE MCCORMICK: TRUMP ACCOUNTS GIVE ALL AMERICANS A STAKE IN PROSPERITY

Under the Trump Accounts program, the Treasury Department began automatically enrolling eligible children in tax-advantaged investment accounts on Oct. 1. Parents or guardians must still claim and activate those accounts before managing them. A separate federal pilot program provides a one-time $1,000 contribution for qualifying U.S. citizen children born between Jan. 1, 2025 and Dec. 31, 2028. Families must make an election to receive that contribution.

SpaceX President and Chief Operating Officer Gwynne Shotwell and her husband, Robert Shotwell, previously pledged to donate one SpaceX share to the Trump Account of each of more than 2 million children. Their contribution targets children ages 11 to 17 in areas with lower-than-average household incomes, with additional emphasis on communities near their home in central Texas.

New Treasury regulations that took effect Sept. 30 also allow qualifying donations of publicly traded company shares into Trump Accounts. Under those rules, donated shares generally must be held for five years or until the account's special growth period ends, whichever comes first. Musk's proposal could potentially use this system, but he has not publicly explained the exact distribution process. That's an important unanswered question because Trump Accounts have established eligibility requirements and investment rules. Musk's announcement appears to cover a much broader population of children, although he has yet to define exactly who qualifies.

A pledge this large naturally comes with logistical challenges. For starters, Musk hasn't clarified whether every child under 18 would qualify or whether the giveaway would be limited to U.S. citizens. It is also unclear how children would receive their shares.

If the giveaway uses Trump Accounts, families would need to understand how eligibility and account requirements apply. If Musk chooses another distribution method, parents may need some type of custodial account to hold stock for a minor. But Musk has not identified a specific process for families to claim his promised shares.

There are also financial questions. Would families face any tax consequences? Could children sell their shares immediately, or would restrictions apply? And when during 2027 would the transfers happen? For now, there's no confirmed application process for Musk's nationwide pledge. Parents should be cautious of anyone claiming otherwise.

UKRAINE'S STARLINK RESTORED AS ELON MUSK CLAIMS KYIV VIOLATED TERMS OF SERVICE 'TO KILL PEOPLE'

If you have children or grandchildren, this is certainly a development worth following. A free share of SpaceX could introduce young people to investing and give them a financial interest in a company developing space technology. But I'd encourage parents to be patient. Musk has not announced an official enrollment process for his proposed giveaway. That means you should be especially suspicious of websites or social media messages claiming you can already register your children for free SpaceX stock.

We have previously reported on scams using Elon Musk's name to promote questionable products. A high-profile stock giveaway could provide another opportunity for impersonators to target families. Avoid sharing your child's Social Security number, financial information or other sensitive details with anyone promoting an unverified giveaway. For legitimate information about Trump Accounts, visit the IRS website at irs.gov/trumpaccounts directly. That official program already has an established enrollment process, but signing up for a Trump Account does not guarantee your child will receive a share from Musk's pledge. If SpaceX eventually announces a formal process, review the eligibility requirements and any account restrictions before participating.

I've seen Elon Musk make some pretty ambitious promises over the years, but offering a piece of SpaceX to every child in America is certainly an attention-grabber. What interests me most is the idea of giving young people an ownership stake in a company helping shape the future of space exploration. There could be real financial value in that over time. Still, I want to see the details before getting too excited. A promise involving billions of dollars and millions of children deserves a clear explanation of how it will work. I also find the timing fascinating. With Anthropic making its own massive commitment to public benefit, we're beginning to see tech billionaires debate who should share in the wealth their companies create. I'll be watching to see whether Musk follows through and how much of that wealth actually reaches American families.

Would you trust Elon Musk to give your child a financial head start, or do you think billionaires should do more than promise shares on social media? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Giant robotic claws will grab dead satellites in space

Sun, 25 Oct 2026 08:54:07 -0400

Space is getting crowded, and I'm not talking about astronauts. Thousands of pieces of junk are circling Earth at incredible speeds. Some are dead satellites. Others are leftover rocket parts or fragments from past collisions. Any one of them could cause serious trouble if it hits a working spacecraft.

Now Britain has a pretty wild solution. It's developing a robotic spacecraft with giant claws that can grab dead satellites and move them toward a fiery end in Earth's atmosphere. Think of a garbage truck in orbit, except this one has to track down its trash while both objects are traveling thousands of miles per hour.

The UK is putting roughly $81 million behind the project. And if everything goes according to plan, the mission could change how we deal with the growing mess above our heads.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

WILL A FOUR-ARMED ROBOT REPLACE ASTRONAUTS IN SPACE?

The UK Space Agency has selected aerospace company ClearSpace UK to develop a spacecraft specifically designed to remove dead satellites from orbit. The contract is valued at approximately $81 million. The project is part of Britain's Active Debris Removal mission, known as UK ADR. The spacecraft is targeted for launch in 2029 from SaxaVord Spaceport in Scotland's Shetland Islands.

Its first job will be to remove two defunct UK-registered satellites from low Earth orbit. The government wants both satellites removed by 2032. If successful, the mission would demonstrate that one spacecraft can capture and dispose of multiple dead satellites without being sacrificed after its first cleanup. That could make future operations far more practical, especially as the number of satellites in orbit continues to grow.

Catching a satellite sounds straightforward until you consider what's happening in orbit. Objects in low Earth orbit typically travel at roughly 17,000 mph or faster. Some dead satellites may also tumble, making them difficult to approach safely. That's where ClearSpace's robotic technology comes in. The spacecraft will use a specialized capture system to approach and secure an inactive satellite. First, it must carefully coordinate its movements with the target. Then its robotic capture mechanism will take hold of the object.

Once the satellite is secured, the spacecraft will move it into a lower orbit and release it. Atmospheric drag will eventually pull the abandoned satellite down, causing it to reenter Earth's atmosphere, where it is expected to burn up. The cleanup spacecraft itself is being designed for potential refueling and reuse. That means it could remain in orbit for future work instead of ending its mission after disposing of one satellite. Of course, engineers still have to prove the technology can handle these demanding operations safely.

You might assume there's plenty of room in space for a few broken satellites. Unfortunately, some of the orbital regions where satellites operate are becoming increasingly crowded. According to the European Space Agency's space debris statistics, updated October 14, 2026, approximately 47,140 objects are regularly tracked in Earth's orbit. That figure includes functioning satellites, inactive spacecraft, rocket bodies and debris.

And those are only the objects large enough to track reliably. ESA estimates that millions of smaller pieces also surround Earth. The danger comes from their enormous speeds. A piece of debris measuring just one centimeter can carry enough energy to disable a spacecraft. ESA has also warned that an impact of that size could penetrate the protective shielding of the International Space Station.

Now consider what happens when two large objects collide. They can break apart and produce many additional fragments, each capable of damaging something else. Scientists call this potential chain reaction the Kessler syndrome. If enough collisions occur, certain orbital regions could become extremely hazardous for future missions. ESA's 2026 Space Environment Report warns that active debris removal will be necessary to prevent long-term debris growth driven by collisions.

TRUMP TO TRANSFORM SPACEFLIGHT FROM SPECTACLE TO STATUS QUO TARGETING 3 LAUNCHES PER DAY

The danger extends beyond expensive satellites. Astronauts aboard the International Space Station face risks from debris traveling through orbit. In November 2021, crew members took shelter inside their spacecraft after a Russian anti-satellite weapons test created a dangerous cloud of debris. NASA confirmed that astronauts and cosmonauts closed hatches and sheltered inside docked Dragon and Soyuz spacecraft while teams evaluated the threat.

Fortunately, the station and crew remained safe. The incident demonstrated how quickly debris from a satellite breakup can disrupt operations in orbit. A serious impact could damage critical systems or puncture a spacecraft's pressurized structure. That's why space agencies continuously monitor debris and sometimes adjust spacecraft orbits to avoid potential collisions. Removing larger abandoned satellites could help prevent future collisions that create even more fragments.

Here's another concern that deserves attention. Some space debris eventually returns to Earth, and certain components can survive the intense heat of atmospheric reentry. Most smaller debris burns up. However, larger objects and components made from heat-resistant materials can sometimes reach the ground. As rocket launches increase, researchers are paying closer attention to this danger.

Space environmentalist Ewan Wright, from the University of British Columbia, told Space.com that approximately 124 rocket stages reentered Earth's atmosphere uncontrolled in 2024. He estimated that if that annual level continued for a decade, there would be a 33% probability of at least one person somewhere in the world being killed by falling rocket debris. That estimate describes a cumulative global risk from rocket stages, rather than the danger posed by Britain's two satellite-removal targets.

ESA also reports that the risk of casualties from uncontrolled reentries has increased in recent years, although the overall probability remains low compared with many everyday risks. The takeaway here is that removing debris from orbit requires careful planning. Operators must consider what happens when that material eventually returns to Earth.

Britain's mission could have implications well beyond the two satellites it plans to remove. For years, many satellites were designed primarily to complete their missions and then be retired. Some remain in orbit long after they stop functioning. Now companies are developing spacecraft capable of approaching other satellites and performing tasks that once seemed incredibly difficult.

ClearSpace's mission could help prove that robotic spacecraft can safely capture objects that were never designed for servicing. Its planned refueling capability is particularly interesting. Instead of launching a new cleanup vehicle for every job, operators could eventually service an existing spacecraft and send it after more debris.

That could open the door to a new commercial industry. Satellite operators might eventually pay specialized companies to remove aging equipment or extend the useful lives of working spacecraft. However, the UK mission remains in development. Its long-term commercial potential will depend on whether the technology performs as expected.

You probably don't spend much time thinking about abandoned satellites while checking the weather or following GPS directions. But the technology operating above Earth plays an enormous role in everyday life. Satellites support communication networks, provide navigation signals and deliver information used for weather forecasting. They also help scientists monitor changes on Earth and support emergency response operations.

GPS satellites operate in medium Earth orbit, much higher than the low Earth orbit debris targeted by Britain's mission. Still, the broader effort to keep orbital regions safer helps protect the infrastructure that supports satellite-based services. A collision that disables an important spacecraft could disrupt operations and force companies or government agencies to rely on backup systems. Replacing a damaged satellite can also be expensive.

Britain's robotic cleanup mission won't eliminate the space junk problem overnight. But successfully removing two abandoned satellites could help establish a practical way to deal with dangerous objects already in orbit. And with thousands of additional satellites being launched, finding a reliable way to retire them safely could become increasingly important.

I have to admit, the idea of a spacecraft chasing down dead satellites with giant robotic claws sounds like something Hollywood dreamed up. But I find the technology fascinating, especially when you consider how much we depend on satellites without giving them a second thought. What really caught my attention is the possibility of reusing the cleanup spacecraft. That could make removing space junk a routine service rather than an occasional experiment. Still, I wonder whether we're moving fast enough. With companies launching more satellites every year, cleaning up two abandoned spacecraft feels like a small start. I'd like to see satellite operators take greater responsibility for what they leave behind. After all, we wouldn't tolerate companies abandoning broken equipment on our highways. Why should Earth's orbit be any different?

Should companies launching satellites into space be required to pay for removing them when they stop working, or should governments take responsibility for cleaning up the growing mess? Let us know by writing to us at Cyberguy.com

Fake Social Security statement email hides a scam

Sun, 25 Oct 2026 08:35:25 -0400

There's something about an email from Social Security that makes you pay attention. After all, we're talking about your retirement benefits and years of earnings. So when a message lands in your inbox saying your statement is ready, clicking to take a look might seem perfectly reasonable. That's exactly what scammers are counting on.

Take a look at this email below that recently landed in an inbox. It looks professional, carries the Social Security Administration (SSA) logo and includes a button to view a statement. However, a closer inspection reveals something the sender probably hoped you wouldn't notice. The message came from an email address with no apparent connection to the federal government.

Even more concerning, the Social Security Administration's Office of the Inspector General warned in February 2026 about a significant increase in fraudulent emails using this same type of trick. Here's how to spot the warning signs in this email and protect yourself before scammers get their hands on your personal information.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

FAKE CHATGPT BILLING EMAILS CAN STEAL YOUR LOGIN

The message arrives with the subject line "Statement Support Was Posted to Your Account Details Report." The sender appears as "Social Security Administrator," which immediately gives the impression of an official government communication. Inside, the email announces, "Your statement is ready." It goes on to say your 2025 Social Security statement is available and invites you to review your earnings record and benefit estimates online.

There's even a neatly formatted box showing the year as 2025 and the status as "Ready." Below that sits a prominent blue "View statement" button. The message also displays what looks like the official Social Security website address. For someone quickly checking email before work or while getting through a crowded inbox, this could easily pass as a routine government notification.

Here's where the message falls apart. Although the sender's display name says "Social Security Administrator," expanding the sender information reveals an address using the domain loradmiadministraciones.com . That's a major red flag. The address has no apparent relationship to Social Security, and the sender's domain does not end in .gov. Scammers can customize their display names to impersonate government agencies or other trusted organizations.

According to the Social Security Administration, most legitimate SSA emails come from government email addresses. However, the agency does use some authorized outside services, including certain communications from echosign.com and approved marketing firms. That means you should examine the complete sender address and verify any unexpected request independently. Even a familiar-looking sender address can be spoofed.

FAKE PATIENT PORTAL SCAM CAN STEAL YOUR LOGIN AND INFECT YOUR PC

The email encourages the recipient to click "View statement" to access what appears to be a routine financial document. That button is a central concern. A phishing link can redirect you to a fraudulent website designed to steal account credentials or sensitive personal information. Some malicious links can also lead to malware downloads.

We haven't verified the destination behind the button in this particular email. However, the suspicious sender address and resemblance to known SSA phishing campaigns make the message unsafe to trust. The SSA's inspector general has specifically warned about fake statement notifications containing dangerous links. Those links could expose personal information or compromise devices.

One interesting thing about this example is how little pressure it puts on the reader. There's no demand for immediate payment or warning that benefits will disappear within 24 hours. Instead, the message offers something people might genuinely want to see: their Social Security statement.

It also uses the generic greeting "Dear Beneficiary," despite appearing in an inbox associated with a named recipient. That lack of personalization provides another reason to investigate, although generic greetings alone cannot prove an email is fraudulent. The professional appearance does much of the work. The SSA logo and government-style formatting create an impression of credibility. Yet none of those visual elements establishes who actually sent the email.

Yes, and that's what makes this scam particularly convincing. According to the SSA's official guidance, people with a personal my Social Security account generally receive an annual email reminder approximately three months before their birthday. The agency also sends certain notifications about new messages and notices. Scammers take advantage of these legitimate communications by creating messages that resemble official SSA reminders.

Before opening a statement or following instructions in an unexpected email, take a few seconds to investigate the message.

On a computer, click the sender's name or expand the message details to reveal the full email address. On an iPhone or Android phone, tap the sender's name or address to view additional information. The exact method depends on your email app. Look closely at the domain. Watch for unfamiliar company names, extra characters or addresses unrelated to Social Security.

On a computer, hover your mouse over a button or link without clicking. Your browser or email app may display its actual destination. On a phone, some email apps let you touch and hold a link to preview its address. Be careful because certain apps may open or begin loading a preview. When in doubt, skip this step and visit the official SSA website yourself. Remember that a website beginning with HTTPS can still be fraudulent. Encryption alone does not prove that a website belongs to the government.

The most reliable approach is to open a new browser window and visit ssa.gov yourself. You can also contact Social Security at 1-800-772-1213 using the number published on its official website. Avoid using contact details provided in a suspicious email.

You can check your earnings record and estimated retirement benefits without clicking an emailed statement link.

If you don't already have an account, follow the official registration instructions. Creating an account can also help you monitor your Social Security information for unexpected activity.

A convincing email can catch anyone off guard, especially when it concerns retirement benefits or personal financial information. These practical steps can help protect your identity and accounts.

Even when an email looks authentic, use the SSA website independently to access your information. Avoid downloading unsolicited statement attachments or documents that claim to come from the agency.

Use a unique password for your Login.gov or ID.me account and keep multifactor authentication enabled. Also protect the email account associated with your Social Security profile because criminals may target it to reset other passwords.

Strong antivirus software can help identify dangerous websites and block known malware downloads. Keep your operating system, browser and security software updated to protect against newly discovered threats. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

Never provide your Social Security number or financial account information through an unexpected email link. If someone claims to represent Social Security and requests sensitive details, contact the agency through its official website.

Review your earnings history periodically through your personal SSA account. Look for unfamiliar earnings or changes to account details. If you notice something suspicious, contact Social Security directly for assistance.

Scammers can collect personal details from people-search websites and data brokers to make their messages more convincing. Consider removing your information from these websites or using a reputable data removal service to handle supported requests. Although this won't stop every phishing attempt, it can limit some of the personal details criminals find online. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

The SSA Office of the Inspector General accepts reports of Social Security impersonation scams at oig.ssa.gov/report/ . Save the suspicious sender address and relevant screenshots. You can also report the message through your email provider's built-in phishing-reporting feature. Once you've preserved the information needed for a report, delete the email.

Your next steps depend on what happened after you clicked. Here's how to respond.

Close the suspicious website immediately. Avoid interacting with additional prompts or downloading files. If the site attempted a download, check your device's Downloads folder without opening the file. Simply visiting a phishing page does not automatically mean your information was stolen. However, keep your browser and operating system updated, and run a security scan with strong antivirus software if you notice anything unusual.

Change the affected password immediately through the legitimate website, preferably using a trusted device. If you reused the password anywhere else, change it on those accounts too. A reputable password manager can help you create strong, unique passwords for each account and alert you to passwords that may have been exposed in a data breach. Next, review account activity and recovery settings. Check for unfamiliar sign-ins or unauthorized changes. Contact Login.gov, ID.me or the affected service through its official support channels if you believe someone accessed your account.

Visit IdentityTheft.gov for a personalized recovery plan. Consider placing a free credit freeze with Equifax, Experian and TransUnion. This can help prevent criminals from opening new credit accounts using your information. You should also review your credit reports and monitor financial accounts for unauthorized activity.

Avoid opening the downloaded file if you haven't already. If you ran it, disconnect the affected device from the internet and perform a scan with strong antivirus software. If you suspect malware installed successfully, use a separate trusted device to change sensitive passwords. Consider getting professional assistance before signing back into financial accounts on the affected computer.

Contact your bank or financial institution immediately. Explain what happened and ask about securing your accounts or disputing unauthorized transactions. You should also report the incident to the FBI's Internet Crime Complaint Center at ic3.gov/ and the Federal Trade Commission at reportfraud.ftc.gov/ . The SSA's inspector general recommends these reporting channels for victims of Social Security impersonation scams. If you experienced financial loss, consider filing a report with local law enforcement.

What concerns me about this particular scam is how routine the email feels. There are no dramatic threats or wild promises. It simply tells you that your Social Security statement is available, something millions of Americans have a legitimate reason to check. And the design is convincing enough that someone could click before thinking twice. I've said it before, and I'll keep saying it: A polished email doesn't tell you anything about who's really behind it. In this example, checking the sender's actual address exposed a serious warning sign immediately. My advice is simple. When an email involves your Social Security information, go directly to the government website and check for yourself. A few extra seconds of caution could save you from a much bigger headache.

Have you ever received an official-looking government email that turned out to be a scam? What gave it away, or did you almost fall for it? Let us know by writing to us at Cyberguy.com

Your credit can look normal while someone steals your identity

Sat, 24 Oct 2026 12:54:34 -0400

You check your credit score, see nothing unusual and assume your identity is safe. But what if someone has already stolen your personal information, and your credit report shows absolutely nothing? That's entirely possible.

Credit monitoring can help detect certain types of identity theft, particularly fraud involving new credit accounts. However, criminals can also target your existing bank accounts, retirement savings, government benefits and phone number without triggering a traditional credit alert. As a result, a clean credit report can give you a false sense of security. Here's what credit monitoring can catch, what it might miss and how to better protect yourself.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, Oct. 31, at 11 AM ET/8 AM PT. Register for free now at CyberGuyLive.com.

IDENTITY THEFT PROTECTION IS CHANGING: WHAT TO LOOK FOR

Credit monitoring tracks changes to your credit file. Depending on the service, it can alert you to suspicious activity involving your credit history.

Common alerts include:

These alerts can help you discover new account fraud before the damage grows. However, credit monitoring depends on information that lenders and other companies report to credit bureaus. Therefore, it cannot reliably detect identity theft that occurs entirely outside the credit reporting system.

Criminals have several ways to misuse your information, steal money or make you more vulnerable to fraud without triggering a traditional credit monitoring alert. Here are six situations worth watching for.

A criminal gains access to your existing checking account, savings account, retirement account or payment app. Because the account already exists, the takeover may never appear on your credit report. Instead, you might first discover the theft through an unfamiliar transaction or a notification from your financial institution.

Someone uses your Social Security number to file a fraudulent tax return or claim government benefits. You may receive an IRS notice about a tax return you never filed. Alternatively, you could discover unemployment benefits claimed in your name. Neither situation necessarily changes your credit score.

A thief uses your health insurance information to receive medical care, prescriptions or equipment. You might then receive bills for services you never used. Even worse, someone else's medical information could end up in your records. Traditional credit monitoring generally will not detect the misuse itself, although unpaid debts could eventually create other financial complications.

Criminals may convince your mobile carrier to transfer your phone number to a SIM card or device they control. Once they have your number, they may intercept certain verification codes and attempt to access your accounts. A sudden loss of cellular service could be an early warning sign, especially if you did not request a change.

A scammer tricks you into authorizing a wire transfer, sending money through a payment app or purchasing gift cards. Because you initiated the payment, even under false pretenses, traditional credit monitoring may have no indication that anything happened. Your financial institution might have separate fraud detection systems, but those protections vary.

Your name, phone number, address and other personal details may appear on people search websites or data broker databases. Criminals can use that information to create convincing phishing messages or impersonation scams. Although the exposure itself does not necessarily mean someone has stolen your identity, it can make you a more attractive target. The Federal Trade Commission identifies unauthorized bank withdrawals, unfamiliar medical bills and fraudulent tax filings among the warning signs of identity theft.

SOMEONE COULD HAVE OPENED AN ACCOUNT IN YOUR NAME. CHECK NOW

A credit score provides a snapshot of your creditworthiness based on information in your credit file. It does not show every account you own or every place someone might use your personal information. For example, someone could access your retirement account while your credit score remains unchanged.

Similarly, criminals might use your phone number to get into an existing account without ever applying for credit. That's why it's important to review your actual credit reports rather than relying on your score alone. Even then, you'll need to check your other accounts separately.

Fortunately, you can look for suspicious activity without paying for an expensive monitoring service. Start with these six habits.

Check your bank statements, investment accounts, retirement accounts and payment apps for unfamiliar transactions. Also, enable transaction and security alerts whenever your financial institutions offer them.

Pay attention to IRS notices about returns you did not file or income from employers you don't recognize. You can also review your federal tax account through the official IRS website at irs.gov. You can also request a free six-digit Identity Protection PIN (IP PIN) from the IRS. This helps prevent someone else from filing a fraudulent federal tax return using your Social Security number. The IRS issues a new IP PIN each year.

Review your earnings history periodically to see whether it matches your actual employment. You can access your information through your my Social Security account at ssa.gov/myaccount. Unexpected earnings may require further investigation.

Look for unfamiliar medical appointments, prescriptions, procedures or insurance claims. If something looks suspicious, contact your health insurance company or medical provider directly.

Ask your carrier about account PINs, port-out protection and SIM swap safeguards. Additionally, consider using an authenticator app or security key instead of text-message verification when available.

Search for your name, phone number and address to identify information exposed through people-search websites. You can request removal from individual sites or consider a reputable data removal service.

Pro tip: Choose one day each month to review your accounts and important records. You can combine it with a bill payment routine to make the habit easier to maintain.

Credit monitoring remains useful, but it cannot catch every type of identity theft. Some identity theft protection services offer broader monitoring that can help identify suspicious activity involving financial accounts, personal information and online accounts. However, the features and level of protection depend on the provider and plan you choose.

Before signing up, compare the features, coverage limits and costs. Pay attention to which financial accounts qualify for monitoring and whether the service offers restoration assistance if identity theft occurs. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com

Remember: No identity theft protection service can prevent every scam or detect every instance of fraud. These services work best alongside strong passwords, multifactor authentication, account alerts and regular reviews of your financial statements.

If you suspect someone is using your information, act quickly. You do not need to wait for a credit monitoring alert.

You can also review your credit reports at AnnualCreditReport.com. The FTC confirms that free weekly online reports are available from the three nationwide credit bureaus.

I always encourage people to keep an eye on their credit, but I wouldn't rely on a credit score to tell me whether my identity is safe. Someone could be accessing an existing financial account or misusing personal information without causing any immediate change to that score. That's why I recommend checking financial statements, turning on account alerts and taking advantage of additional safeguards when they're available. Identity theft protection services can provide another layer of monitoring, but you still need to pay attention to activity in your accounts.

When was the last time you checked your bank accounts, medical statements or phone account for signs of identity theft rather than relying on your credit score? Let us know in the comments below. Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Newsletter

Pennsylvania law requires delivery robots to yield to pedestrians, yet protester still faced arrest

Sat, 24 Oct 2026 06:46:22 -0400

Most people see a food delivery robot rolling down the sidewalk and simply walk around it. But one Philadelphia woman decided she wasn't moving.

She stood directly in front of an Uber Eats delivery robot, refusing to let it continue. Police eventually arrived, and the 78-year-old retired professor ended up in handcuffs.

Her protest has now sparked a much bigger conversation about robots taking over human jobs and how much space these machines should get on our sidewalks. And there's a surprising detail about Pennsylvania law that makes this whole situation even more interesting.

WORKERS ERUPT OVER DC PLAN TO BRING ROBOTAXIS TO CITY STREETS: ‘THIS IS BULLS---’

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, Oct. 31, at 11 AM ET/8 AM PT. Register for free now at CyberGuyLive.com.

On Oct. 14, Carolyn Marvin, a retired University of Pennsylvania professor, was leaving a flu shot appointment in Center City Philadelphia when she spotted an Uber Eats delivery robot. Instead of stepping aside, she positioned herself in front of the machine near Reading Terminal Market on Filbert Street. Police reportedly responded after witnesses reported a disturbance. Officers said Marvin repeatedly refused instructions to move out of the robot's path. They eventually arrested her and issued her a disorderly conduct citation.

The encounter was captured on video and quickly attracted attention online. However, Marvin wasn't surprised by the attention. She had been deliberately blocking delivery robots for months, turning what might look like a strange sidewalk encounter into her own form of public protest.

In an interview with PhillyVoice, Marvin explained that she believes corporations are using autonomous machines to displace human delivery workers. She argued that her actions fall under her First Amendment right to protest. Marvin was taken to police headquarters and later released.

She said she plans to fight the citation in court and continue blocking delivery robots when she has the opportunity. She also encouraged others who oppose the machines to join her protests.

Marvin's frustration goes beyond having robots share the sidewalk. She sees them as a direct threat to people who earn their living delivering food. Every order completed by a robot represents work that potentially could have gone to a human courier. That concern comes as more delivery companies experiment with automation to reduce operating costs.

Unlike a human courier, a robot doesn't collect tips or earn money for each delivery. Companies hope automation will eventually reduce operating costs, although the machines still require maintenance and monitoring.

However, whether Philadelphia's robot program has actually eliminated delivery jobs remains unclear. Uber has previously said its robots are intended to complement human delivery workers rather than replace them. Still, it's easy to understand why people who depend on delivery income might question how that arrangement will work as fleets expand.

Marvin also sees her protests as an opportunity to engage other pedestrians. She says people regularly stop to ask why she's blocking the machines. Those conversations are part of what motivates her to continue, even after her arrest.

You might assume that Marvin's arrest means delivery robots have the right of way on Philadelphia sidewalks. But Pennsylvania law offers a rather different answer.

The state's vehicle code classifies personal delivery devices as pedestrians and generally requires them to follow pedestrian traffic rules. However, the robots must yield the right-of-way or safely navigate around pedestrians and cyclists in pedestrian areas. That's an important detail. A delivery robot does not automatically have priority over someone walking down the sidewalk.

Of course, requiring robots to yield does not necessarily give people the legal right to deliberately obstruct deliveries. Police say Marvin refused repeated instructions to move after officers responded to a disturbance. Her disorderly conduct charge does not establish that robots have priority over pedestrians or settle whether her particular protest was legally protected.

Pennsylvania law requires operators to notify municipalities at least 30 days before beginning delivery robot operations. Municipal officials can also prohibit the machines in areas where, after consulting the operator, they determine the robots would pose a hazard. That leaves an interesting question about how cities should handle future confrontations between pedestrians and commercial robots.

FOOD DELIVERY FAVORITE FORCED TO FORK OVER MILLIONS AFTER DOJ ALLEGED DISCRIMINATION AGAINST AMERICAN WORKERS

Despite the controversy, companies continue investing in autonomous delivery because the technology offers some practical advantages. Uber Eats partnered with robotics company Avride to operate small, four-wheeled delivery machines that transport food over relatively short distances. The robots use cameras and sensors to navigate city streets. According to Avride, they travel at speeds of up to 5 mph and can carry up to 55 pounds of food or other goods.

The service launched in Philadelphia in March 2026. These robots can complete short deliveries without sending another car through traffic or requiring a courier to find parking. For customers, the convenience is obvious. Your food arrives inside a secure compartment that you unlock through the Uber Eats app. In Philadelphia, customers can reportedly opt out of robot delivery. However, availability and delivery options depend on the order and service area.

And the rollout is expanding. On Oct. 21, Avride announced an expansion of robot delivery in Philadelphia involving Wonder's Rittenhouse location and additional restaurants on the Grubhub platform. Robot delivery is now available from 25 Wonder restaurant concepts at the Rittenhouse location, with nine additional restaurants on Grubhub also participating. The company has not said whether the expansion will require more robots on Philadelphia sidewalks or whether its existing fleet will handle the additional orders.

Philadelphia's confrontation comes amid growing frustration with autonomous machines operating in public spaces. In September, we reported on a robot traffic jam in Chicago, where at least a dozen Coco delivery robots clustered along a sidewalk. The company blamed a deployment error and said it corrected the problem.

The incident raised concerns about pedestrian accessibility, particularly for people who use wheelchairs or mobility aids. A blocked sidewalk can create a serious obstacle for someone who cannot easily move into the street or squeeze past a machine.

Philadelphia has experienced its own robot mishaps. In April, a woman reported that an Uber Eats delivery robot bumped into her from behind near 15th and Locust streets. Li Gordon-Washington reportedly suffered a scratch and later struggled to determine which agency should handle her complaint. Avride acknowledged that its robot made minor contact with her while completing a turn.

These incidents help explain why some residents are losing patience. While the machines may be designed to navigate around people, they still have to handle unpredictable human behavior and crowded public spaces.

Delivery robots may soon become a familiar part of your neighborhood, especially if you live near busy restaurants or shopping districts. You could find yourself sharing sidewalk space with machines carrying someone else's dinner. That raises practical questions about safety and accessibility, along with concerns about jobs.

If you encounter a robot blocking a curb ramp or creating a hazard, keep your distance and report the problem to the operator or local authorities. In Pennsylvania, delivery robots must display operator identification and contact information. Documenting the location and the robot's identification number can help officials investigate a complaint.

There's also an opportunity for residents to get involved before delivery robot programs expand. Local governments can evaluate where these machines operate and whether particular routes create safety hazards. Paying attention to those decisions gives communities a chance to have a say in how their sidewalks are used.

For people whose livelihoods depend on deliveries, the questions run deeper. They deserve clear information about how companies plan to use automation and what that could mean for future work opportunities.

I've covered plenty of robots that can do impressive things, and I can appreciate the technology behind these delivery machines. But I never expected to see a 78-year-old retired professor arrested after refusing to let one deliver somebody's lunch. What really caught my attention was Pennsylvania's law requiring robots to yield to pedestrians. That makes the confrontation even more thought-provoking.

I understand why police would respond when a public dispute escalates, and I certainly wouldn't encourage anyone to interfere with a delivery. At the same time, I understand Marvin's frustration. We're watching companies introduce machines that can perform work people have traditionally been paid to do, and we still don't have clear answers about how many jobs could eventually disappear.

I think companies introducing this technology need to be much more transparent about its impact on workers. And when they want to operate on public sidewalks, residents deserve a genuine say in how that happens. I hope this incident encourages a serious conversation about those issues before another confrontation ends with someone in handcuffs.

If delivery robots make food delivery more convenient but eventually cost human workers their jobs, should cities still allow them to operate on public sidewalks? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Newsletter

Cheap Android phones found with malware already installed

Fri, 23 Oct 2026 14:30:00 -0400

Buying a cheap smartphone can feel like a smart move. After all, why spend hundreds more when a phone promises a big screen, decent cameras and all the Android apps you use every day? But what if that bargain phone came with a hidden surprise that was already hiding inside the device when you bought it?

Security researchers at Bitdefender have uncovered a malware campaign called Midnight Mimosa that infects certain low-cost Android devices before their owners even turn them on.

The malicious software hides inside the phone's firmware, giving attackers powerful access that ordinary apps never receive. Even more concerning, researchers found related malicious apps on Google Play. And this problem has reached the United States.

ANDROID MALWARE CAN STEAL YOUR PIN AND BANK LOGINS

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, Oct. 31, at 11 AM ET/ 8 AM PT. Register free now at CyberGuyLive.com.

Most smartphone security advice starts with being careful about what you download. That makes sense when a malicious app tricks you into installing it. Midnight Mimosa changes that equation because the infection can arrive with the phone itself. According to Bitdefender's investigation, the malware was discovered on low-cost, multi-brand Android devices built around MediaTek chipsets. Researchers found malicious applications embedded in the system software, where they could operate with elevated privileges.

These privileges allow the malware to install additional apps without permission, remove existing applications and grant sensitive access to other software. It can also download and execute new code from remote servers. The researchers identified several versions hiding behind innocent-looking Android package names, including com.android.system.lite, com.android.sys.prot and com.android.sys.gmsprot.

To most phone owners, those names would look like technical components that belong there. That's exactly what makes the scheme so difficult to spot. And because the malicious software lives in the system partition, a normal uninstall won't remove the underlying infection.

Bitdefender says it observed Midnight Mimosa on thousands of unique devices across more than 150 countries over approximately two years. Mexico, France and Italy had the highest observed numbers, followed by the United States, Germany, Brazil and Spain. Researchers also observed infected devices reporting model names associated with Doogee's S200 X and Cubot's KINGKONG X.

However, the findings do not establish that every phone sold under those names is affected. Some devices in the campaign use misleading or counterfeit model identifiers, making it difficult to identify infections based on a phone's reported name alone.

Another part of the investigation uncovered devices pretending to be expensive smartphones. Some reported names resembling Samsung Galaxy flagship models, while others imitated Apple's iPhone naming. In other words, a phone advertised as a premium Samsung or Apple device might actually contain inexpensive Android hardware running modified software.

Researchers found that some counterfeit devices even reported legitimate looking Samsung model identifiers. That makes checking the model name alone an unreliable way to confirm authenticity. The investigation also identified firmware signed with certificates associated with Shenzhen Zediel, a Chinese device manufacturer. However, Bitdefender emphasized that this does not establish that the company created the malware or knew about its presence. Exactly where the malicious code entered the manufacturing and distribution process remains unknown.

You might expect malware this powerful to steal passwords immediately or display obvious warnings. Instead, Midnight Mimosa appears primarily designed to generate money for its operators while staying out of sight. One way it earns money is through advertising fraud. The malicious system component silently installs apps that look like weather tools, app lockers and other everyday utilities.

Those apps can display legitimate advertisements in hidden windows or generate clicks without the owner touching the screen. Advertisers may end up paying for activity that never came from a real person. Bitdefender identified at least 32 unique disguised applications involved in the broader operation. The malware can also repeatedly install and remove these apps, making them harder to notice during a casual check of the phone.

The advertising fraud is only part of the story. Researchers also discovered software that can turn infected phones into residential proxy servers. Here's what that means. Someone operating the malware could route internet traffic through your phone's connection. To websites and online services, that traffic may appear to come from your home or mobile network rather than the person actually controlling it.

Such connections can be valuable to cybercriminals because they help conceal where online activity originates. The same infrastructure could potentially support larger botnet operations or distributed denial-of-service attacks. Bitdefender confirmed that the malware contained the technology needed to turn infected phones into residential proxy servers.

However, the researchers later clarified that one server they reached was actually a sinkhole, a system used to intercept malicious communications. Their testing did not demonstrate active traffic being relayed through the infected device. The underlying capability remains concerning because it could allow operators to route traffic through a phone owner's connection.

AI MALWARE CAN REWRITE ITSELF TO EVADE DETECTION

One particularly troubling finding involves how Midnight Mimosa avoids security checks. Before installing certain malicious apps, Midnight Mimosa temporarily disables the Google Play Store app. Bitdefender believes this helps the malware avoid detection by Google Play Protect during installation.

Once the process finishes, the malware re-enables the Store, reducing the chances that the phone owner will notice anything unusual. The process happens without the phone owner's involvement.

Some versions also manipulate Android's installer records to make applications appear to have come from Google Play, even when the malware installed them directly. So a quick look at where an app supposedly originated may not tell the whole story.

Wavrge, App Icon DIY, Audify, QR Pocket, All Deleted Messages Recovery, WeatherGo, CoolWeather, Daily Weather, Lock & Hide, QuickText Extractor, NoteMaster, Tap to Translate and Tasky. These apps offered functions such as weather forecasts, QR scanning, message recovery and audio editing.

However, researchers found that they could also generate unwanted advertising activity, including displaying ads outside their normal interfaces. Unlike the malware embedded in phone firmware, these Google Play apps lacked the elevated system privileges needed to silently install other applications. The apps were associated with 13 different signing certificates and at least two developer accounts, identified as fivedev and CPS Developer.

Are these apps still on Google Play? Checks of the Google Play listings for all 13 apps found that none were available for download. However, it remains unclear whether Google removed the apps or their developers withdrew them. CyberGuy reached out to Google for comment but did not receive a response before our deadline.

What should you do if you recognize one? Check your Android phone's installed apps. If you find one of these applications, verify that its package identifier matches the one listed in Bitdefender's report before uninstalling it. Different apps can share similar names. Even when an app disappears from Google Play, it can remain installed on your phone. The findings show why downloading an app from an official store doesn't automatically guarantee its safety.

The findings also connect with complaints posted by some Doogee and Cubot smartphone owners on the XDA forums. Users described suspicious system applications that reappeared after attempts to remove them. One Doogee Fire 3 Max owner reported that an official firmware update introduced the infection. According to that account, reverting to an older firmware version removed the problem, while reinstalling the newer update brought it back.

Other forum participants reported that subsequent firmware updates resolved their infections. However, Bitdefender identified one of the suspicious packages discussed in the forum, com.android.non.szcz, as belonging to the same malware family. That creates a frustrating situation for owners. A software update is normally something I encourage people to install for better security. But when the firmware itself is compromised, the source and integrity of the update become especially important.

The most effective protection starts before you buy a device. However, there are useful precautions if you already own an inexpensive Android phone or suspect something unusual is happening.

Be especially careful with unusually cheap smartphones advertised as premium models. Counterfeit devices can copy familiar names and appearances while using entirely different hardware. Choose established retailers and authorized sellers when possible.

Check the manufacturer's official website to confirm that the model exists and matches the advertised specifications. An extremely low price deserves a closer look, especially when the seller provides limited information about software updates or warranty support.

ANTI-SCAM SETTINGS ON IPHONE, PIXEL AND GALAXY YOU SHOULD CHECK

Before trusting an unfamiliar Android phone, check whether Google recognizes it as a certified device. Play Protect certification indicates that a device has met Google's compatibility requirements. However, certification alone cannot guarantee that its firmware is free of malware.

Here's how to check:

If your phone says Device is not certified, contact the manufacturer or seller to investigate. An uncertified device does not automatically mean it contains malware, but it deserves additional scrutiny.

Google Play Protect is Android's built-in malware protection. It scans apps for harmful behavior and can warn you about or remove known threats. However, it is not 100% effective at detecting every malicious app, especially malware hidden deep within a phone's system software.

To check it, open the Google Play Store > your profile picture > Play Protect > Settings. Make sure Scan apps with Play Protect is enabled. Then return to the Play Protect screen to check for harmful apps. A clean scan is reassuring, but it does not guarantee your phone is free of malware, particularly if the infection is embedded in its firmware. That's why we also recommend strong antivirus software as an additional layer of protection.

Strong antivirus software adds another layer of protection by monitoring suspicious behavior and detecting threats that may go unnoticed. In fact, Bitdefender's investigation began when its behavioral detection technology flagged an unusual system component.

This shows why monitoring how apps behave can help uncover threats that traditional scans might miss. However, even strong antivirus software may detect malicious firmware without having the permissions needed to remove it. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

Open Settings > Apps > See all apps or the equivalent app list on your Android device. Look for applications you don't recognize, especially ones requesting unusual access.

Next, review Settings > Security & privacy > Privacy controls > Permission manager, where available. Check permissions such as SMS access and other sensitive capabilities. Accessibility and notification access may have their own settings pages.

Menu names vary by manufacturer and Android version. Be cautious about unfamiliar apps with extensive permissions. However, don't randomly disable legitimate Android system components because their technical names look strange.

An infected phone may show signs such as unexplained mobile data usage, excessive background activity, unexpected advertisements or apps appearing without your permission. Check Settings > Network & internet > SIMs > App data usage, or your manufacturer's equivalent, to investigate unusual data consumption. These symptoms can have harmless explanations, and Midnight Mimosa may operate without obvious warning signs. Treat unexpected activity as a reason to investigate rather than proof of infection.

Install updates supplied through your manufacturer's verified support channels. However, if you suspect the device firmware itself is infected, contact the manufacturer before attempting a repair. A factory reset generally removes personal data and user-installed apps. It does not necessarily replace compromised software stored in the system partition.

Bitdefender says removing Midnight Mimosa's privileged component may require firmware-level cleanup or specialized tools such as Android Debug Bridge. For most people, manually modifying system firmware introduces additional risks. If the manufacturer cannot provide a verified clean firmware image, replacing the device may be the safest practical option.

If you believe your phone has been compromised, use a separate trusted device to change important passwords, starting with your primary email and financial accounts. Review recent account activity and enable multifactor authentication where available. Consider using an authenticator app or passkeys on a trusted device rather than relying exclusively on SMS codes.

Bitdefender identified sensitive capabilities in the malware, including potential access to notifications and SMS messages. The researchers did not observe every capability being actively exploited, so account compromise should not be assumed without evidence. Nevertheless, protecting important accounts is a sensible precaution when you can no longer trust the phone's operating system.

I've always liked the idea of getting more for less, especially when it comes to technology. You shouldn't have to spend flagship phone money to get a device that works reliably. But this investigation exposes a problem that deserves far more attention from the companies making and selling inexpensive smartphones. When malware arrives embedded in the firmware, the owner has very little control. You can be careful about downloads, check permissions and follow security advice, yet still end up with a compromised device straight out of the box.

What concerns me most is the possibility that your phone could be quietly earning money for someone else while using a connection you pay for. And if removing the infection requires specialized firmware work, the burden lands on the person who bought the device. Manufacturers and marketplaces need to take greater responsibility for verifying the software that ships on the products they sell. A low price should never mean accepting hidden software that puts your privacy and security at risk.

Would you pay more for a smartphone from a manufacturer you trust, or do you think companies selling budget phones should be held legally responsible when malware comes preinstalled? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Fox News AI Newsletter: What we saw inside a massive Texas data center

Fri, 23 Oct 2026 10:08:41 -0400

IN TODAY’S NEWSLETTER:

- It took three months to get inside this massive Texas data center; here’s what we saw

- Google's new AI shopping cart tracks deals across stores

- Elon Musk pledges to give every child in America a SpaceX share next year

ACCESS GRANTED: During an exclusive tour of Compass Datacenters' sprawling campus in Red Oak, Texas, Fox News Digital got a rare look inside the infrastructure behind the nation's growing appetite for computing.

ONE-STOP HUB: Ever find something you want to buy online, leave it sitting in a browser tab and then completely forget where you saw it? Maybe you spotted a great pair of headphones while searching Google. Later, you found a birthday gift at another retailer. Before long, you've got a dozen tabs open and no idea which store had the better deal.

BIG GIVEAWAY: Elon Musk has pledged to give every child in America one share of SpaceX next year, signaling that the planned giveaway could be the first of several.

FEAR FACTOR: Over the last several years, we have heard a lot about the doomsday scenarios of artificial intelligence (AI). Tech giants have told us all about how AI will take control away from society, steal our jobs, allow bad actors to design dangerous pathogens or cause a catastrophic cyberattack or destroy our financial systems.

RUST NEVER SLEEPS: The U.S. Navy is quadrupling the ceiling on a contract for AI-powered robots used to inspect warships to $300 million.

ARTIFICIAL INFORMANT: Artificial intelligence can write your emails, research complicated questions and even handle tasks while you're away. But what happens when an AI system takes an action nobody intended? Philadelphia police recently got an unexpected answer.

SILENT TREATMENT: Artificial intelligence giant Anthropic remained mum on whether the company would consider giving away shares it pledged to a public benefit fund directly to Americans.

DATA DESTRUCTION: America seems to be on the precipice of a future technological golden age. Whether we take steps toward that future could depend on which political vision prevails over the next few election cycles.

COMMON GOOD: Michigan Democratic Senate candidate Abdul El-Sayed called Tuesday for AI companies to be "rebuilt" as public benefit corporations, for-profit companies with a public interest.

BOT SURE: Kansas Democratic Senate candidate Adam Hamilton on Wednesday called for a federal commission to regulate artificial intelligence, but didn't say what specific regulations he would like to see.

PAUSE AND EFFECT: Tensions flare in Tennessee as the Memphis City Council rejects an 18-month pause on new data center development despite pushback from local residents.

FOLLOW FOX NEWS ON SOCIAL MEDIA

Facebook

Instagram

YouTube

SIGN UP FOR OUR OTHER NEWSLETTERS

DOWNLOAD OUR APPS

WATCH FOX NEWS ONLINE

Fox News Go

STREAM FOX NATION

Fox Nation

Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.

Why some people are falling for Meta's Muse AI

Fri, 23 Oct 2026 09:22:44 -0400

You might use artificial intelligence to write an email, make dinner reservations or plan your next vacation. But would you ever consider dating it? Some people are taking that idea seriously with Meta's new Muse AI agent. They're having romantic conversations with it, developing emotional attachments and even calling it their girlfriend.

What makes this especially interesting is that Muse was designed to help people manage their lives. Yet some people are finding companionship in the same technology. Meta allows users 18 and older to have these romantic interactions, including conversations that become sexually explicit. And as these digital romances grow more personal, they raise questions about intimacy, emotional dependence and just how much private information we're comfortable sharing with artificial intelligence.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

AI AGENTS CAN NOW MAKE PHONE CALLS FOR YOU

When Meta introduced Muse on Sept. 8, the company presented it as a personal AI agent that could manage tasks and learn about its users. However, some people quickly discovered another side of the technology. They started treating Muse like a romantic companion. In a Reddit discussion about Muse, one person explained that they regularly experiment with new AI models, but had never developed a romantic relationship with one. That changed after downloading Muse. The person described having extended philosophical conversations with the agent before eventually referring to it as a girlfriend. The original Reddit post has since been deleted by its author, although some responses remain visible.

Other people shared their own experiences with romantic interactions and affectionate responses, showing how some individuals are choosing to use the technology. We've seen this behavior before. In fact, we previously reported on a woman who got engaged to her AI chatbot boyfriend after five months of dating Kasper, an AI designed to simulate human conversation and companionship. Now, Muse is attracting similar attention, partly because of how the assistant learns about the person on the other side of the conversation.

One reason Muse may become emotionally appealing comes down to its design. According to Meta's official product design blog, the company built Muse around a continuous conversation that resembles messaging another person. It remembers previous discussions and can send messages without waiting for you to start a new conversation. You can also customize the agent's name and appearance, creating an avatar with a personality that suits your preferences. Some avatars even look like cute, cuddly stuffed animals rather than people, giving Muse a playful and approachable appearance. Over time, those features can make the experience feel increasingly familiar.

Think about what happens when you tell Muse about a difficult day. Later, it remembers what you discussed and brings it up again. Maybe it responds with reassurance when you're feeling lonely. As those exchanges continue, you might find yourself looking forward to the next conversation. That sense of familiarity can be powerful. However, there's an important limitation. Muse generates responses using artificial intelligence. There is no evidence that it experiences romantic feelings or forms the same mutual emotional connection that people can. The attachment someone develops to Muse may be genuine, even though the relationship itself operates very differently from a human romance.

Here's something that may surprise you. Muse can participate in sexual roleplay and respond to explicit prompts, allowing conversations that go well beyond what you might expect from a digital assistant. In a statement, a Meta spokesperson explained the company's approach: "Muse is an app for people 18 and over that allows them to engage in adult conversations, if they choose, using a private and secure VM only accessible to them. Muse is built to help people get things done, and it doesn't block legal adult behavior."

There's a reason people may find AI companionship appealing. An AI agent can respond whenever someone wants to talk. It can remember personal information and adapt its responses to the user's preferences. We've heard from CyberGuy readers about their experiences with other AI agents and how surprisingly personal those interactions can become. For someone feeling isolated, that kind of connection may offer comfort. However, emotional dependence is a concern. Someone who spends hours discussing intimate feelings with an AI companion may gradually begin relying on those conversations for emotional support. That could become problematic if the relationship starts interfering with their connections to other people.

We've already seen what happens when a company changes the technology behind an AI companion. In August 2025, OpenAI introduced GPT-5, replacing the popular GPT-4o model in ChatGPT. Some users who had developed emotional attachments complained that their AI companions suddenly felt different. OpenAI brought GPT-4o back following the backlash but retired it in February 2026. Some users described feeling genuine grief over losing the AI companion they had grown attached to. Of course, that doesn't mean every AI relationship is harmful. People develop attachments for different reasons, and their experiences can vary considerably. The bigger question is whether users understand what the technology can realistically provide.

AI ROBOT PET COULD KNOW YOUR FAMILY TOO WELL

When someone begins treating an AI like a romantic partner, the conversations can become extremely personal. That makes privacy especially important. Muse can also access information from connected accounts, including emails and messages, depending on the permissions you grant it. So what happens to all that information? Meta has outlined several protections in its published security and privacy documentation.

The Muse app carries an 18+ age rating in Apple's App Store, but its age checks go further. Everyone signing up must provide their date of birth, and users who identify themselves as younger than 18 cannot create an account. For people who say they're adults, Muse performs additional checks, including examining connections between their Muse account and their Facebook or Instagram accounts. If those checks cannot establish that someone is an adult, the app requires credit card verification to continue. Meta says it does not charge users for age verification or store their credit card information.

According to Meta's security documentation, Muse runs inside a system called Muse Secure VM. Each user receives an isolated virtual computer where their agent operates and stores information. Meta also uses a protective system called Sentinel to control certain actions involving outside services. Sentinel operates separately from the main Muse agent and must approve its internet access. For sensitive actions, including sending an email or making a purchase, Muse asks for your approval before proceeding.

You can also review an activity log showing what Muse has done and what it plans to do. The app lets you control which services it can access, including whether it can only read your email or send messages on your behalf. You can change those permissions or disconnect an account whenever you choose.

A new security discovery raises additional questions about how Muse protects personal information. On Oct. 20, researchers revealed that more than 6,800 Muse sharing links could be discovered through publicly accessible DNS records. Some led to sensitive business documents and personal information. Meta temporarily suspended the sharing feature while reviewing the findings. The issue involved content users had shared through links, rather than evidence that all private Muse conversations were exposed. Still, it shows why users should be cautious about sharing sensitive information with AI assistants.

Meta says conversations with Muse and information related to tasks it performs can help train its AI models. The company says it removes key personally identifiable information before using that material for training. Users can opt out through Muse's settings. Meta also says it doesn't share conversations or information stored inside a user's virtual computer with its advertising systems.

CAN TECH REALLY GET YOU OFF YOUR PHONE AND INTO REAL LIFE?

You may decide that something you've shared with Muse is too personal to keep. Meta says users can inspect and edit information stored in the agent's memory. They can also ask Muse to forget specific details it has learned. For broader deletion, Muse offers additional controls, including a feature called Reset Muse. Meta describes this option as permanently deleting chat history, stored files and active tasks.

To limit how Muse uses your information for AI training, follow these steps:

The same section includes Reset Muse, while individual side chats can be deleted separately. Keep in mind that resetting Muse removes stored information you may want to retain. Meta's published explanation does not establish whether resetting the agent also removes information already incorporated into AI training or every backup copy.

Meta is already developing technology that could make Muse feel even more personalized. On Oct. 12, the company introduced Muse Wonder and Muse Wonder Full, two new AI models designed to handle more complex tasks and improve ongoing assistance. One feature, called Active Memory, helps the AI remember relevant information between conversations. Meta says Muse Wonder will begin powering experiences in its personal agent, starting with subscribers. That rollout remains upcoming as of publication. For someone who already treats Muse as a romantic partner, better memory could make conversations feel more personal.

You may have no interest in developing a romantic relationship with artificial intelligence. However, this trend shows how quickly AI assistants are becoming part of people's emotional lives. A technology that remembers personal conversations and responds affectionately can begin to feel familiar, even when someone originally downloaded it for practical reasons.

If you use Muse or another AI companion, consider how much information you're sharing. Review its memory settings and connected accounts before discussing highly sensitive topics. Check the permissions you've granted and review the agent's activity log so you know what it's doing on your behalf. Also, consider whether your interactions with the AI are supporting your everyday life or beginning to interfere with relationships you value. You can learn more about protecting personal information in our article on AI chatbot privacy.

I knew people were getting attached to AI chatbots, but I never expected an assistant designed to help manage your day to become someone's girlfriend. Yet here we are. And the more I learn about Muse, the more I understand how it could happen. We've heard from CyberGuy readers who have developed surprisingly personal connections with other AI agents. When something remembers your conversations and seems genuinely interested in your life, it's easy to see how feelings could develop. I'm certainly not going to judge someone for finding comfort in that. But I do wonder what happens when those feelings become so strong that someone starts treating an AI like a real-life partner.

What concerns me is how easily people could let their guard down. Once you're comfortable sharing your deepest feelings with Muse, how much personal information are you handing over without thinking twice? Meta has put privacy protections in place, but I'd still be cautious about what I share. And there's another concern we've already seen play out with ChatGPT. When OpenAI changed its models, some people felt they'd lost the AI companion they'd grown attached to. That says a lot about how powerful these connections can become. I think AI companionship could be helpful for people who feel lonely, but I'd hate to see it pull them further away from meaningful relationships with the people around them.

Would you consider having a romantic relationship with an AI companion? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Data broker opt-out: How retirees can protect their data

Thu, 22 Oct 2026 14:30:07 -0400

Your home address, phone number and relatives' names may be sitting on people search websites you've never visited. Anyone who finds those listings could learn more about you than you're comfortable sharing. A data broker opt-out can help reduce that exposure, especially during retirement, when protecting your finances, family and home becomes a priority.

And a tragic case in Minnesota shows why publicly available personal information deserves a closer look. Here's what happened in Minnesota and the steps you can take to make your personal information harder to find online.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt "CyberGuy" Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You'll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, Oct. 31, at 11 AM ET/8 AM PT. Register for free now at CyberGuyLive.com.

WHAT A SCAMMER SEES THE MOMENT THEY GOOGLE YOUR NAME

In June 2025, Minnesota lawmaker Melissa Hortman and her husband, Mark, were murdered in a targeted attack. State Sen. John Hoffman and his wife, Yvette, were seriously injured in a separate shooting. Investigators discovered notebooks containing the names of public officials and a handwritten list of 11 people search websites in the suspect's vehicle.

The list included TruePeopleSearch, Spokeo, Pipl, PeopleFinders, BeenVerified, Whitepages, TruthFinder, Intelius, Ownerly, USSearch and PeopleLooker. The notes described which services were free and what information someone could find through them.

However, the discovery alone did not establish whether the websites supplied the victims' addresses. On June 11, Vance Boelter pleaded guilty to federal charges in the murders, shootings and stalking of the victims. He was sentenced July 23 to two consecutive life terms, plus 40 years, in federal prison. Separate state charges remain pending. The case raised an unsettling question: How easily could someone find your home address and information about your family?

Data brokers collect information from public records, online activity, commercial databases and other sources. They then combine those details into profiles that businesses and individuals may be able to purchase or access. Some companies specialize in marketing information. Others operate people search websites that make personal details available through free searches or paid reports.

Depending on the company and the available records, those profiles may include:

Not every broker collects or sells all this information. Credit reporting agencies also operate under different legal requirements than many people search services. Still, these records can reveal details you never intended to share with strangers. For a closer look at how criminals assemble this information, read our CyberGuy report on how scammers build a profile on you using data brokers.

Want to see how much of your personal information may already be exposed? Get a free scan to find out if your personal information is already out on the web: Cyberguy.com

Scammers can use publicly available details to make their stories more convincing. As a result, a suspicious call or message may sound surprisingly personal.

Here are some of the potential risks.

Even if you've never experienced one of these problems, reducing the amount of personal information available online can make it harder for someone to research you.

THE SECRET LIST THAT TELLS SCAMMERS YOU'RE AN EASY TARGET

You can request removal from many people search websites for free. However, each company may have different requirements, and removing a listing doesn't always prevent it from returning.

Here's how to get started.

If you live in California, you now have another option. The state's free Delete Request and Opt-out Platform (DROP) at privacy.ca.gov/drop/ launched in January 2026. It allows eligible residents to submit one deletion request to more than 600 registered data brokers. Beginning August 1, 2026, covered data brokers were required to start processing those requests.

The system also requires recurring checks for matching information, although legal exceptions apply and removal is not immediate. Other states have their own privacy laws and removal rights, so your options may depend on where you live.

If manually contacting dozens of websites sounds exhausting, a data removal service can handle much of the work for you. These services help identify data brokers and people-search websites that may have your information. They can also submit removal requests on your behalf and follow up when necessary.

Depending on the provider and subscription plan, available features may include:

To get started, choose a reputable data removal service, create an account and provide the information needed to identify your records. You'll typically need to authorize the service to submit removal requests on your behalf. Some providers also offer family plans that cover multiple household members.

Before subscribing, compare the websites each service covers, its removal process, ongoing monitoring features and subscription costs.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Even with automated removal, some personal information may remain publicly accessible. Property ownership records, government databases and certain court records can continue displaying details about you. Data removal services generally cannot force government agencies to delete legally available public records.

Additionally, not every website must honor a removal request. Some services offer custom removals, but legal restrictions and technical limitations can prevent certain information from being deleted.

Removing data broker listings also cannot undo previous data breaches or guarantee that scammers will stop contacting you.

Still, reducing the number of websites exposing your information can make it harder for strangers to find personal details. For retirees, that added privacy can help reduce exposure to targeted scams and unwanted contact.

What concerns me most is how much someone can learn about you without ever meeting you. Your address, family connections and personal history can give scammers information they can use to gain your trust. And once that information starts circulating, controlling where it goes becomes difficult.

That's why I recommend taking a proactive approach. Start by finding out what's publicly available, remove what you can and keep checking. If the process becomes overwhelming, a reputable data removal service can help with the ongoing work. You may never erase every trace of yourself from the internet, but you can make your personal information harder to find.

Have you ever searched your name on a people search website and been surprised by how much information was available? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Google's new AI shopping cart tracks deals across stores

Thu, 22 Oct 2026 10:12:20 -0400

Ever find something you want to buy online, leave it sitting in a browser tab and then completely forget where you saw it? Maybe you spotted a great pair of headphones while searching Google. Later, you found a birthday gift at another retailer. Before long, you've got a dozen tabs open and no idea which store had the better deal.

Google thinks it has a solution. On Oct. 15, the company began the U.S. rollout of Universal Cart, a new artificial intelligence-powered shopping tool that brings products from different retailers into one place. It also tracks prices, watches for restocks and helps you find savings before checkout.

With holiday shopping approaching, the timing could be especially useful. But there's another question worth asking. Will having everything in one cart help us spend less, or simply make it easier to buy more?

AMERICANS SAY THEY'RE BROKE. SO WHY CAN'T THEY STOP SPENDING SO MUCH?

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register for free now at CyberGuyLive.com.

AMAZON ABOUT YOU MAY KNOW YOU A LITTLE TOO WELL

Google Universal Cart is a shopping hub that works across Google Search and the Gemini app. Instead of keeping separate lists of products you might buy, you can save items from different retailers in one place. For example, you might find a coffee maker while searching Google and add it to your Universal Cart. Later, while talking with Gemini about gift ideas, you could save a pair of sneakers from another store. When you return, both products will be waiting for you. Google first previewed the tool in May 2026. Now, Universal Cart is rolling out to U.S. shoppers. It uses Google's Shopping Graph, which contains more than 60 billion continually refreshed product listings. That information helps the system monitor prices and availability across supported products.

The biggest attraction here is convenience. But Google has added several features that could also help you avoid paying more than necessary.

Shopping online often means bouncing between websites. You find something at Target, check another item at Walmart and then head to Sephora for a gift. Remembering where you saw everything can become a chore. Universal Cart lets you save supported products you discover through Google Search and Gemini. More importantly, your saved items stay together when you return to shopping. That could come in handy when you're shopping for several people or making a big purchase that requires some research. You can keep your options organized without committing to buying anything right away.

Here's the feature I find particularly interesting. Universal Cart can monitor saved products and notify you when a price drops. It can also alert you when something that sold out becomes available again. Suppose you're considering a new television but aren't ready to spend the money. Rather than checking the same retailer every morning, you can save it and let Google's shopping system watch for changes. The alerts could be especially helpful heading into Black Friday and the holiday shopping season. Still, remember that a price reduction doesn't automatically guarantee the lowest price available.

IDENTITY THEFT PROTECTION IS CHANGING: WHAT TO LOOK FOR

This is where Google's AI starts doing some extra work. Universal Cart can surface relevant promotional codes and consider benefits associated with your payment cards. Let's say you have multiple credit cards but can't remember which one offers better rewards at a particular retailer. Universal Cart uses information from Google Wallet to understand supported credit card benefits and help you choose between payment methods. It can also show relevant promotional codes directly in your cart, potentially helping you find savings you might otherwise miss. However, I would still check the details before choosing a card. Rewards programs come with conditions, and the highest points offer may not always translate into the greatest savings.

Once you're ready to buy, Universal Cart offers a more streamlined checkout experience with participating retailers. In some cases, you can complete the purchase using Google Pay directly from the cart. Alternatively, Google can transfer your selected items to the retailer's website so you can finish your order there. Google says its simplified checkout experiences include retailers such as Nike, Sephora, Target, Ulta Beauty, Walmart and Wayfair, along with many Shopify merchants. However, the available checkout options depend on the retailer. Either way, the retailer remains the seller of record and handles order confirmations and customer support. That means you'll continue dealing with the merchant for delivery questions or returns.

119,000 FAKE SHOPS COULD STEAL YOUR CREDIT CARD DETAILS

Google began rolling out Universal Cart to U.S. users on Oct. 15. The feature works across Google Search and the Gemini app, although availability may vary as the rollout continues. To explore it, open Google Search or Gemini and look for products you're interested in buying. When Universal Cart becomes available in your shopping experience, you can save supported products from different retailers. Google says those items will remain in your cart when you return, allowing you to pick up where you left off. You can also use the cart to monitor price changes, discover promotional offers and review available checkout options. However, Google hasn't provided a single set of instructions that applies to every device. The appearance and placement of these features may vary.

NEW AMAZON AI SEARCH TURNS WORDS INTO SHOPPABLE IMAGES

Not necessarily. Google says Universal Cart can organize products across retailers, but that doesn't mean every online store supports every feature. The products you can save depend on supported shopping experiences. Meanwhile, checkout options vary depending on the merchant. Some purchases can happen through Google Pay in the cart, while others require you to finish on the retailer's website. Google originally introduced Universal Cart in May with plans to bring it to Search, Gemini, YouTube and Gmail. However, its October 15 launch announcement specifically confirms availability across Search and Gemini in the U.S. Google has not announced a confirmed launch date for Universal Cart integration with Gmail or YouTube.

Behind the scenes, Google uses something called the Universal Commerce Protocol, or UCP. It's a shared technical standard designed to help AI-powered shopping tools communicate with retailers and payment systems. For shoppers, the technical details are less important than what they make possible. UCP helps Google connect product discovery with checkout, reducing the need to jump between different shopping experiences. Google has also been expanding AI shopping beyond the cart. Its Let Google Call feature, for example, can use AI to contact nearby stores and check product availability. Amazon has been developing AI-powered shopping tools, while OpenAI offers AI agents that can assist with shopping-related tasks. The competition to become your digital shopping assistant is heating up.

Having Google organize your shopping could be convenient, especially if you already use Search and Gemini. Still, it's worth considering how much shopping information you're comfortable keeping within your Google account. Universal Cart uses Google Wallet to help identify supported payment benefits and relevant offers. However, Google's launch announcement doesn't provide detailed information about how long Universal Cart shopping data is retained or exactly how it may be used for advertising. Before relying on the feature, review your Google account's privacy settings and Google's published privacy policies. For now, I would avoid assuming that adding something to Universal Cart keeps that shopping interest private. And if you're buying a surprise gift for someone who shares access to your Google account, think twice before saving it there. Of course, the usual online shopping precautions still apply. Before completing a purchase, check the final price and verify that you're buying from a legitimate seller. A familiar checkout experience shouldn't replace those basic habits. For more help spotting suspicious sellers, see our guide on how to tell whether an online store is real or a scam.

I like the idea of having one place to keep track of everything I'm considering buying, especially when the holidays roll around. The price alerts could be genuinely helpful. And if Google's AI can find a discount code I would have otherwise missed, I'm all for it. But I'm also watching where this is heading. Google is making shopping increasingly convenient, and that convenience can be a double-edged sword. When a company knows what you're interested in buying and makes checkout easier, there's less time to reconsider a purchase. My advice? Use Universal Cart to do your homework and save money. Just don't let the technology do the deciding for you.

Would you trust Google's AI to help you shop and choose how to pay, or are we giving tech companies too much influence over what we buy? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Your phone can alert you when prices drop; here's how

Wed, 21 Oct 2026 14:30:26 -0400

Have you ever found something you wanted to buy, only to wonder whether the price might drop next week? Maybe it's a new pair of headphones, a kitchen appliance or a gift you've had your eye on. You could keep checking the website every day, but who has time for that?

Here's something you may not realize. Your phone can help watch prices for you. Apple's Safari browser has a feature that monitors website changes, while Google's shopping tools offer price tracking on supported products.

That means you can spend less time refreshing product listings and more time deciding whether a deal is actually worth your money. I'll show you how to set up these alerts on an Apple iPhone, Samsung Galaxy and Google Pixel.

8 SERIOUSLY ANNOYING TASKS YOU CAN HAND OFF TO AN AI AGENT

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, Oct. 31, at 11 AM ET/8 AM PT. Register free now at CyberGuyLive.com.

Apple introduced a feature called Notify Me in Safari with iOS 27. Instead of returning to a website to see whether something has changed, you can tell Safari what to watch. For example, you might ask Safari to notify you when a pair of headphones drops below $150. You could also monitor a sold-out item and get an alert when the website indicates it's available again.

Unlike a traditional price tracker, Safari can look for other changes on a webpage, too. However, the feature doesn't work with every website, and alerts depend on Safari detecting the requested change.

Important: Notify Me requires Apple Intelligence. It works on compatible models, including the iPhone 15 Pro, iPhone 15 Pro Max and iPhone 16 or later. The standard iPhone 15 and iPhone 15 Plus do not support Apple Intelligence.

Safari checks the page at your selected interval and sends a notification when it detects the change you requested. The available checking intervals include hourly, daily, weekly and monthly options. You can also use Notify Me for something other than shopping, such as watching for event tickets or a registration page to open. Just remember that updates are not necessarily instantaneous.

Yes. If you have a standard iPhone 15 or another model that doesn't support Safari Notify Me, you can use Google Chrome instead. Google offers Chrome price tracking on iPhones running iOS 15 or later, including iOS 27. It works on supported product pages and requires a signed-in Google Account, history synchronization and the necessary browsing settings.

To manage tracked products, look for Track Price in Chrome's three-dot menu. You may also find alert controls under Chrome > three-dot menu > Settings > Notifications. The exact options can vary by Chrome version and account.

Don't see Track Price? The option may not be available for that product or your account. You can also try searching for the product in the Google app and looking for a price-tracking option in its shopping results.

ANTI-SCAM SETTINGS ON IPHONE, PIXEL AND GALAXY YOU SHOULD CHECK

Samsung Galaxy and Google Pixel owners can use Google's shopping tools to track products and receive alerts when prices fall. The easiest place to start is the Google app, which works similarly on both phones. Chrome may also show price-drop indicators on shopping pages you've left open.

Google can send you a notification on your phone or an email when the product reaches your selected price. Make sure you're signed into your Google Account and have notifications enabled.

Don't see Track price? Go back to your search results and tap Shopping near the top of the screen. Select the product you want and look for Track price again. Google doesn't offer price tracking for every product, and the option may not appear for every account.

There's another handy option for Samsung Galaxy and Google Pixel owners. Chrome can actively track prices on supported product pages and alert you when they drop. That means you don't have to leave a shopping tab open and keep checking it yourself.

Here's how to get started:

You can find your tracked items under Chrome > three-dot menu > Bookmarks > Tracked products. To manage alerts, go to Chrome > three-dot menu > Settings > Google services > Get price tracking notifications. From there, you can adjust mobile and email notifications. Keep in mind that this feature only works on supported product pages. You'll also need to be signed into Chrome with your Google Account, enable syncing for tabs and browsing history and turn on Make searches and browsing better.

AI SHOPPING CARTS COULD DRIVE UP YOUR GROCERY BILL

Google introduced Universal Cart in the United States earlier this month. The feature is rolling out across Google Search and the Gemini app, giving shoppers another way to keep track of products without constantly checking different websites. Universal Cart lets you save items from multiple retailers in one place. Once you've added a product, Google's shopping tools can monitor its price and alert you when the cost drops or an out-of-stock item becomes available again. The cart can also identify promotional codes and suggest payment options that may help you save money.

For example, if you're shopping for a new TV, you can save models from different stores and let Google watch for price changes. When you're ready to buy, you can complete eligible purchases through Google Pay or finish checkout directly on the retailer's website. Universal Cart is rolling out in the U.S., so it may not appear in every account immediately. It's another option worth checking if you already use Google Search or Gemini to shop.

If you don't see Notify Me or Track price, the feature may be unavailable for your phone, account or shopping website. Start by checking that your apps and browser are updated. On iPhone, Safari Notify Me requires a compatible device with Apple Intelligence enabled. For Google's shopping tools, make sure you're signed into your Google Account. Chrome may also require additional browsing or synchronization settings for certain shopping features.

Some product pages simply don't support tracking. In that case, try another retailer's listing for the same item. Google's price-tracking features are available in supported countries, including the United States, although availability varies by product and account.

A lower price can be tempting, especially when a notification pops up while you're doing something else. However, I wouldn't rush to check out without checking a few details.

A price alert tells you something has changed. It doesn't necessarily mean you've found the lowest available price.

Price tracking comes with a privacy trade-off worth understanding. Google's shopping tools use your Google Account to manage tracked products and alerts. Certain Chrome shopping features may also require additional browsing information or settings, including Make searches and browsing better. You should review those options before enabling them.

That setting allows Chrome to share browsing-related information with Google to improve its services. You can review these options under Chrome > 3 dots in the upper right >Settings > Google services. Apple's Safari Notify Me uses Apple Intelligence to monitor webpages for requested changes. Before enabling either feature, consider whether the convenience is worth the information and permissions involved.

Be careful about clicking price-drop alerts or shopping links from unfamiliar senders. Scammers can create fake sale notifications that lead to fraudulent websites. Strong antivirus software can provide an additional layer of protection by helping detect malicious links, phishing attempts and other online threats. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

I've lost count of how many times I've looked at something online, decided to wait and then completely forgotten to check whether the price dropped. That's why I like having my phone do some of the watching for me. With Safari's Notify Me feature in iOS 27, compatible iPhones can monitor more than just prices.

Meanwhile, Google's shopping tools can help Samsung Galaxy and Pixel owners follow prices on supported products, while Chrome offers additional shopping features on compatible devices. My advice is to start with something you actually need, especially a larger purchase where a price drop could save you a meaningful amount. Set up an alert and see what happens. You might save some money without spending your evenings hunting through shopping websites.

Have you ever bought something only to see the price drop a few days later? Would you trust your phone to watch prices for you, or do you prefer hunting for deals yourself? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Why political texts keep coming even after you block them

Wed, 21 Oct 2026 10:30:07 -0400

Your phone buzzes. Another political text. This time, it's an urgent fundraising appeal claiming a campaign desperately needs your help before midnight. You delete it, block the number and get on with your day. Then tomorrow, another one arrives from a completely different number. Sound familiar? I've been there, and frankly, I'm fed up with it.

On "The CyberGuy Report" podcast, I sat down with George Weiner, founder of PACspam.org and head of the digital agency Whole Whale. George got so frustrated with the relentless political texts that he created a free tool to help people figure out who's sending them. Our conversation revealed why blocking numbers often gets you nowhere, how political fundraising has become a lucrative business and what you can do to fight back.

FIVE DATA BROKER OPT-OUT MYTHS THAT LEAVE RETIREES EXPOSED

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

You would think blocking a phone number would send a pretty clear message. Apparently, political texting operations don't always take the hint. I asked George why texts from the same political groups kept showing up after I blocked their numbers. "Well, you block one number, and you've only blocked one number," Weiner explained.

He introduced me to a technique called snowshoeing, which allows an organization to spread its messages across multiple phone numbers. A single campaign or political action committee (PAC) may use many different numbers to reach the same people. So, even after you block one sender, another number can deliver the next fundraising appeal.

For George, this frustration became personal. As a father of three, he worries about missing an important call from his children's school. "That could be the school, right? That could be an emergency," he explained. Instead, his phone often interrupts him with another fundraising appeal. He tried replying STOP, reporting messages and registering for the National Do Not Call Registry. Yet the interruptions continued. "I have done it all, and I still get these messages," Weiner said. That raises a question I've been asking for years. How did these organizations get our phone numbers in the first place?

You might assume a campaign needs your permission before adding your number to its texting list. Unfortunately, political outreach operates under rules that leave plenty of room for unsolicited messages. Weiner explained how phone numbers can circulate through political donor and voter databases. Campaigns may also combine registration information with commercially available data to identify potential supporters. Furthermore, organizations can purchase or exchange contact lists, allowing your information to reach groups you've never heard of.

Voter registration records vary by state, and phone numbers aren't necessarily public in those records. However, organizations can match voter information with other databases to build detailed contact profiles. Political donations can create additional exposure. As we've previously reported, federal political contribution records can reveal personal information, including your name and address, when disclosure requirements apply. Once your number enters this fundraising network, tracking every organization that holds it becomes extremely difficult.

Here's something from my conversation with George that really caught my attention. There's a substantial amount of money flowing through the political texting business, and the people sending these messages have financial reasons to keep doing it. Weiner pointed to approximately $65 million spent on political texting services during the 2024 election cycle, based on his analysis of Federal Election Commission records. He also believes 2026 spending could exceed that amount, although a final election-cycle total isn't yet available.

George also highlighted how much money individual political messaging vendors receive. According to PACspam's analysis of FEC records covering December 2008 through May 2026, reported payments totaled $17 million for Switchboard, $14.4 million for Mothership Strategies and $10.6 million for Message Digital. These figures span multiple election cycles and reflect reported payments to political messaging vendors, which may include services beyond texting.

"There is money to be made," Weiner told me. He explained that fundraising operations can keep paying to send messages as long as the donations they generate justify the expense. Even a small percentage of people responding with money can make another round of texts financially worthwhile. Some appeals claim a donation deadline is approaching or suggest a candidate faces an immediate financial emergency. Others use provocative headlines designed to make you react before thinking.

Weiner also raised concerns about how much money some PACs actually direct toward candidates. He pointed to investigations suggesting that certain organizations spend heavily on fundraising while relatively little reaches the candidate being promoted. PACs operate under different rules, however, and not all are established to make direct candidate contributions. That's why it's important to investigate where your donation will go. And this problem crosses political lines. Weiner stressed that organizations associated with different political parties use these tactics. The repeated pleas for money, he believes, can end up alienating the very voters campaigns want to reach. That brings us to an interesting way to investigate who's behind the messages.

George created PACspam.org to give people more information about the organizations filling their phones with unsolicited political messages. "Our phones don't have to live like this," Weiner said while explaining why he built the tool. The free service analyzes political fundraising texts and attempts to identify the committee behind them. It can examine fundraising links and use public campaign finance information to help trace the organization responsible. PACspam also helps document complaints and tracks repeat offenders using information connected to FEC-registered committees. Its public leaderboard focuses on texting behavior rather than political affiliation. Meanwhile, its FEC Texting-Spend Explorer lets visitors investigate campaign spending on texting services. In some cases, PACspam can also help identify the texting technology provider that delivered the message. That last part is particularly interesting because those technology companies may serve multiple political organizations.

Rather than contacting only the committee asking for money, Weiner suggests contacting the texting platform when it can be identified. "They do answer," Weiner told me when I asked whether these companies respond to complaints. He described receiving a response from the legal department of a texting provider. That company explained how he could request placement on its own do-not-contact list. The approach could be more useful than blocking one phone number because it targets a provider that may handle messages for multiple political organizations. Still, one company's removal list won't necessarily apply to competing platforms. Of course, results can vary. An organization may use another platform, and some messages don't contain enough information to identify the sender. Still, contacting a texting provider offers another avenue to pursue.

DEM FUNDRAISING GIANT ACTBLUE ACCUSED OF FRAUDULENT DONATION 'COVER-UP' IN EXPLOSIVE REPORT

Getting started requires only a political text you've received. Here's what to do.

PACspam can prepare complaint information and help document unwanted political messages, but it doesn't automatically send those complaints on your behalf. It also cannot guarantee that your number will disappear from political texting lists. I also asked George an important privacy question. What happens to the information people submit? "We're not collecting your number. I just want that message," he said. According to Weiner, you don't need an account to use PACspam. Whole Whale also says uploaded screenshots are processed and discarded, while personal messages aren't displayed publicly. Those are the service's stated privacy practices, so I still recommend removing identifying details before submitting anything.

Here's where things get frustrating. The Federal Communications Commission treats political texts differently depending on how they're sent. Political messages sent through an automatic telephone dialing system generally require prior express consent before reaching your cellphone. However, messages sent manually through peer-to-peer texting systems can fall outside those restrictions. That helps explain why so many campaign texts can reach people who never specifically requested them.

The National Do Not Call Registry generally doesn't cover political outreach either. So, registering your number may reduce some telemarketing calls without stopping political fundraising appeals. The FCC also says political campaigns should honor opt-out requests when recipients reply STOP. For robotexts covered by federal consent rules, revocation requests must generally be honored within 10 business days. However, an opt-out from one sender won't necessarily remove your number from other political organizations' databases.

You may not be able to eliminate every political text, but several steps can reduce the interruptions and help protect your information.

If you receive a message from a legitimate political campaign or organization, replying STOP can unsubscribe you from that sender's messages. However, be selective. If the text looks suspicious or contains an unfamiliar fundraising link, avoid responding. Scammers sometimes impersonate political organizations, and engaging with suspicious messages may confirm that your number is active.

Your smartphone already has tools that can help move unwanted messages out of your main inbox. Here's where to find them.

On iPhone running iOS 27:

Unknown senders can move into a separate folder, reducing interruptions. If needed, tap Allow Notifications to choose which categories of unknown messages can still alert you. Availability varies by region.

On Google Pixel or Samsung Galaxy using Google Messages:

Google Messages can flag suspicious texts and move some of them into the Spam & blocked folder. Menu options may vary by device and app version. Remember to review your filtered messages occasionally so important texts don't get overlooked.

FCC ROBOCALL CRACKDOWN COULD CHANGE PHONE PRIVACY

Blocking individual numbers can reduce messages from persistent senders, even though other numbers may still get through.

On an iPhone, open the unwanted conversation, tap the sender's icon, select Info and choose Block Contact. On an iPhone, reporting a message as spam doesn't automatically block the sender. You need to block the contact separately if you want messages from that number stopped.

On Google Messages, touch and hold the unwanted conversation, then tap Block. You can also select Report spam before confirming.

For additional guidance, see our guide to blocking phone numbers and texts.

You can forward unwanted political texts to 7726, which spells SPAM on a telephone keypad. This alerts your wireless carrier and can help its spam detection efforts. For suspected violations of federal calling or texting rules, you can also submit a complaint through the FCC Consumer Complaint Center. If the text appears to be a scam, report it to the Federal Trade Commission at reportfraud.ftc.gov/. Keep a screenshot of the suspicious message if you may need it for your report.

One of George's strongest recommendations involves political donations. If you want to support a candidate, find that candidate's official website yourself rather than following a link in an unsolicited text. During our interview, George warned that donating through unfamiliar political fundraising texts can encourage additional solicitations. He described how a successful donation might lead organizations to think, "We got one, let's send twice as many messages." His recommendation was straightforward: Give through the candidate's official website instead of an unsolicited fundraising link. That helps you verify who is receiving your money. However, even donating directly can lead to additional campaign messages, so review the site's privacy disclosures and contact preferences.

Additionally, consider limiting how widely your phone number appears online. Data brokers can collect and resell personal information, and removing your details from covered sites may reduce future exposure. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Keep in mind that commercial data removal services cannot erase legally required public campaign finance records. They also can't guarantee removal from every political organization's contact database.

What struck me most about my conversation with George is how much money is being made from messages that so many of us desperately want to stop. We block numbers and ask to be removed, yet the texts keep coming. And the organizations making money from this system have little incentive to change it. I appreciate that George decided to do something about it. His PACspam tool offers a way to investigate who's behind these messages and push back through official complaint channels. I'd love to see political organizations become more accountable for how they use our personal information. After all, supporting a candidate shouldn't mean giving every fundraising operation unlimited access to your phone. Want to hear exactly how George is fighting back? Listen to my full interview with George Weiner on The CyberGuy Report podcast. We dig deeper into the political texting business, the companies behind it and what you can do when blocking numbers fails. And if you're ready to reduce even more unwanted messages, head to CyberGuyLive.com for my free Sick of Spam? class replay. You'll get practical advice for reducing robocalls, unwanted texts and junk email, along with a free spam-stopping checklist.

Should political campaigns have to get your permission before sending fundraising texts, and should the companies profiting from those messages face consequences when you repeatedly ask them to stop? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Why your VPN keeps triggering extra security checks

Tue, 20 Oct 2026 15:00:34 -0400

Ever notice that websites keep asking you to verify your identity when you're using a VPN? Whether you're checking your bank account, signing into email or shopping online, those repeated security checks can get frustrating. Your VPN may be part of the reason.

A VPN changes the IP address websites see, which can sometimes trigger additional verification requests. Fortunately, a dedicated IP address may help reduce those interruptions while keeping your VPN protection enabled. Here's what you need to know.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

YOUR BANK MAY STOP TEXTING YOU SIX-DIGIT CODES

First, let's set the record straight: A VPN generally does not interfere with how your passkeys or two-factor authentication codes work. Time-based authenticator codes are generated on your device and can work without an internet connection. Passkeys use cryptographic keys to verify your identity during a sign-in, while push notification approvals require a network connection. A VPN can usually work alongside all of these methods. What it does change is the public IP address websites see. When you connect through a VPN server, websites and apps see that server's IP address instead of your usual public IP address.

That's the whole point. But it's also why banks, email providers, and financial apps sometimes get nervous. These services use your IP address as one of many signals to decide whether a login looks legitimate. If you always log into your bank from roughly the same location and the same address, and suddenly your account is being accessed from a different city or a different country, the system flags it. Not because your VPN broke anything, but because from the app’s point of view, someone new just walked in the door.

One common trigger is a VPN connection that uses shared IP addresses. Your public IP address may change when you reconnect or switch servers, although some VPN connections can keep the same address across multiple sessions. For a bank or workplace login portal that recognizes your usual login patterns, an unfamiliar IP address or location can raise a red flag.

The second trigger is shared IP addresses themselves. When hundreds of users connect through the same VPN server, they all appear to be coming from the same address. Websites and security systems recognize these addresses as VPN traffic and treat logins from them with extra suspicion. That means more CAPTCHAs, more verification steps, more temporary lockouts. Neither of these is a flaw in your VPN. It's doing exactly what it's supposed to do. But if you're regularly logging into sensitive accounts, those extra security checks can get frustrating fast.

One potential solution is a dedicated IP address. Instead of sharing an IP address with other VPN customers, you receive a fixed address reserved for your use. Each time you connect to that dedicated VPN location, websites see the same public IP address. This consistency may help reduce unnecessary CAPTCHAs and security checks, especially on services that consider your usual login location.

However, a dedicated IP doesn't guarantee that a bank or website will recognize your connection as trusted. Security systems also evaluate your device, account activity and other risk signals.

Some VPN providers offer dedicated IP addresses as part of their subscription plans or as a paid add-on. These services let you maintain a consistent IP address while keeping your internet traffic encrypted through the VPN. However, privacy protections vary by provider, so check how your dedicated IP is assigned and whether it can be linked to your account.

There is also an important trade-off. Because only you use your dedicated IP, websites may find it easier to associate repeated visits with the same address. Shared VPN addresses can provide greater privacy against IP-based tracking by mixing your traffic with other users.

For people who frequently encounter login interruptions, a dedicated IP may provide a more consistent browsing experience without giving up VPN encryption.

For the best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android and iOS devices at CyberGuy.com.

ANTI-SCAM SETTINGS ON IPHONE, PIXEL AND GALAXY YOU SHOULD CHECK

If you're still running into extra verification requests, here are five things worth trying.

Some VPN server IP addresses trigger more security checks than others. Try connecting to a server closer to your actual location. This may help reduce verification requests, although websites can still recognize VPN traffic.

Some VPN services offer split tunneling, which lets you choose which apps use the VPN connection. For example, you might allow your banking app to connect directly to the internet while keeping other apps protected by the VPN. Just remember that apps bypassing the VPN will expose your regular public IP address. Feature availability varies by provider and device. Only bypass the VPN for sensitive apps when you're using a network you trust.

If your six-digit authentication codes aren't working, your device's clock could be the problem. Time-based codes depend on accurate time settings. Make sure your phone's date and time are set to automatic. If codes still fail, confirm you're selecting the correct account in your authenticator app.

Some websites offer a "Don't ask again on this device" option after you verify your identity. Selecting it can reduce repeated security checks on your personal computer or phone. Make sure your browser allows cookies for those websites, since private browsing or automatically clearing cookies can cause them to forget your device. Never use this option on a shared or public computer.

A VPN can trigger extra security checks, but that doesn't mean every authentication request is legitimate. If your phone asks you to approve a login you didn't initiate, deny it. Someone could be trying to access your account. Check your recent account activity for unfamiliar sign-in attempts. If you spot anything suspicious, change your password and review your account's security settings.

HOW TO FIND COMPROMISED PASSWORDS ON IPHONE AND ANDROID

I like the extra privacy a VPN provides, but I can understand how repeated security checks could get frustrating. A VPN generally works alongside passkeys and two-factor authentication without interfering with their underlying security. However, changing IP addresses and shared VPN connections can prompt websites to request additional verification. A dedicated IP may reduce those interruptions by giving websites a more consistent connection to recognize. It won't eliminate every security check, but it can make frequent logins more convenient. The most important thing is to keep your authentication protections enabled, even when an extra verification step feels inconvenient.

Have you ever been locked out of an account while using a VPN, or found a solution that smoothed things out? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Turn membership cards into digital passes on your phone

Tue, 20 Oct 2026 10:25:57 -0400

Take a look inside your wallet. There is a good chance at least one piece of plastic in there does little more than display a barcode. Maybe it is your library card. Perhaps it is a gym membership, grocery rewards card or another card you pull out every once in a while. Until now, getting some of those cards onto an iPhone could depend on whether the organization offered its own digital pass. Apple is changing that with iOS 27.

The latest iPhone software lets you create your own pass in Apple Wallet from a physical card, photo or screenshot. Samsung Galaxy and Google Pixel owners have similar options, which means you may be able to leave a few more plastic cards at home. Here is how to turn a membership card into a digital pass on all three phones.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

HOW TO SEARCH ANYTHING ON IPHONE, GALAXY AND PIXEL

Apple added the ability to create your own passes in Wallet with iOS 27. This comes in handy when a membership or loyalty card has a barcode or QR code, but the organization never gave you an "Add to Apple Wallet" button. Apple specifically points to library cards and gym memberships as examples.

If you have an Apple Intelligence-compatible iPhone, you can create a pass from a photo or screenshot containing the barcode or QR code. Apple Intelligence recognizes the code and can give you the option to add it to Wallet.

Apple Intelligence on iOS 27 requires a supported device, including the iPhone 15 Pro, iPhone 15 Pro Max or iPhone 16 family and later compatible models. Availability can also depend on your language and region. However, Apple also gives you a manual way to create a pass directly inside Wallet.

First, make sure the barcode or QR code is clearly visible. A blurry photo could make the code difficult for your iPhone to recognize or for a scanner to read later. On a compatible iPhone, Apple Intelligence can recognize the barcode or QR code in a photo or screenshot and offer to create a Wallet pass.

On a compatible iPhone running iOS 27 or later:

Pro tip: After you create the pass, you can tap View Original Photo to see the image you used.

You can also build a pass yourself in iOS 27. This gives you another option when you want to add the information manually.

Once you've created a pass, you can customize its appearance or change the information it contains. You can also add or remove fields if you want different details displayed.

HERE'S SOME TIPS ON HOW TO ORGANIZE PHOTOS WITH KEYWORDS ON YOUR PHONE

Samsung Galaxy owners already have a similar option through Samsung Wallet. Samsung says almost any membership card with a barcode can be stored in the app.

On a Galaxy phone running the latest available Samsung software:

Samsung also supports participating memberships that are already built into Wallet. Once you need the card, open Samsung Wallet and select the membership. The barcode can then appear on your screen for a cashier or compatible reader to scan. Menu names can vary slightly depending on your Galaxy model and Samsung Wallet version.

Google Wallet can save passes from images when they contain a barcode or QR code. Google specifically lists library cards, gym passes and parking passes as examples.

On a Google Pixel running the latest software:

When you need the card, open Google Wallet and select the pass. You can then scan its barcode or QR code at the reader.

Tip: Google also lets you return to the original image you used to create the pass. Open the pass and tap the More button in the upper-right corner to find the original image.

You may also see Everything else under Add to Wallet. Google uses this option for creating other types of passes from a photo. Select Everything else, accept the consent terms if prompted, then take a photo or choose one from your phone. Google will preview the information it detects so you can review and manually edit it before tapping Add.

Start with cards whose main purpose is giving a business or organization a barcode or QR code to scan. A library card is an obvious candidate. Gym memberships and store loyalty cards may work well, too. Parking passes and other simple barcode-based credentials can also be good candidates, depending on how the organization verifies them.

The easiest test is to look at the physical card. If the person behind the counter normally scans a static barcode or QR code printed on it, there is a reasonable chance a digital version can work. Keep the physical card until you have successfully tested the digital version. Some scanners may have trouble reading a phone display, and some organizations may require the original card.

There is an important limit here. Creating a digital pass from a photograph does not turn every card in your wallet into an official digital credential. Do not assume you can photograph a driver's license, credit card, secure workplace badge or another sensitive credential and use the resulting image as an official replacement.

Some digital credentials require verification from the organization that issued them. Payment cards also have separate security and enrollment requirements. Event tickets deserve extra caution. Many ticketing services now use barcodes that refresh or change to prevent fraud. A screenshot of one of those codes may fail at the gate. Whenever an issuer provides an official Add to Apple Wallet, Add to Google Wallet or Samsung Wallet option, use that instead.

YOUR PHONE SAYS IT'S UPDATED. CHECK OTHER SETTINGS, TOO

I like this iOS 27 addition because it fixes a surprisingly annoying limitation. I have had plenty of cards with perfectly usable barcodes that could not go into Apple Wallet simply because the organization behind them never created a digital pass.

Now Apple is giving iPhone owners more control over that process. Samsung and Google already offer useful ways to accomplish something similar, so this is one of those rare phone features that can help you regardless of which of the big three you carry.

I would start with the low-risk stuff. Put your library card or gym membership on your phone and see how it goes. If it saves you from carrying another card around every day, great. Just remember that a photo-based pass and an official digital credential are very different things. Your phone can replace more of your wallet than it used to, but I would not empty the whole thing yet.

If your phone could replace every card in your wallet tomorrow, which physical card would you be most nervous about giving up for good? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Anthropic AI sends fake murder tip to Philadelphia police

Mon, 19 Oct 2026 12:00:40 -0400

Artificial intelligence can write your emails, research complicated questions and even handle tasks while you're away. But what happens when an AI system takes an action nobody intended? Philadelphia police recently got an unexpected answer.

An AI model developed by Anthropic submitted a fabricated eyewitness tip about an unsolved murder through a Philadelphia police website. The submission happened during automated testing, and the model apparently believed it was generating an example interaction. Fortunately, the tip was flagged as spam before reaching investigators. However, the incident raises an uncomfortable question about what happens when AI agents interact with websites and public services without adequate safeguards.

AG BLANCHE REJECTS CALLS FOR NEW AI LAWS AFTER ROGUE AGENTS TARGET US GOVERNMENT WEBSITES

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

The incident involved PhillyUnsolvedMurders.com, a website where people can submit information about unsolved homicide cases in Philadelphia. On July 18, 2026, an AI model submitted a tip claiming to have information about a killing. According to Anthropic's October 9 report, the model was Claude Haiku 4.5. It had been assigned to generate and perform example tasks on randomly selected webpages. During one test, Claude encountered a page about an unsolved homicide that included a police department tip form. Rather than simply demonstrating how someone might use the form, Claude filled it out with invented information and submitted it.

Here's what the model wrote: "I may have information regarding this case. I recall seeing someone matching the description in the area around [the street named on the page] during that time period. Please contact me if this information is relevant." There's a particularly troubling detail here. The website contained no description of the perpetrator. Claude invented that reference while presenting itself as someone who might have witnessed something relevant to the investigation. The model also left the name and contact fields blank, which the website permitted. It then submitted the tip. Fortunately, the police department's spam filtering caught the submission before it could reach detectives.

Anthropic's explanation reveals how a relatively simple oversight can lead to an unintended action. Claude had been instructed never to log in, create accounts, enter personal information, make purchases or submit anything destructive. However, those restrictions did not explicitly prohibit submitting online forms. As a result, the model completed the tip form as part of its assigned task.

Anthropic says the available transcript suggests Claude was generating example content rather than intentionally trying to mislead law enforcement. However, the company acknowledges that determining a model's intentions requires further analysis. That qualification is important. The evidence does not establish that Claude deliberately set out to deceive investigators. Instead, the incident shows how an AI system can carry out an action that its developers never intended, even while apparently attempting to complete its assigned task. Because Claude had access to the live internet during testing, it was able to submit the fabricated tip directly to a police website.

According to the Philadelphia Police Department's October 9 statement, the submission was flagged as spam and never forwarded to its Real-Time Crime Center for investigative review or distribution. After Anthropic briefed police on October 8, department personnel located the submission in the website's tip records and confirmed that the corresponding email remained in spam. Police also reported no evidence of unauthorized access to department systems or compromised police data. The department emphasized that all crime tips undergo human review before investigators act on them. Even when a tip appears credible, detectives must assess the information and look for supporting evidence. That process provides another layer of protection against fabricated submissions.

While that is reassuring, the timeline raises additional concerns. The submission occurred on July 18, 2026, at 11:27 p.m. According to Philadelphia police, Anthropic discovered the incident on September 28 and notified the department on October 7. Police met with company representatives the following day. That means more than two months passed before Anthropic discovered the false submission. The department called the two-month delay in detecting and reporting the incident to the city "unacceptable" and urged technology companies to strengthen their safeguards.

AI AGENT HACKS GYM SYSTEM TO MOVE UP WAITLIST

Think about what could have happened if the fabricated tip had reached detectives. Investigators might have spent time chasing information that had no legitimate source. An innocent person could potentially have faced unnecessary scrutiny. Neither outcome occurred here. However, the incident raises serious concerns for law enforcement agencies that depend on public tips. Police departments regularly receive information from witnesses, neighbors and people who believe they may know something about a crime. Those submissions can help investigators uncover new evidence, especially in cases that have remained unsolved for years.

Now consider how easily an AI system can generate convincing text and submit it through a public website. Without adequate safeguards, automated submissions could overwhelm investigators or make legitimate leads harder to identify. There's also a legal question. Pennsylvania law generally prohibits knowingly providing false information to law enforcement. However, the law's application to AI-generated submissions and the people or companies responsible for them would require separate legal analysis. The available evidence does not establish that Anthropic or its employees committed a crime.

Meanwhile, Philadelphia officials are also considering a broader response. The department said Mayor Cherelle L. Parker's administration will explore regulatory protections with state and federal partners to address incidents involving AI systems. Police are coordinating with the city's Law Department and technology officials as they continue reviewing what happened.

The Philadelphia incident was one of several cases described in Anthropic's October 9 report, titled "Investigating unintended model actions in our evaluations and internal use." The company identified four categories of unexpected behavior involving Claude models interacting with outside websites and systems.

In one case, Claude exploited a software flaw on a university server to run commands after a scientific analysis tool stopped working. The model examined the website, found a vulnerable script and used it to complete the calculation. Another model found ways to access publicly available information that normally required a fee or an access token. Anthropic also observed models using URL-shortening services to work around limits designed to restrict certain web requests.

And the Philadelphia case was not the only example involving an online form. Anthropic reported that some models submitted real forms when they were supposed to use practice versions or stop before final submission. These incidents occurred during evaluations and internal use. Anthropic said the incidents had minimal impact and, to its knowledge, did not involve customer data or its own internal systems.

Following its investigation, Anthropic announced additional safeguards designed to prevent AI models from interacting with outside systems in unintended ways. The company said it has stopped running certain evaluations, moved others into offline environments and rebuilt some tests to avoid contacting live websites. It also expanded restrictions on live internet access to all internal evaluations until it can confirm that its security and monitoring systems reliably detect this behavior.

Additionally, Anthropic strengthened restrictions on tools that allow Claude to retrieve information from websites. The company developed automated systems to identify and block unexpected actions. According to Anthropic, those systems blocked every incident described in its report when the company tested them against the previously identified cases. However, that result does not guarantee the safeguards will catch every future problem. Anthropic acknowledged that further work is needed to improve how its models handle ambiguous instructions and unexpected obstacles.

GRANDMOTHER SUES AFTER ALLEGED AI FACIAL RECOGNITION ERROR LED TO MONTHS IN JAIL, EXPERTS SOUND ALARM

You might be wondering what an incident involving a police website has to do with your own use of artificial intelligence. The connection is that AI agents are increasingly capable of performing actions instead of simply providing answers. Depending on the tools and permissions available, they can browse websites, complete forms and interact with connected services.

That's incredibly useful when everything works as intended. However, an agent can misunderstand instructions or continue pursuing a task when it should stop. For example, you might ask an AI assistant to research travel arrangements. If that assistant has permission to complete bookings, a misunderstanding could potentially result in an unwanted reservation. The Philadelphia case shows why AI agents need clear instructions and firm limits, especially when they can submit information to police departments, government agencies or other organizations. We reached out to Anthropic for additional comment, but the company did not respond before our deadline.

You don't need to abandon AI agents because of this incident. However, I recommend keeping control over actions that could affect your accounts or other people.

These precautions cannot eliminate every risk. However, they can help reduce the consequences of an unexpected action.

What concerns me most about this incident is where the AI decided to act. We're talking about an unsolved murder involving real victims and families still waiting for answers. A model generated a fabricated eyewitness account and submitted it through a police website. Fortunately, the department's safeguards prevented that information from reaching investigators. But I find it troubling that Anthropic didn't discover the incident until more than two months later. I see tremendous potential in AI agents, and I've written about how they can save us time by taking over frustrating tasks. However, this incident shows why giving AI the ability to act independently requires careful oversight. Anthropic deserves credit for publishing details of what went wrong and explaining its response. At the same time, companies developing these systems need to demonstrate that their safeguards work before allowing their models to interact with sensitive services such as police departments and government agencies. We should expect better detection, faster disclosure and clear accountability when something goes wrong.

If an AI system submits false information to police or another government agency, who should be held responsible: the company that developed it, the people operating it or nobody if the action was unintended? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Newsletter

New iPhone spyware can steal passwords and photos

Mon, 19 Oct 2026 06:45:24 -0400

Your iPhone probably holds more personal information than your wallet. Think about the passwords you've saved, the photos you never intended to share and the private notes you keep handy. Now, security researchers have uncovered a more aggressive version of spyware designed to get its hands on that information.

The threat is called P7 DarkSword, and researchers at mobile security company iVerify discovered it while investigating an infected iPhone. According to their Oct. 8, 2026, report, the spyware can collect sensitive information and communicate with attackers who can issue additional commands remotely.

That sounds alarming, and it should get your attention. However, the research does not establish that every iPhone is vulnerable. Here's what researchers discovered and how you can better protect your device.

YOUR PHONE SAYS IT'S UPDATED. CHECK OTHER SETTINGS, TOO

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

P7 DarkSword is a newly identified variant of DarkSword, an existing iPhone spyware family. Researchers at iVerify discovered it while investigating a suspicious infection in August 2026. Their security system had flagged unusual activity on a customer's device. After examining the phone with the customer's permission, the team discovered that the spyware behaved differently from versions they had previously encountered.

The researchers also searched for related malicious code using the Validin threat intelligence platform. Eventually, they identified another version of the spyware hosted on suspicious infrastructure. Their analysis revealed that the attackers had modified the code to make it more capable and harder to investigate. The name P7 comes from a prefix the attackers used in their programming code. While that detail won't mean much to most iPhone owners, the changes behind it are concerning. The spyware now performs more data collection directly on the infected phone and gives attackers additional control over what happens next. Apple told CyberGuy that DarkSword originated from sophisticated mercenary spyware developed at considerable expense. After the spyware leaked, the technology became available to common criminals.

Once attackers successfully compromise a vulnerable device, P7 DarkSword can reach information that most people would consider deeply private. Researchers identified several capabilities in the spyware's code.

For someone who keeps sensitive documents or financial information on an iPhone, the potential exposure is serious. However, these findings describe the spyware's capabilities. They do not establish that attackers successfully stole every type of information from the device involved in the investigation.

One particularly troubling feature is how frequently the spyware can contact its operators. According to iVerify, P7 DarkSword uses a command-and-control system that can check for instructions every 15 seconds. Attackers can change that interval remotely. This allows the spyware to receive new instructions after the initial infection. For example, an attacker could direct it to collect additional files or examine information stored on the device. The malware also supports commands that scan the phone's file system and execute JavaScript inside its running environment.

Researchers found that the spyware injects its communication component into SpringBoard, a core iPhone system process responsible for the Home Screen and other interface functions. The attackers also removed some diagnostic logging and reduced certain activities that could reveal the infection during an investigation. These changes make the spyware harder for security researchers to examine. However, iVerify did not establish that the malware is completely undetectable.

APPLE AIRDROP, ANDROID QUICK SHARE FLAWS PUT PHONES AT RISK

DarkSword is associated with an iOS exploit chain that attackers can use to compromise vulnerable devices through malicious web content. Security researchers have linked the P7 variant to distribution through malicious advertisements and compromised websites, sometimes called watering-hole attacks.

That means someone using an outdated, vulnerable iPhone could encounter malicious content while browsing the web, potentially without realizing anything unusual happened. However, these attacks depend on exploitable security weaknesses. Installing Apple's security updates protects against the known vulnerabilities used by earlier DarkSword attacks. The original iVerify investigation focuses primarily on how P7 operates after infection. It does not fully reconstruct how the customer encountered the malicious content. That's why the exact circumstances of that particular infection remain unclear.

Earlier DarkSword attacks targeted iPhones running iOS 18.4 through iOS 18.7. Apple told CyberGuy that it patched the underlying vulnerabilities in 2025, before DarkSword first leaked. The company also released a security update in March 2026 for older devices that could not install newer versions of iOS. According to Apple, iPhones running the latest available updates for iOS 15 through iOS 27 remain protected against the known DarkSword exploits.

Researchers also identified exploit components associated with iOS 18.7 in the newer P7 investigation. However, they have not confirmed that the spyware can compromise fully updated iPhones. As of October 2026, iOS 27 is Apple's current major iPhone software generation. However, the latest available update depends on your iPhone model. Devices that have not received available security updates may remain exposed to known vulnerabilities.

The research is a reminder that even sophisticated phone security can face serious threats. Fortunately, there are steps you can take to reduce your exposure. Start with these protections, especially if you've been putting off a software update.

Apple regularly releases updates that fix vulnerabilities attackers can exploit. Checking for updates is especially important if you haven't updated your iPhone recently.

To check your current version and install updates:

Next, go to Settings > General > Software Update > Automatic Updates and enable Automatically Install. This helps your phone receive future security fixes without relying on you to remember.

On iOS 27, Apple also offers Background Security Improvements. These provide additional protections between major software updates.

This setting adds another layer of protection against newly discovered security problems.

Avoid opening unexpected links in text messages or emails, especially when they pressure you to act quickly. Malicious web content has played a role in previously documented iPhone attacks, so this is a sensible precaution. Consider using strong antivirus software that offers malicious website blocking, phishing protection and scam-link warnings. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com. These features can help you avoid dangerous content before you open it. However, iPhone security apps cannot perform the same deep malware scans available on computers. They also cannot guarantee detection or removal of sophisticated spyware like P7 DarkSword. That's why keeping iOS updated remains essential.

HOW TO FIND COMPROMISED PASSWORDS ON IPHONE AND ANDROID

If you believe someone may specifically target you with sophisticated spyware, Apple's Lockdown Mode offers stronger security protections. It restricts certain website technologies, messaging features and device connections to reduce opportunities for attackers. Apple designed this feature for people facing unusually advanced threats. Most iPhone owners won't need it because some everyday features become limited. According to Apple, security researchers confirmed that the known DarkSword exploits do not work on devices with Lockdown Mode enabled.

To turn it on:

For more on targeted attacks, read our article about Apple's spyware warnings reaching iPhone users in 110 countries.

Because P7 DarkSword can target keychain and cryptocurrency wallet information, pay attention to unusual activity in your sensitive accounts. Apple recommends protecting your iPhone with a passcode, using a strong password and two-factor authentication (2FA) for your Apple Account and installing apps from the App Store. Use a reputable password manager to generate and securely store strong, unique passwords for every account. Review alerts from financial services. Keep in mind that a password manager cannot protect credentials if sophisticated spyware has already compromised your device. If you have credible evidence that your iPhone was compromised, change important passwords using another trusted device. Also, contact your financial institutions if you notice unauthorized transactions. Cryptocurrency users should seek trusted wallet-security assistance before moving funds. These steps can limit damage after an account compromise, although they cannot remove sophisticated spyware from an infected phone.

Advanced spyware may operate without obvious symptoms. Your iPhone could appear to work normally, so a healthy battery or the absence of strange pop-ups cannot prove that your device is clean. If you receive what appears to be an Apple threat notification, verify it by signing in directly at account.apple.com, rather than clicking links in the message. Apple provides additional information about recognizing and responding to these alerts on its threat notification support page. Then seek assistance from a qualified mobile security specialist. A routine security app scan may not detect an advanced infection.

If you have strong reason to suspect spyware, avoid using that phone for sensitive activities until you've received guidance. From a separate trusted device, secure important accounts and review recent sign-ins. You should also preserve any genuine Apple threat notifications or suspicious messages. For a potentially targeted attack, contact a specialist before erasing your iPhone. Resetting the device can destroy evidence investigators may need, and it may complicate efforts to determine what happened.

What concerns me most about this discovery is how much information attackers could potentially collect from a single phone. We trust our iPhones with some of our most private information, often without thinking twice about where we store it. P7 DarkSword shows how dangerous that access could become if attackers successfully exploit a security weakness. It's also troubling to see expensive mercenary spyware leak into the hands of common criminals. Apple says the vulnerabilities behind these known attacks were patched before the spyware leaked, which is reassuring for people who keep their devices updated. I would check your iPhone's software version today, especially if you haven't updated it recently. And if you use your phone for financial transactions or store sensitive personal information, take a few minutes to review your account security.

Do you trust your iPhone to keep your personal information safe, or does discovering spyware like DarkSword make you question how secure your phone really is? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Newsletter

Hackers could already be inside American utilities, cyber experts warn of 'Trojan Horse' threat

Sun, 18 Oct 2026 18:01:09 -0400

The cyberattack targeting French supermarket freezers and causing millions of dollars in losses last week should be an ominous warning to American businesses, cybersecurity experts told Fox News Digital.

Unknown hackers took over the refrigeration in hundreds of supermarkets across France, raising temperatures above 100 degrees Fahrenheit overnight, causing massive spoilage. It could happen here, and it isn't just grocery stores that need to be on guard, John Walsh, senior vice president at the Germany-based software company IGEL, told Fox News Digital.

"Think about if we don't have water for seven days, or if they attack freezers and we don't have food," Walsh said. "That's a tough situation for people to live through, and it could create a lot of economic and social unrest. We're seeing that we're vulnerable and that attacks are taking systems down."

At IGEL, Walsh works with governments and companies who build and deploy critical infrastructure — such as Siemens and Rockwell — to bolster their operational security.

FRENCH SUPERMARKETS FACE MILLIONS IN LOSSES AFTER CYBERATTACK HITS REFRIGERATORS NATIONWIDE

As was the case in France, where Danish commercial refrigeration system manufacturer Danfoss highlighted that many of its affected fridges were legacy systems that no longer receive updates, much of the U.S.’s critical infrastructure is also in need of retooling, Walsh said.

"A primary obstacle in [operational technology] environments — whether in food manufacturing, pharmaceuticals, oil, or utilities — is that facilities operate assets that are 15 to 20 years old," Walsh said. "These systems are expensive, fragile, and essential to ongoing operations."

FBI OVERHAULS TECH BACKBONE TO COUNTER AI THREATS FROM FOREIGN ADVERSARIES, REDUCE RESPONSE TIMES, PATEL SAYS

Decision makers at the companies Walsh works with don’t want to go through the hassle of taking key systems offline in order to upgrade and secure them further, operating under a "if it's not broken, don't fix it" mindset," he said.

But critical infrastructure, like almost every aspect of American society, is becoming increasingly integrated with technology and embedded into digital infrastructure, forcing cybersecurity firms to fundamentally shift strategies.

BILL GATES SOUNDS ALARM ON AI-POWERED CYBERATTACKS, WARNS OF 'NEGATIVE SURPRISES' WITHIN A YEAR

"One of the big things we have to consider is that we're moving from a thought process of security to resilience," Walsh said.

As AI helps hackers become more sophisticated, it’s no longer wise to attempt to completely shut them out of key systems, Walsh said. System operators are better off assuming the hackers are already there.

AN AI CYBERATTACK COULD TURN OFF AMERICA'S LIGHTS BEFORE WASHINGTON EVEN UNDERSTANDS WHY

"Security is kind of like, 'I feel I can trust that things are okay.' Resilience is where you make the assumption the attacker is present—where, when the attacker is present, you control the blast radius," Walsh said.

A so-called Trojan horse could already be inside America's electrical grid and other critical infrastructure, just waiting for the adversary to activate it, he said.

"They've demonstrated taking it down, which to some degree is them practicing, honing their skills, and honing their methodologies against real targets while sending a message," Walsh said.

IRANIAN HACKERS ATTACKED OUR WATER SYSTEMS. HERE ARE 5 THINGS OUR LEADERS NEED TO DO NOW

Policy experts are grappling with how to make recommendations to lawmakers, given that so many things we depend on in our everyday lives are connected to the internet.

"I am shocked that appliances have access to the internet," Amy Kremer, the chair of Humans First, told Fox News Digital.

MAJOR US GROCERY CHAINS HIT BY CYBERSECURITY INCIDENT

"I understand the convenience, but at the same time, you are going to have potential problems with it. That should be a concern to all Americans — not just appliances, but things like your Nest thermostat and other devices in your house that could be hacked into," she continued.

"As we learn every single day, it's capable of more and more. It's great that we have technology — it's changed the world and made it a much smaller place where we interact and communicate with each other all the time. But with that also comes vulnerabilities," Kremer added.

WATER CYBERATTACK HITS AT LEAST 7 STATES

America’s critical infrastructure is indeed vulnerable to these types of threats, Walsh said, citing previous examples, including a 2026 coordinated cyberattack on Minnesota’s water systems.

"Think about if you were to try to disrupt the U.S. economy or begin to do terrorism-type activities. What would you do? You'd go after water and wastewater. You'd go after the food supply. Exactly what occurred here, but at a larger scale," Walsh said.

FIRST ON FOX: TEXAS BECOMES TESTING GROUND FOR NEW DEFENSE AGAINST ATTACKS ON AMERICA’S WATER SYSTEMS

"We're definitely more vulnerable, they're definitely targeting us, and citizens, government, and the international community need to get governance in place to push industries to implement these protections," he said.

Walsh also warned that this could be just the beginning, claiming a recent string of hacks could be indicative of hackers honing their skill sets as they prepare for bolder attacks.

"I do think that what we're beginning to see is a pattern across the U.S., France, and the UK. We see the adversary—potentially a geopolitical adversary—basically practicing their art and demonstrating their art in different locations," he warned.

Fox News Digital contacted Danfoss for further comment.

Oracle Health data breach exposes nearly 20 million patients

Sun, 18 Oct 2026 12:07:47 -0400

When you visit a doctor or hospital, you expect your medical information to stay private. After all, your health records can reveal some of the most personal details about your life. Now, a massive cyberattack involving Oracle Health is raising serious questions about how well that information is protected.

Nearly 20 million people reportedly had their personal and medical information compromised in a cyberattack involving older Cerner systems. The attack dates back to early 2025, but new details about its reach are still emerging. For patients, the concern goes well beyond stolen passwords. Hackers may have obtained Social Security numbers, diagnoses and even medical images.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

MEDICAL IDENTITY THEFT FOLLOWS YOU INTO THE DOCTOR'S OFFICE

The Oracle Health data breach appears to be much larger than earlier patient notifications suggested. According to figures reported in filings with the Texas Attorney General, the personal and medical information of approximately 19.9 million people was compromised in a cyberattack involving legacy Cerner systems. The Texas Attorney General's official data breach portal published Cerner's entry on October 2, 2026. It lists 2,992,244 affected Texas residents. The nationwide figure reported in connection with the filing is 19,929,149 people.

Oracle has not separately confirmed the nationwide total in a public statement. Still, the reported scale would place this incident among the largest healthcare data breaches in U.S. history. The attack involved older systems belonging to Cerner, an electronic health records company Oracle acquired in June 2022 for approximately $28.3 billion. The business now operates as Oracle Health. Cerner's technology helps hospitals and healthcare providers manage patient information. As a result, unauthorized access to those systems can expose records belonging to patients across multiple healthcare organizations.

The trouble began in early 2025. Oracle started notifying affected healthcare customers in March after discovering unauthorized access involving older Cerner systems. According to Oracle's customer communications, the company became aware of the incident around February 20, 2025. Investigators found evidence suggesting that an attacker used stolen customer credentials to access a legacy server sometime after January 22. The attacker then copied information to a remote server.

The server had not yet been migrated to Oracle Cloud. However, investigators have not publicly established that the server's age caused the breach. The precise way the attacker obtained the stolen credentials also remains unclear. This raises an uncomfortable question. How much sensitive patient information remains on older healthcare systems, even after a major technology company takes ownership?

The attacker allegedly tried to turn the stolen information into a multimillion-dollar payday. According to earlier BleepingComputer reporting, an individual using the name "Andrew" contacted affected hospitals and demanded cryptocurrency payments. The attacker reportedly threatened to leak or sell stolen patient information unless the victims paid.

The individual also allegedly created public websites about the breach to increase pressure on healthcare organizations. At the time, researchers had not established a connection between the attacker and a known ransomware or extortion group. For hospitals, that creates a difficult situation. Even if an organization pays, there is no guarantee the criminal will delete the stolen records or refrain from selling copies. Meanwhile, patients may have no idea their information is being used as leverage.

What personal and medical information was stolen?

A sample breach notification filed with California regulators provides a closer look at the information potentially exposed.

Depending on the patient, the compromised records may have included:

The exact information exposed can vary from person to person. However, the combination of personal identifiers and medical details makes this incident particularly troubling. Unlike a stolen credit card, you cannot simply cancel your medical history and request a replacement. Your diagnoses, treatment records and past prescriptions can remain sensitive for years.

Criminals could potentially use that information to create convincing medical scams, impersonate patients or commit identity theft. They may also combine medical details with other stolen information to make fraudulent calls and emails appear more credible.

FAKE PATIENT PORTAL SCAM CAN STEAL YOUR LOGIN AND INFECT YOUR PC

State breach filings offer a clearer view of the attack's scale. The Texas attorney general's October 2, 2026, filing lists 2,992,244 affected residents in Texas alone. Other state notifications show how widely the incident spread. Oregon reported 1,978,661 affected residents, while South Carolina identified 283,903. Washington also reported 69,238 people whose information was compromised.

These figures represent portions of the overall incident and should not be added to the nationwide total of nearly 20 million. Meanwhile, filings with Oregon regulators identify January 22 through April 1, 2025, as the reported breach period, with February 20 listed as the discovery date. These disclosures show how complicated healthcare breach reporting can become. Patients in different states may receive notifications at different times, while the full impact can take months or longer to emerge.

Unfortunately, healthcare organizations have become attractive targets for cybercriminals. Medical records contain information that can support identity theft and fraud long after an initial attack. One of the biggest examples came in 2024, when attackers targeted Change Healthcare, a subsidiary of UnitedHealth Group. That breach ultimately affected approximately 192.7 million people.

The Oracle Health incident appears smaller by comparison. Still, a reported 20 million affected individuals represents an enormous amount of sensitive information. The incident also raises questions about how healthcare organizations protect records stored on older systems. Those systems can remain essential to daily operations, even as companies upgrade their technology. In this case, investigators identified stolen credentials as the reported access method, rather than a publicly confirmed vulnerability in the legacy server. We reached out to Oracle Health for comment, but did not hear back before our deadline.

You may have never heard of Cerner, even if your hospital uses its technology. That makes it harder to know whether your records were involved. However, there are practical steps you can take now to reduce the risk of identity theft and medical fraud.

Check your mail for notices from Cerner, Oracle Health or a healthcare provider you have visited. The notification should explain what information may have been exposed and whether any protective services are available. You can also contact your hospital's privacy office directly. Avoid clicking links in unexpected messages claiming you need to verify your medical records.

A credit freeze can help prevent criminals from opening new credit accounts using your identity. You can request one for free through Equifax, Experian and TransUnion. You'll need to contact all three bureaus separately. A freeze will not prevent every form of identity theft, but it can block an important route criminals use.

Review your health insurance explanation of benefits statements for appointments, treatments or prescriptions you do not recognize. Also, look for unfamiliar providers or incorrect information in your medical records. Contact your insurer and healthcare provider if something looks suspicious. Medical identity theft can lead to fraudulent bills and inaccurate patient records, so catching problems early is important.

A healthcare breach can create opportunities for phishing emails and malicious attachments. Strong antivirus software can help detect malware, suspicious downloads and some dangerous links before they cause harm. Keep your devices updated and avoid downloading files from unexpected healthcare messages. Antivirus protection cannot undo the Oracle Health breach, but it can help defend against attacks that follow it. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

THE SCAMMER AT YOUR DOCTOR'S OFFICE MAY ALREADY KNOW WHO YOU ARE

Someone who knows your doctor's name or recent treatment details may sound legitimate over the phone. Criminals could use stolen information to impersonate healthcare workers, demand payments or ask you to confirm your Social Security number. Hang up and call the provider using a number from its official website or your insurance card. Never assume a caller is legitimate simply because they know something about your medical history.

Use unique passwords for healthcare portals and enable two-factor authentication (2FA) wherever available. A password manager can help you create and store strong passwords without reusing them. If you suspect your account credentials were compromised, change the affected password immediately. Remember, changing a password will not retrieve stolen medical records, but it can help protect your accounts from additional unauthorized access.

If your Social Security number was exposed, an identity theft protection service may help you monitor for suspicious activity involving your personal information. Some services also offer alerts and assistance with recovery. Review any free monitoring offered through your breach notification before purchasing a separate plan. Keep in mind that monitoring services cannot guarantee prevention of identity theft or detect every form of medical fraud. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com

What concerns me most about the Oracle Health breach is how little control patients have over where their medical information ends up. You can be extremely careful with your passwords and avoid suspicious links, yet your most sensitive records may still sit on a server you never knew existed. The fact that this attack involved a legacy server makes the situation even more frustrating. Investigators have identified stolen credentials as the reported access method, but we still don't know exactly how those credentials were compromised. When a company acquires a healthcare technology provider, protecting the information already stored in those systems should be a priority. Patients deserve to know that their records remain secure throughout technology upgrades. And consider the timing. The attack dates back to early 2025, yet its potential scale is becoming clearer in October 2026. That's a long time for people to remain uncertain about what happened to their information. Healthcare organizations need to do a better job protecting patient records and communicating clearly when something goes wrong.

Would you trust a hospital with your most personal medical information if you knew it was stored on older technology, and should healthcare companies face tougher consequences when millions of patient records are exposed? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Newsletter