Depending on the app and your settings, that reading, along with your glucose numbers, weight and medication schedule, may be stored in the cloud or shared with service providers. FTC cases show that some health apps have also disclosed sensitive information to advertising and analytics companies. Separately, data brokers market health-related profiles that scammers could exploit.

Here's what may be happening behind the screen of your health app and how to limit the exposure.

CyberGuy Live: Missed "Sick of Spam?" Get the replay and checklist

Our free CyberGuy Live class, "Sick of Spam?" has ended, but you can still watch the full replay and download our spam-stopping checklist. Kurt "CyberGuy" Knutsson walks you step by step through simple ways to reduce robocalls, spam texts, junk email and unwanted messages. Youll also learn how to curb political texts, clean up your inbox and spot messages that could put your personal information at risk.

Get the free replay and checklist now at CyberGuyLive.com.

ARE INSURANCE APPS WATCHING YOU?

Here's the assumption almost everyone makes: "My health data is protected. Isn't that what HIPAA is for?" Often, no.

HIPAA generally protects health information held by covered healthcare providers, health plans and their business associates. A consumer app you choose independently often falls outside HIPAA. However, an app may come under HIPAA when it handles protected health information on behalf of a covered provider or health plan.

Apps outside HIPAA do not operate without any rules. Many may still fall under the FTC's Health Breach Notification Rule, state consumer health laws and general protections against unfair or deceptive business practices.

Sen. Bill Cassidy, R-La., introduced the Health Information Privacy Reform Act. The proposal would extend HIPAA-like privacy, security and breach-notification standards to some health information held outside the traditional HIPAA system. It would also require plain-language warnings before certain technologies begin generating wellness data that HIPAA does not protect.

As of today, the proposal remains introduced and has not become law. That means the same blood sugar reading can receive different legal protections depending on who holds it and why.

You would think a company that builds a blood pressure app would only use your numbers to track your blood pressure. Federal regulators have repeatedly found otherwise.

These were not obscure apps built by scammers. They were mainstream health services, and regulators alleged that the sharing happened through ordinary advertising and analytics tools running in the background.

That does not mean every blood pressure app behaves the same way. However, it gives you a strong reason to check what your own app collects, where it stores the information and which companies receive it.

ARE APPLE DEVICES SPYING? WHAT YOUR IPHONE TRACKS

Here's the part that should genuinely unsettle you. A Duke University researcher contacted 37 data brokers as a prospective buyer. Twenty-six responded, and 11 were willing and able to sell mental health data. Some advertised information tied to depression, anxiety and other conditions, along with demographic details. One broker advertised names and postal addresses connected to specific conditions. Prices ranged from $275 for aggregated counts to annual licensing fees of $75,000 or more.

This problem reaches beyond mental health, as data brokers can collect and sell many forms of health-related information. The FTC has documented data broker categories related to pregnancy, diabetes, high cholesterol and other potentially sensitive health interests.

In a final order issued in December 2025, California's privacy regulator fined Datamasters $45,000 for failing to register as a data broker. The order said the company bought and resold contact lists tied to sensitive conditions.

Those lists included 435,245 postal addresses associated with Alzheimer's disease, more than 2.3 million associated with blindness or visual impairment, 133,142 associated with addiction and 857,449 associated with bladder-control issues. California's enforcement chief warned that reselling lists connected to Alzheimer's disease could enable targeting that goes far beyond ordinary advertising.

If you want to look up your exposed information online, now is the time. Get a free scan to find out if your personal information is already out on the web and show how vulnerable you might be: CyberGuy.com.

Put yourself in a scammer's shoes for a second. Random cold-calling is a numbers game. Most people hang up. However, a list of people associated with diabetes or high blood pressure could help a scammer choose a much more convincing lie, including fake Medicare and healthcare offers.

A caller claims to be from Medicare or a diabetes association and offers free glucose meters or test strips. All they need is your Medicare number "to process the shipment." Federal health officials have warned about callers impersonating Medicare, Social Security or diabetes organizations while offering free glucose meters, test strips and other supplies. The supplies may never arrive, or someone may fraudulently bill Medicare using your information.

A caller could reference your blood pressure or diabetes like a nurse checking in, then pivot to a plan that supposedly covers exactly what you need. Knowing a real detail about your health does not prove the caller represents Medicare, your doctor or an insurance company.

Ads, emails or calls may push treatments or supplements connected to a condition associated with your profile. Their timing may make the offer feel personal, but that does not make the medical claim or the seller legitimate. A scammer does not need to hack your phone to personalize a pitch. Health-related information can come from commercial profiles, public records, online activity, data breaches or other sources. A medically segmented list could help a caller make a fraudulent offer sound far more believable.

You do not have to. That is what makes this so hard to see coming. Your blood pressure app, glucose monitor and smart scale can each add information to a larger profile, depending on the service, its partners and the settings you enable. Data brokers may also compile property records, voter files, online activity and information purchased from other companies. Once information enters this ecosystem, companies may buy, resell, combine and refresh it across data broker and people-search services you have never heard of.

Not every app behaves the same way. Some provide stronger privacy controls than others. Features, settings and company practices can change, so review the current privacy notices for every service you use.

Connected OMRON monitors can transfer readings to the OMRON Connect app through Bluetooth, where you can upload, store and share your heart health history. Data handling may depend on your device, permissions and connected services, so review OMRON's current privacy notices before syncing.

Certain Dexcom products fall under HIPAA when Dexcom or a healthcare provider supplies them as insurance-reimbursable products in the United States. Other Dexcom websites, support programs and services may process information outside that HIPAA-covered context. Dexcom also provides opt-outs for certain data sales, sharing and targeted advertising under applicable state laws.

Withings says it does not share health information with advertising partners. It may share some non-health personal information to deliver tailored advertising, and information can sync with outside apps or partners when you authorize a connection.

Google committed not to use health and wellness information collected from Fitbit devices for Google Ads and to keep that information in a separate data silo. That commitment came through regulatory conditions attached to Google's Fitbit acquisition, so continue reviewing current Fitbit and Google privacy controls.

If you choose pharmacy or coupon features, Medisafe says your personal information may be disclosed to partner pharmacies or coupon companies. Those companies will then handle the information under their own privacy practices.

Your device encrypts Health information, and iCloud uses end-to-end encryption when you enable the required account protections. In addition, Apple prohibits apps from using HealthKit data for advertising. You decide which outside apps can read or write individual categories of Health information.

The takeaway is that you have more control than you might think, but you need to go into the settings and use it.

Here's a simple step-by-step guide to increasing your privacy when using health apps.

iPhone: Go to Settings > Privacy & Security > Tracking, then turn off Allow Apps to Request to Track. Next, go to Settings > Privacy & Security > Apple Advertising and turn off Personalized Ads.

Android: Go to Settings > Google > All services > Ads > Ads privacy. From there, you can turn off ad topics, app-suggested ads and ad measurement. Some devices also provide an option to delete the advertising ID. Menu names can vary by phone.

These settings limit certain forms of advertising and cross-app tracking. They do not stop every app from collecting information you enter directly or using other identifiers allowed under its privacy policy.

Open the account or privacy settings in each health app you use. Switch off anything labeled marketing, ad personalization or third-party sharing. Disconnect any linked apps you do not actively use.

Check for links labeled "Do Not Sell or Share My Personal Information," "Your Privacy Choices" or something similar. Covered businesses must provide these controls under laws such as California's CCPA when they sell or share personal information as the law defines those terms. Your available rights may depend on where you live. An opt-out can restrict certain data practices, but it does not guarantee that all of your information will remain with the company.

Medicare does not make unsolicited calls offering free medical supplies in exchange for your Medicare or financial information. If a caller references a specific health condition, the detail may have come from a commercial profile, public record, data breach or another source. Do not assume the caller is legitimate simply because they know something about you. Never confirm personal or Medicare information during an unexpected call.

Turning off tracking in your apps can help reduce future collection, but it does not remove information that companies have already gathered, shared or sold. That data may already appear across dozens or even hundreds of broker and people-search sites.

You can submit removal requests yourself, but the process takes time. Each site has its own opt-out steps, and you may need to repeat them because your information can reappear months later.

A reputable data removal service can handle much of that work for you. These services send opt-out requests to data brokers, monitor for reappearing information and submit new removal requests when needed.

No service can erase every trace of your information online, but ongoing removal can reduce how much personal data is available to advertisers, scammers and identity thieves.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

Your health app may not receive the same HIPAA protections as your doctor's office. FTC cases show that some major health platforms disclosed sensitive information to advertising and analytics companies, while data brokers market profiles connected to health conditions. Scammers could use details like these to make Medicare, pharmacy and supplement pitches sound more believable. Turn off tracking and sharing where possible, and use available deletion or opt-out requests for information companies have already collected.

Would you stop using a health app if it shared your medical data, or would stronger privacy controls be enough to keep you? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

CISA says the Russian state-sponsored group Laundry Bear can compromise certain email accounts when someone simply opens or previews a malicious message. The attack targets organizations running unpatched versions of the Zimbra Collaboration Suite.

Once the email appears, hidden code can collect passwords, authentication data and as much as 90 days of messages. You may never see a warning or realize that anything happened.

The Cybersecurity and Infrastructure Security Agency issued the warning with the National Security Agency, FBI and cyber authorities from several allied countries. The agencies say the group has successfully targeted more than 10 Western organizations since July 2025.

INVESTIGATORS BELIEVE IRANIAN HACKERS ARE LIKELY BEHIND CYBERATTACK ON MINNESOTA WATER SYSTEMS: REPORT

CyberGuy Live: Missed "Sick of Spam?" Get the replay and checklist

Our free CyberGuy Live class, "Sick of Spam?" has ended, but you can still watch the full replay and download our spam-stopping checklist. Kurt "CyberGuy" Knutsson walks you step by step through simple ways to reduce robocalls, spam texts, junk email and unwanted messages. Youll also learn how to curb political texts, clean up your inbox and spot messages that could put your personal information at risk.

Get the free replay and checklist now at CyberGuyLive.com.

Laundry Bear, which Microsoft tracks as Void Blizzard, exploits a security flaw known as CVE-2025-66376. The cross-site scripting vulnerability affects the Classic user interface in certain versions of the Zimbra Collaboration Suite.

Zimbra is an email and collaboration platform used by some governments, schools, businesses and other organizations as an alternative to services such as Microsoft Exchange or Google Workspace. Attackers can place malicious JavaScript inside a specially crafted HTML email. That code runs automatically when a vulnerable Zimbra webmail client displays the message.

The person reading the email does not need to open an attachment. The attack also avoids the usual request to enter a password on an obvious phishing page. However, the email still needs to appear on the screen. CISA describes the technique as a zero-click exploit. Proofpoint calls it a "half-click" attack because someone must open the email or allow it to appear in a preview pane. Either description leads to the same concern. A message can look harmless while code hidden inside it quietly attacks the email account.

Laundry Bear reportedly used the flaw as a zero-day before Zimbra released a patch in November 2025. A zero-day attack exploits a security weakness before the software maker provides a fix. CISA later added the vulnerability to its list of flaws that hackers actively exploit.

The available patch closes the known security hole. Yet Laundry Bear continues to target organizations that have not installed the update. That makes delayed patching especially dangerous. An organization may have strong passwords and trained employees, but an exposed email server can still give attackers another way inside.

The campaign has reached organizations connected to the defense industrial base and government. Attackers have also targeted education, energy, law enforcement, media, nonprofit groups and technology companies.

According to CISA, the malicious code attempts to collect the target's last 90 days of email. That could include private conversations with coworkers, contract discussions or information about upcoming meetings. An inbox may also contain password reset notices, invoices and documents that reveal how an organization operates.

Laundry Bear also collects the person's email address and password. The attack can copy the organization's Global Address List, which acts as a directory of employees and contacts. The hackers may then gain enough information to impersonate a trusted coworker or identify more valuable accounts.

CISA says the exploit also targets two-factor authentication tokens. Those tokens help prove that someone has already completed an authentication step. A stolen token or session cookie can let an attacker enter an account without completing the normal login process again.

FAKE PASSWORD-MANAGER ALERTS COULD PUT YOUR VAULT AT RISK

Stealing information provides immediate value, but Laundry Bear also tries to preserve its access. The attack creates a new Zimbra application passcode and sends it back to the hackers. Legacy email programs use these passcodes when they connect through services such as IMAP or ActiveSync and cannot support modern time-based authentication.

An unauthorized passcode can give the hackers another entrance to the mailbox. That access may continue even after someone changes the main account password. CISA has urged administrators to look for suspicious application passcodes, particularly passcodes labeled "ZimbraWeb."

Organizations should treat an unknown passcode as a sign that someone may have entered the account. Simply installing the patch after a compromise may leave the attacker's access in place.

Laundry Bear sends the stolen information to servers controlled by the group. CISA says the attackers use a collection framework called Flowerbed. The system moves smaller pieces of data through Domain Name System requests. DNS normally helps computers find websites and online services.

Attackers can hide encoded information inside those requests. Because organizations generate large amounts of legitimate DNS traffic, the malicious activity may blend into the background. Laundry Bear sends larger collections through encrypted HTTPS connections. That can include compressed archives containing mailbox data. Security teams may need to inspect network logs, authentication records and mailbox activity to understand what left the organization.

Laundry Bear also uses adversary-in-the-middle phishing kits. These tools create login pages that closely resemble legitimate email portals. When someone enters a username and password, the phishing system captures those credentials. It can also intercept session cookies created during the login process. That means an attacker may gain access even when the account uses conventional multifactor authentication.

CISA's indicators of compromise include domains that impersonated Zimbra infrastructure. Examples include mailnalysis.com, zimbrastat.com, zimbra-metadata.com and zmailanalytics.com. The presence of one of these domains in network logs could point to phishing or unauthorized account activity. However, organizations should review CISA's complete list because attackers can change their infrastructure.

Proofpoint found that Laundry Bear sent messages from attacker-controlled Proton Mail accounts and email addresses the group had already compromised. In one example, the sender claimed to represent a Belgian media-verification organization. The email proposed cooperation between European institutions fighting disinformation. It included a legitimate-looking link to a European Union events calendar. However, the malicious code sat inside the email rather than the linked website.

Dutch intelligence agencies publicly identified Laundry Bear in May 2025. Their investigation linked the group to a 2024 breach of the Dutch National Police. That incident exposed personal information belonging to police personnel. Investigators said the attack helped them identify a previously unknown Russian cyberespionage group.

Since at least 2024, Laundry Bear has focused on organizations connected to Russian strategic interests. Its targets have included NATO member states and groups supporting Ukraine.

Microsoft has documented compromises involving defense organizations as well as entities in transportation and aviation.A separate campaign targeted members of Ukraine's military with charity-themed phishing emails. Those messages disguised malware as requests for donations.

These campaigns suggest the group cares more about long-term intelligence collection than a quick financial payout. Access to email can reveal relationships, future plans and internal decisions.

PAIDWORK BREACH EXPOSES 23M USER RECORDS

The strongest protection starts with the organization running the email server because employees cannot personally patch a vulnerable installation. However, you can still take steps to spot suspicious activity and protect your other accounts.

Administrators should update Zimbra Collaboration Suite to a currently supported version and install all available security fixes. Organizations should confirm that the patch reached every server. An overlooked system may remain exposed even when the primary mail server has received the update.

Installing the patch blocks the known flaw, but it cannot undo a previous intrusion. Security teams should review CISA's published indicators of compromise. They should also search network records for connections to the listed domains and IP addresses. Authentication logs may reveal unusual locations, unexpected devices or activity outside normal working hours.

Review every Zimbra application passcode connected to an account. Pay close attention to unfamiliar entries and anything labeled "ZimbraWeb." Revoke any passcode that the account owner or IT department cannot verify. Because application passcodes can survive a regular password change, this review plays an important role in removing persistent access.

Administrators should examine mailbox access records and forwarding settings. They should also look for unfamiliar filters, deleted messages or sent emails that the account owner does not recognize. A compromised account may send convincing phishing messages to coworkers because the email comes from a trusted internal address.

Contact your IT or security team if you notice unfamiliar sent messages, unexpected password resets or login alerts you cannot explain. Do not rely only on changing your password. Laundry Bear can create an application passcode that may continue providing mailbox access after the main password changes. Your IT team should revoke unauthorized passcodes, end active sessions and check the account for suspicious activity.

Wait until your IT department has patched the server and removed unauthorized access. Then change your email password and any other password you reused. Create a unique password for every account. A password manager can generate strong credentials and store them securely. Hackers may test stolen email credentials on banking, shopping or social media accounts. Reused passwords can turn one compromised inbox into several compromised accounts.

CISA recommends phishing-resistant multifactor authentication where organizations can support it. Security keys and passkeys provide stronger protection than methods that rely on temporary codes. However, organizations still need to patch the underlying email software. Authentication controls cannot fully protect an account when malicious code runs inside a vulnerable webmail interface.

Strong antivirus software can help detect malicious downloads, fake login pages and follow-up malware connected to a broader phishing campaign. However, antivirus software may not stop this email exploit because the malicious code runs inside a vulnerable webmail session. Your organization still needs to update Zimbra and investigate the account for unauthorized access. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

An email login page can look convincing and still belong to an attacker. Instead of following a link inside an email, open your organization's known webmail address directly. Report unfamiliar authentication requests or repeated sign-in prompts to your security team. A sudden request to log in again could signal a phishing attempt or unauthorized account activity.

For years, we have warned you to avoid suspicious links and unexpected attachments. That advice still helps, but Laundry Bear shows why your organization also needs to keep the software behind your inbox updated. In this campaign, viewing an email can trigger malicious code on an unpatched server. The attackers can then reach into the mailbox, collect months of messages and steal authentication data. The hidden application passcode adds another concern. Changing a password may provide a false sense of security when an attacker has already created a separate route back into the account. Organizations using Zimbra should patch immediately and then investigate for signs of earlier access. Employees should remain cautious around unexpected login pages, even when the page carries familiar company branding.

Would you trust your workplace inbox if opening one message could expose 90 days of email without you clicking a link? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

- OpenAI to pay $3.2 million to settle DOJ allegations it favored foreign workers over Americans

- AI kill-switch bill could shut down rogue models

- Battlefield robots open new front in innovation war with major US adversary

STACKED DECK: OpenAI and one of its subsidiaries will pay $3.2 million to settle allegations that they discriminated against U.S. workers by favoring foreign workers with temporary employment visas, the Justice Department announced Tuesday.

POWER PLAY: President Donald Trump warned that the artificial intelligence race is the most critical competition in centuries. He argues that American communities must embrace AI data centers to secure technological dominance over China. Securing victory in the global artificial intelligence race is critical, Trump told Trace Gallagher during their exclusive interview.

ROGUE MACHINE: The phrase "AI kill switch" sounds like a red button hidden behind glass in a government bunker. The proposal now before Congress looks less dramatic, but it could give Washington significant new power over the country's largest AI companies.

UNTETHERED INTEL: The U.S. Army is teaming up with an artificial intelligence company to build an AI "brain" for military robots that can think, understand their surroundings and continue missions even after losing contact with human operators as the race for AI dominance intensifies.

HIDDEN HAND: Several major news organizations are hosting reporter fellows with salaries paid by donor-supported AI journalism groups, relationships that frequently go undisclosed.

'UNAUTHORIZED' BREACH: Revelations of OpenAI and Anthropic artificial intelligence agents hacking third parties has drawn the "serious concern" of Sen. Lisa Blunt Rochester, D-Del., who is seeking answers from the two businesses incorporated as public benefit companies in her state.

OPINION: Artificial intelligence sits at the center of nearly every major debate, from jobs and data centers to healthcare, national security and consumer protection. Missing from the national spotlight, however, is a more fundamental question: Will AI models pursue the truth, or will they be permitted to bury undisclosed biases inside their responses? 

ON DUTY: What if the next security guard rolling past your office had one wheel and never needed a coffee break? That is the pitch behind 1Rollo, a one-wheeled AI security robot from Estonian startup Rollo Robotics. The company believes its narrow design could patrol large properties at a lower operating cost than traditional security vehicles.

MAN OVER MACHINE: Investors are turning to artificial intelligence tools for guidance on their finances and investments, though they remain skeptical of its output and continue to lean on human advice ahead of key decisions, new data shows.

FOLLOW FOX NEWS ON SOCIAL MEDIA

Facebook

Instagram

YouTube

X

LinkedIn

SIGN UP FOR OUR OTHER NEWSLETTERS

Fox News First

Fox News Opinion

Fox News Lifestyle

Fox News Health

DOWNLOAD OUR APPS

Fox Business

Fox Weather

Fox Sports

Tubi

WATCH FOX NEWS ONLINE

Fox News Go

STREAM FOX NATION

Fox Nation

Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.

After about 30 seconds, a connected smartphone app analyzes the reading for signs of an irregular heart rhythm, including possible atrial fibrillation. AFib is the most common type of irregular heartbeat, and millions of people may have it without realizing anything feels wrong. It sounds like the kind of idea someone dreamed up during a very long bathroom break.

However, the possibility of catching a silent heart condition during something you already do every day deserves attention. Here's what the early research reveals about how well the seat works and where its limits begin.

CyberGuy Live: Missed "Sick of Spam?" Get the replay and checklist

Our free CyberGuy Live class "Sick of Spam?" has ended, but you can still watch the full replay and download our spam-stopping checklist. Kurt "CyberGuy" Knutsson walks you step by step through simple ways to reduce robocalls, spam texts, junk email and unwanted messages. Youll also learn how to curb political texts, clean up your inbox and spot messages that could put your personal information at risk.

Get the free replay and checklist now at CyberGuyLive.com.

COULD A PAINT-ON ELECTRONIC TATTOO SPOT HEART ATTACKS?

A conventional medical EKG usually requires you to lie down while a medical professional places electrodes on your chest and other parts of your body. The HARO EKG-seat takes a different approach. Its sensors collect electrical signals from your body while you sit normally. The seat records a six-lead resting EKG and sends the information to its companion app through Bluetooth.

You do not need to attach sticky pads or remember to put on a wearable. You sit for about 30 seconds and let the seat do the work. Hamberger Medical says participants in its usability testing could operate the system without special instructions. The oldest participants in one reported study were in their 90s, according to published reports about the device. That simplicity may become one of its biggest strengths. Many health devices end up forgotten in a drawer after the novelty fades. A toilet seat is harder to forget.

The company tested the seat through what it calls the Hamberger Heart Study. Researchers compared the seat's six-lead EKG with a standard 12-lead medical EKG. Hamberger Medical reported a high level of agreement between the two systems when checking for AFib and other rhythm abnormalities.

That sounds encouraging, but there is an important limitation. The complete results have not been published in an independently peer-reviewed medical journal. Public reports also do not provide enough detail about the study's size, false alerts or performance across different groups.

Without those numbers, we cannot tell how often the seat might miss AFib or mistakenly warn someone whose heart rhythm is normal. For now, the results should be viewed as promising company-reported findings. They do not prove that the seat can replace a hospital EKG or a doctor's diagnosis.

AFib causes the heart's upper chambers to beat irregularly. Blood may then pool inside the heart, which can allow clots to form. A clot can travel to the brain and cause a stroke. The American Heart Association says AFib is linked to about five times the risk of stroke. Some people feel a racing heartbeat or fluttering in their chest. Others notice fatigue, dizziness or shortness of breath.

However, AFib can also arrive without obvious warning signs. A person may feel fine while the irregular rhythm comes and goes. That creates a detection problem. A brief EKG at a doctor's office may look normal if the AFib episode ended before the appointment. Doctors sometimes use longer-term monitors when they suspect an intermittent rhythm problem. A toilet seat that records readings regularly could provide more chances to capture an episode.

WEARABLE PATCH VIBRATES WHEN DANGER IS NEARBY

The American Heart Association estimates that about 5 million Americans currently live with AFib. It projects that more than 12 million could have the condition by 2030. Early detection can help doctors decide whether someone needs medication, additional monitoring or treatment to restore a normal rhythm.

Dr. Paari Dominic, a cardiac electrophysiologist, told the American Medical Association that earlier intervention can significantly improve outcomes. He noted that research supports pursuing normal rhythm within a year of detecting AFib in appropriate patients. However, a notification from a toilet seat should begin a medical conversation. It should never end one.

Age raises the likelihood of developing AFib. High blood pressure also plays a major role. Diabetes, obesity, sleep apnea and certain heart conditions can increase the risk. Smoking and excessive alcohol use may contribute as well.

Heavy drinking can sometimes trigger an irregular heartbeat even in people without a known heart condition. Doctors often call this "holiday heart syndrome" because cases can rise during celebrations involving heavier alcohol use. People who already face a higher risk could benefit most from convenient monitoring. That decision should involve a cardiologist or another qualified medical professional.

A heart-monitoring toilet seat collects highly sensitive information, so its privacy protections deserve a close look. According to Hamberger Medical's app privacy policy, EKG processing happens locally on the connected phone or tablet. The company says readings are not sent to its servers. The app also lets you export a PDF report. Hamberger Medical recommends protecting the file with a password before sending it to someone else. However, your phone's backup settings may still upload app information to iCloud or Google Backup. The company notes that this depends on how you configured your device.

Before using any connected health product, check its backup settings and sharing options. You should also protect your phone with a strong passcode. For additional steps, see our guide on how to stop health and fitness apps from using your private data.

HEART CONDITION TIED TO LINDSEY GRAHAM'S DEATH CAN STRIKE WITHOUT WARNING WHAT TO KNOW

The HARO EKG-seat does not currently appear to be available for purchase. Hamberger Medical previously said the device was sold exclusively through its official German online shop at approximately $2,870. CyberGuy reached out to Hamberger Medical to confirm current availability, pricing and whether the company plans to sell the EKG-seat in the United States, but did not hear back before our deadline.

The HARO EKG-seat shows how health monitoring could blend into your normal routine. That part is genuinely promising. The clinical report suggests the seat can record EKGs that cardiologists interpret with strong accuracy. However, the current app results do not support relying on its automated AFib classification alone.

A normal app reading should not convince you to ignore symptoms. An abnormal warning should lead to a conversation with a medical professional. Contact your doctor if you notice a racing or irregular heartbeat, recurring dizziness or unexplained shortness of breath. Chest pain or pressure may signal a medical emergency, so call 911 right away. Never start or stop heart medication because of a consumer device result. Your doctor may order a clinical EKG or longer-term monitoring before making a diagnosis.

There is something undeniably clever about turning an ordinary toilet seat into a heart monitor. It fits health screening into a routine that people already follow without reminders. The company-reported results sound encouraging, especially for a condition that may hide between doctor visits. Smart health technology works best when it helps you notice a concern sooner and gives your doctor useful information. It becomes dangerous when a gadget creates false confidence or replaces professional care.

Would you trust a smart toilet seat with your heart data if it could uncover a silent problem before your next doctor visit? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

An Atlanta man now faces a felony charge after a special passcode allegedly erased his Google Pixel while U.S. Customs and Border Protection officers were trying to inspect it. Prosecutors say he knowingly destroyed digital property that the government had lawful authority to seize. His attorneys dispute that account. They argue that agents detained him unlawfully and had no valid authority to take the phone.

The unresolved case puts personal privacy and border security on a collision course. It also shows how quickly a phone protection feature can become the center of a federal prosecution.

New! Free live CyberGuy class: Protect Your Money From Todays Biggest Threats

Join us on Saturday, Aug. 29, at 10 a.m. ET for a free CyberGuy LIVE class covering five simple steps to help defend yourself against AI scams, fraud, identity theft and financial hacks. Kurt "CyberGuy" Knutsson will explain how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed. Youll also receive our financial protection checklist, and every registrant will get a link to the class recording afterward.

Reserve your free spot today at CyberGuyLive.com.

UK SPY POWERS DRAW US SCRUTINY OVER ALLEGED APPLE ENCRYPTION BACKDOOR DEMAND

Samuel Tunick, a U.S. citizen who lives in Atlanta, returned from a vacation in the Dominican Republic on Jan. 24, 2025. CBP officers directed him to a secondary inspection area at Hartsfield-Jackson Atlanta International Airport. During the encounter, agents took possession of his Google Pixel and asked for its passcode.

Tunick allegedly supplied a code that did not unlock the phone. Instead, an officer entered it and triggered a complete wipe. According to court filings described in published reports, the screen went dark, flashed several times and appeared to restart. The phone remained physically intact, but its stored data was gone.

Federal authorities later allowed Tunick to enter the country. A grand jury indicted him on Nov. 13, 2025, under a rarely used federal law covering the destruction of property to prevent a government seizure. Tunick pleaded not guilty. The charge remains an allegation, and the court has not decided whether the government's seizure was lawful. The case appears to be among the first publicly reported federal prosecutions centered on a phone's duress wipe feature.

Tunick's Pixel reportedly ran GrapheneOS, an open-source operating system designed to increase privacy and security on supported Google Pixel phones. GrapheneOS replaces the standard operating system. It does not work like a regular Android app.

One optional feature lets the phone's owner create a duress PIN or password. This credential differs from the code that normally unlocks the screen. When someone enters the duress credential, GrapheneOS immediately and irreversibly wipes the device. The process also removes installed eSIMs.

GrapheneOS says the wipe does not require a reboot and cannot be interrupted after it begins. The code works anywhere the operating system requests the device credentials, including the lock screen. The feature could help someone facing a violent thief or another coercive situation. Yet using it during a government search raises a separate legal question. Installing GrapheneOS or setting up a duress passcode is not the crime alleged in this case. Prosecutors are focusing on when Tunick allegedly used the feature and what he intended to accomplish.

Federal prosecutors charged Tunick under 18 U.S.C. Section 2232(a). The law applies when someone knowingly destroys, damages or takes another action against property to prevent the government from lawfully taking custody of it.

The statute can apply at any point surrounding a search or seizure. A conviction carries up to five years in federal prison and may also include a fine. The government appears to view the physical phone as a container. The stored information represents the property agents wanted to inspect and preserve.

According to the indictment, Tunick knowingly caused the contents of his Pixel to be deleted. Prosecutors allege that he acted to prevent the government from taking control of that information. The charge does not require prosecutors to prove that the phone contained evidence of a separate crime. The immediate issue involves the alleged destruction and Tunick's intent when he supplied the code.

However, the statute only applies when the government acts under lawful authority. That requirement sits at the center of the defense's challenge.

ARE APPLE DEVICES SPYING? WHAT YOUR IPHONE TRACKS

Tunick's attorneys argue that CBP officers violated his constitutional rights during the airport encounter. They claim agents detained him without a warrant, denied his requests to speak with an attorney and failed to advise him of his rights. The defense has asked the court to suppress statements and evidence connected to the inspection.

His attorneys also allege that agents used concerns about illegal material as a pretext to examine his connections to the movement opposing Atlanta's police and fire training facility. Opponents commonly call the facility Cop City. Tunick has participated in activism against the project, according to his defense team.

These remain defense allegations. Prosecutors dispute the claim that the airport encounter was unlawful and argue that officers acted under their border inspection authority. Magistrate Judge Christopher C. Bly held an evidentiary hearing on July 20, 2026. As of today, the court had not ruled on Tunick's motion to suppress. Therefore, Tunick remains presumed innocent unless prosecutors prove the charge beyond a reasonable doubt.

Federal officers have broader search authority at an international border than police usually have elsewhere in the country. The border-search exception allows the government to inspect travelers and their belongings as they enter the United States. International arrival areas inside airports serve as ports of entry for this purpose.

CBP says electronic-device searches can help officers investigate national security threats, child exploitation, smuggling and other violations enforced by the agency. CBP divides phone inspections into basic and advanced searches.

During a basic search, an officer manually reviews information stored on the device. An advanced search involves connecting external equipment that can copy or analyze its contents. Under CBP's current directive, an advanced search requires reasonable suspicion of an activity that violates a law enforced by CBP or a national security concern. A senior manager must also approve it.

However, federal courts have not adopted one uniform nationwide standard for every phone search at the border. The legal protection can depend on the search method and the federal jurisdiction where the inspection occurs. That uncertainty leaves travelers with fewer clear answers than they might expect.

A U.S. citizen cannot be denied entry solely because CBP cannot inspect a locked electronic device. Still, refusing access may extend the inspection. Officers can also detain the phone if a passcode or encryption prevents them from examining it.

CBP says a traveler must present a device in a condition that allows inspection. Its policy also states that U.S. citizens will not be denied entry solely because officers cannot inspect the device. Foreign visitors face different risks. Refusing to cooperate may affect whether CBP admits them to the United States.

Meanwhile, courts continue to wrestle with questions involving compelled passcodes and biometric unlocking. The answer may vary by jurisdiction and circumstance. Anyone carrying confidential business records or other highly sensitive material should consider speaking with a qualified attorney before international travel.

Removing personal information before a trip differs from deleting data after officers have begun an inspection. You may decide at home that you do not want to carry old files or unnecessary accounts across the border. You could also use a separate travel phone that contains less personal information.

Those choices happen before government agents stop you or take possession of the device. The legal risk changes once an active inspection begins. Prosecutors may view a deliberate wipe at that point as an attempt to interfere with a search or seizure.

In Tunick's case, his intent will likely become a major issue. Prosecutors say he provided the code while knowing what it would do. His lawyers maintain that the government lacked lawful authority from the start. The court must evaluate both sides before deciding whether the case moves forward.

The safest time to review your digital privacy is before you arrive at the airport. For a broader security checklist, read our guide on how to keep your phone safe abroad. The following steps can reduce how much personal information you carry without encouraging a confrontation during an inspection.

Review the information stored on your phone before leaving home. Remove files that you will not need during the trip. A separate travel phone may make sense when your primary device contains sensitive business information or private communications. Keep only the apps and accounts you expect to use. You can find more ways to reduce exposed information in our guide on how to minimize your digital footprint when you travel.

Create an encrypted backup before your trip. Confirm that you know how to restore it. A working backup can protect your photos, documents, contacts and account records if the phone is lost or held by authorities. Also, keep essential travel information somewhere besides your phone. A printed itinerary can help if you temporarily lose access to the device.

Use a strong passcode that someone cannot easily guess, and store it in a trusted password manager if needed. Avoid birthdays and repeated numbers. Turn off notification previews on the lock screen. Otherwise, text messages and account alerts may remain visible without authentication. Before leaving, review these iPhone and Android security settings that help protect your data.

A full shutdown may place encrypted information on many modern phones into a more protected state before the first unlock. Make that decision before entering the inspection area. Suddenly powering down after an officer orders you to hand over the device could raise questions about your intent.

U.S. citizens retain the right to enter the country. However, declining to unlock a phone can lead to delays or the temporary seizure of the device. The consequences may be more serious for foreign visitors. Anyone with immigration concerns should get advice based on their specific status before traveling.

A duress passcode may be legal to install. Using it while officers are trying to inspect or seize a phone creates a different risk. Tunick's prosecution shows that the government may treat that action as an intentional effort to destroy property. Do not make an irreversible decision based only on what a privacy feature promises. Once a federal inspection begins, your actions can become evidence in a criminal case.

Ask for a receipt that identifies the device and the agency holding it. After leaving the inspection area, write down what happened while the details remain fresh. Include the time, officers' names, questions asked and any paperwork you received. Those notes could help an attorney evaluate the encounter.

A secret phone wipe code can protect sensitive information during a dangerous encounter. The same code can lead to a federal charge when it erases data during an active government inspection. Federal officers have a legitimate responsibility to secure the border and preserve potential evidence. At the same time, your phone can expose deeply personal details about your life. The court must now decide whether agents acted within their lawful authority. It must also consider what Tunick intended when he provided the code. Until that happens, the case remains unresolved and Tunick remains presumed innocent. For travelers, preparation offers the safest path. Review your phone before leaving home and understand what may happen if you refuse a device search. A privacy choice made before a trip gives you time to consider the consequences. A wipe code activated during an airport inspection could turn a difficult encounter into a federal criminal case.

Should border officers need a warrant before searching the private contents of your phone, or should protecting the country give them broader access when you return from overseas? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

A leaked Social Security number can be used in ways that go far beyond one fraudulent credit card charge. Criminals may try to open new credit accounts, file fake tax returns, hijack benefits or combine your SSN with other stolen details to impersonate you. The good news is that you can take concrete steps to check for signs of exposure and reduce the damage if your information has already been compromised.

This guide walks through how to check whether your SSN may be exposed, what to do next and how ongoing monitoring can help you catch problems earlier.

Free live CyberGuy class: Protect Your Money From Todays Biggest Threats

New! Join us on Saturday, Aug. 29, at 10 a.m. ET for a free CyberGuy LIVE class covering five simple steps to help defend yourself against AI scams, fraud, identity theft and financial hacks. Kurt "CyberGuy" Knutsson will explain how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed. Youll also receive our financial protection checklist and every registrant will get a link to the class recording afterward.

Reserve your free spot today at CyberGuyLive.com.

PAIDWORK BREACH EXPOSES 23M USER RECORDS

Not directly in most cases. Rather than trying to search the dark web yourself, it is safer to rely on breach notices, account alerts, credit reports and reputable dark web monitoring tools. In real life, SSN exposure usually shows up first through warning signs like a breach notice, a strange credit inquiry or suspicious account activity.

Some warning signs are obvious, and others are easy to dismiss until they pile up.

Watch for things like:

None of these signs proves your SSN is being sold on the dark web. However, they may indicate identity exposure that needs immediate attention.

IS ID.ME SAFE TO USE? WHAT YOU NEED TO KNOW

If a company says your personal information was exposed, do not ignore it. Read the notice closely to see what data may have been involved, note the dates and save a copy for your records.

A dark web monitoring or exposure scan service can help you check whether your information appears in known breach data without trying to search hidden sites yourself. Some credit monitoring services offer a free scan and include dark web monitoring.

Look across all three credit bureaus for unfamiliar hard inquiries, new accounts, wrong addresses or collections that are not yours. Fraud often appears here before you see bigger damage.

Check bank accounts, credit cards, payment apps, buy-now-pay-later services and retirement accounts for anything unusual. Turn on alerts for big purchases, password changes and profile updates if you have not already.

If you think your SSN is already exposed, move through these steps as quickly as possible.

A credit freeze is one of the strongest steps you can take. It makes it much harder for someone to open new credit in your name because lenders generally cannot access your credit file while it is frozen. If you are not actively applying for credit, freezing your file at all three bureaus is usually the safest default.

A fraud alert tells lenders to take extra steps to verify identity before opening new accounts. It is not as strong as a freeze, but it can still be a useful layer of protection.

Start with your primary email account, then update passwords for banking, retirement, shopping, payment and healthcare logins. Use a reputable password manager to create and securely store strong, unique passwords for every account. Turn on multifactor authentication wherever possible. This matters because many identity theft cases begin with account takeover, not only new account fraud.

If your SSN is compromised, watch for signs of tax fraud or benefits misuse. Unexpected mail, rejected tax filings or notices about claims or services you did not request should be investigated immediately.

Keep records of breach notices, account alerts, calls with banks, dispute reference numbers and dates. If fraud appears later, that paper trail can save time and reduce stress.

If someone has already used your information, report it to the relevant financial institution right away and file an identity theft report through the proper government channels. That documentation can help when disputing fraudulent accounts and charges.

Usually, no. Once sensitive data is leaked, copied, sold and reposted, it is rarely possible to claw it back completely. That is why the smartest response is not to focus on "getting it removed" from criminal spaces. It is to reduce how useful that information is to criminals. In practice, that means freezing credit, tightening account security, removing extra personal information from public-facing sources when possible and keeping ongoing watch for fraud signals.

How identity monitoring can help without replacing the basics

An identity monitoring service can add another layer of protection after you complete the immediate cleanup steps. Depending on the service, it may monitor dark web sources, credit reports, financial accounts and changes to your personal information.

Some services also provide restoration specialists who can guide you through disputes and recovery if identity theft occurs. These tools may help you spot warning signs sooner, but they do not replace credit freezes, strong unique passwords, multifactor authentication and regular account reviews.

Avoid these common mistakes

See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.

If your Social Security number may be on the dark web, speed matters more than certainty. You do not need perfect proof before acting. Start with the signs you can verify: breach notices, account alerts, credit reports and unusual activity across your financial life. Lock down what you can, freeze your credit, strengthen account security and keep monitoring. And if you want ongoing help after the first round of cleanup, an identity theft protection service can add another layer through dark web monitoring, data broker removal, financial alerts and restoration support when identity issues get messy.

Has your Social Security number ever appeared in a breach or dark web alert, and what was the first sign something was wrong? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

To the children taking part, it may feel like ordinary online drama. To the child being targeted, every notification can feel like another person joining the attack. The warning signs of cyberbullying are not always obvious. Some children hide what they are experiencing. Others take part without realizing their behavior has crossed a line.

That is why cybersecurity education needs to go beyond strong passwords, antivirus software and password managers. Those protections remain essential. However, children also need guidance about empathy, privacy and the consequences of what they post. Parents play a central role. Grandparents can also become trusted listeners, especially when a child feels nervous about telling Mom or Dad. Share this article with the adults in your family. Then use it to start a conversation before a child needs help.

New! Free live CyberGuy class: Protect Your Money From Todays Biggest Threats

Join us Saturday, Aug. 29, at 10 a.m. ET for a free CyberGuy LIVE class covering five simple steps to help defend yourself against AI scams, fraud, identity theft and financial hacks. Kurt "CyberGuy" Knutsson will explain how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed. Youll also receive our financial protection checklist, and every registrant will get a link to the class recording afterward.

Reserve your free spot today at CyberGuyLive.com.

JEWISH STUDENT TARGETED WITH ANTISEMITIC ABUSE, LAPTOP CORD ATTACK AT COLORADO SCHOOL, ADL ALLEGES

Cyberbullying rarely arrives with a warning label. It may appear as a cruel joke, an altered photo or a rumor inside a private chat. Someone might create a fake account to embarrass a classmate. A group may deliberately exclude one child and then share screenshots of the conversation.

The CDC defines bullying as unwanted aggressive behavior that involves a real or perceived power imbalance. The behavior repeats or has a strong chance of being repeated. Cyberbullying occurs when children use texting, social media or other technology to carry out that behavior. That definition can become confusing online.

One person may post something only once. However, dozens of other people can save and share it. The child who created the post may call it a single joke, while the person being targeted watches it circulate for days. Children may also believe they are only watching. Yet forwarding a humiliating image or adding a laughing reaction can make the attack feel much larger. Adults need to help children connect an online action with the real person receiving it.

The latest available research shows that online harassment remains part of daily life for many young people. The CDC reports that more than one in six U.S. high school students experienced electronic bullying during the previous year. That includes bullying through texting and social media. Female students reported it more often than male students.

A World Health Organization study involving 44 countries and regions found that 15% of adolescents had experienced cyberbullying. Meanwhile, 12% admitted cyberbullying someone else. Both figures had increased compared with the organization's earlier research. A 2026 Pew Research Center study offers a closer look at the social platforms teenagers use. Roughly three-quarters of teen TikTok, Instagram and Snapchat users said harassment and bullying were problems on those platforms for people their age.

Nearly three in 10 teen Snapchat users said they had personally experienced at least one form of harassment covered by the survey. Those behaviors included offensive name-calling, rumor spreading or physical threats. The figure was about one in five among teen Instagram and TikTok users. These numbers do not mean every disagreement counts as bullying. Still, families should not wait for an online situation to become severe before discussing it.

Ask a child whether they have bullied anyone and the answer will probably be no. Ask whether they have forwarded an embarrassing screenshot and you may hear a different response.

Children often picture a bully as one openly cruel person who targets someone weaker. Online harassment can look far less organized. A teenager may add an emoji without thinking. Someone else may share the post because everyone at school has already seen it. Another child may remain silent because speaking up could make them the next target.

Each action can increase the pressure on the person being humiliated. Parents and grandparents should avoid starting this conversation with an accusation. Instead, use an example your child can understand.

Ask how the person in the picture might feel. Find out whether they gave permission for the post. You could also ask what your child would want a friend to do if someone shared the same content about them. These questions help children examine their decisions without immediately feeling attacked.

I recently spoke with a high school senior and her mother, who works in education. The student explained that bullying often looks very different from the scenes adults remember from movies. Much of it happens in private chats, anonymous apps and social media accounts that hide the person posting.

Rumors can spread across a school before the person being discussed knows they exist. AI tools can also produce altered photos, fake audio and convincing videos of a classmate. When I asked whether leaving social media could provide some relief, the student explained that her phone connected her with friends and much of her school life. That response stayed with me.

Adults often see putting down a phone as a break. A teenager may see it as disappearing from their social circle. Leaving an app can also mean missing plans or school updates while everyone else continues discussing the situation.

Pew Research Center found that 74% of teens said social media helped them feel connected to what was happening in their friends' lives. At the same time, 39% said social media made them feel overwhelmed by drama. Nearly one-third said it sometimes left them feeling excluded. "Delete the app" should not be the only advice a child hears.

Adults often assume their children know they can come to them. Children may feel differently. A 2025 Pew Research Center survey found that 80% of parents felt highly comfortable discussing their teenager's mental health. Only 52% of teens felt equally comfortable having that conversation with a parent. That gap should get every parent's attention.

A parent may believe the door is wide open. Meanwhile, the child may worry about losing a phone or being blamed for what happened. The child may also fear that an adult will immediately call the school and make the situation more public.

Grandparents can sometimes help bridge that distance. A teenager may reveal something during a car ride or while visiting for the weekend. The conversation may begin casually instead of during a serious family meeting. Listen closely when a child suddenly asks what you would do in a "hypothetical" situation. They may be testing whether it feels safe to tell you more.

COULD THE 7-ELEVEN BREACH AFFECT YOU?

Generative AI has made a painful form of online abuse much easier to create. A classmate can take an ordinary social media photo and use an AI tool to create a fake nude image. Someone can also clone a voice, produce a false video or build a convincing impersonation account. The National Center for Missing & Exploited Children received more than 400,000 CyberTipline reports with a generative AI connection during 2025.

NCMEC also identified more than 275 direct victims of AI-generated child sexual abuse material during 2024 and 2025. In many cases, the person responsible had direct access to the child. Those reports involve child exploitation rather than cyberbullying alone. However, NCMEC warns that classmates can use AI to create fake images and videos for bullying.

The content can circulate through schools and cause severe emotional harm. AI fakes may also be used for blackmail or sextortion. Parents should never dismiss an altered image because it is fake. The humiliation can feel painfully real. Copies may also keep circulating after the original post disappears. A child may fear that teachers, classmates or future friends will believe the image is genuine.

One serious lecture will not prepare a child for every app, friend or group chat. Instead, return to this conversation as your child's online habits change. These steps can help you begin.

Opening with "You spend too much time on that phone" will probably lead to an argument. Ask which game they have been playing. Find out what their friends are sharing. You could also ask whether a group chat has started feeling uncomfortable or stressful.

The goal is to understand where your child spends time online. You probably know the names of their closest school friends. Try to learn about the people they interact with online too. That interest can make it easier for a child to describe a problem later.

Children need examples they can recognize. A joke becomes harmful when the person asks for it to stop and the group keeps going. Sharing someone's picture without permission can also cross a boundary.

Spreading a rumor or creating a fake account to embarrass someone can cause lasting harm. Ask your child whether they would make the same comment with the other person sitting beside them. That pause may stop an impulsive post from growing into a much bigger problem.

Many children stay silent because they fear losing access to their device. Tell your child that showing you a troubling message will not automatically lead to punishment.

You may eventually need to restrict an app or change how the device is used. However, your first response should focus on what happened and whether the child feels safe. Listen before contacting another family. When possible, explain what you plan to do next. A child is more likely to keep talking when they feel included in the response.

An angry reply can create another screenshot for people to share. Tell your child to stop responding when an exchange becomes heated. They can mute the conversation and show the device to a trusted adult. They should also avoid forwarding the content.

Even a reaction emoji can keep the post active and encourage more children to join. Federal bullying guidance advises children not to reply to or forward cyberbullying messages. It also recommends blocking threatening or questionable accounts.

The first instinct may be to erase a cruel post immediately. Take screenshots first. Capture the username, date and complete conversation.

Save emails, links and text messages. Write down when the behavior happened and whether anyone else saw it. You can use that evidence when reporting the account to the platform or school. StopBullying.gov recommends saving screenshots, emails and messages before reporting cyberbullying.

After saving the evidence, block the person responsible. Report the post through the app or platform. Choose the category that most accurately describes what happened. If students from the same school are involved, contact an administrator and ask for the school's cyberbullying policy.

Tell the school what you already reported to the platform. Share enough evidence to explain the situation without spreading the harmful content further. Direct threats or stalking may require contacting law enforcement. Seek emergency help when anyone faces immediate danger.

Make your child's social media accounts private when the platform offers that choice. Review the follower list together. Remove accounts your child does not recognize or no longer trusts.

Check whether posts reveal a school name or regular location. Look for phone numbers and home addresses too. Family members should review their own accounts.

A grandparent may proudly share a school photo without noticing the logo on a uniform. A relative might post a practice schedule or tag the child's exact location. Before sharing, ask what an angry classmate or stranger could learn from the post.

A stolen account can quickly become a cyberbullying tool. Someone may impersonate your child, publish private conversations or send cruel messages to classmates.

Use a different password for every account. A password manager can create and store strong passwords so children do not reuse one login across several apps. Turn on multifactor authentication wherever it is available.

Children should also avoid sharing passwords with friends. Friendships can change, and access given today may be abused after an argument. Check out the best expert-reviewed password managers of 2026 at CyberGuy.com.

STUDY FINDS MORE AI PRAISE FOR BLACK STUDENTS, SOFTER TREATMENT OF FEMALES

Require children to ask before installing an unofficial gaming client, mod or computer program. A convincing video can promote a download that hides malware. Once installed, malicious software may steal passwords or allow someone to access private files.

Tell children never to disable security software because an online creator says a warning is harmless. They should download mods only from established communities recognized by the game's developer.

Strong antivirus software can help detect malicious files and block dangerous websites. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

Parental controls can help manage app downloads, content access and time spent on a device. Apple's Screen Time allows parents to set app limits and restrict certain content on a child's iPhone or iPad.

Google Family Link can manage apps and set screen-time limits on supported Android devices and Chromebooks. Microsoft Family Safety includes screen-time settings and content filters across supported devices. Some web filtering features require Microsoft Edge.

Tell children which controls you use and why. Secret monitoring can damage trust. A child who understands the rules has a better chance of respecting the boundaries.

You can also review my top child monitoring programs if built-in settings do not provide enough support at CyberGuy.com.

Do not tell a child to ignore an explicit deepfake because people know it was created with AI. Save the evidence without forwarding it. Report every account distributing the content.

Contact the school when students are involved. You can also report suspected child sexual exploitation to NCMEC's CyberTipline. Its Take It Down service creates a digital fingerprint of eligible images or videos so participating platforms can detect copies without the image leaving the device.

Do not download or ask someone to send you an explicit image of a minor to make a report. NCMEC specifically warns against downloading or sharing the content for submission.

A bully may send a child their home address or the names of relatives to frighten them. That information could come from public social media posts, people-search websites or data brokers.

Limit the family details you publish publicly. Ask relatives to do the same. A data removal service may reduce the information available through people-search and broker sites. No service can erase every detail, but ongoing removal can make sensitive information harder to locate. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Contact the school when classmates are involved or the online harassment begins affecting attendance. Report credible threats to law enforcement. Seek immediate help when a child appears to be in danger.

Do not try to negotiate with someone who claims to control a child's account, camera or computer. Disconnect the device from the internet. Then run a full security scan.

Change passwords from another device that you know is safe. Most importantly, reassure the child that asking for help was the right decision.

Children notice how adults behave online. They see angry arguments on Facebook. They notice when family members share humiliating memes or attack someone in the comments.

An adult may view that behavior as blowing off steam. A child may see permission to act the same way. Before posting, ask whether you would say those words with your child sitting beside you.

Grandparents can set a powerful example too. They often have close relationships with grandchildren and may hear something a child hesitates to tell a parent. Let your grandchild know they can show you a troubling message without being blamed. Then involve the parents unless doing so could place the child in immediate danger.

Families preparing for the school year can also review my updated best back-to-school supplies and tech for students at CyberGuy.com.

You do not have to wait for a crisis. Send this article to another parent. Share it with grandparents, relatives and anyone who regularly cares for your child.

Then agree on how the adults will respond if a child reports an online problem. A child should hear the same message from every trusted adult: Tell us what happened. We will listen before reacting.

That response may stop a child from hiding something because they fear punishment or embarrassment. It may also give a bystander the confidence to speak up when someone else is being targeted.

Cyberbullying may begin with a joke, rumor or altered picture. Within minutes, it can follow a child across several accounts and into the classroom. Recent research shows that many teenagers see harassment as a serious problem on the platforms they use. AI has also made humiliating fake content easier to create and harder to contain. Security tools can protect accounts and devices. Parental controls can create useful boundaries. However, children still need adults who will listen before taking over. Parents and grandparents should keep the conversation going as apps and friendships change. Share these tips with the people who care for the children in your family. Then make sure every child knows which trusted adult they can approach when something feels wrong.

If your child or grandchild saw a humiliating post about a classmate today, would they join the crowd, stay silent or come tell you? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

Paul did the smart thing. He stopped, avoided the callback number and sent the text to us. Let's break down every red flag and show you how to verify a charge without handing control to a scammer.

New! Free live CyberGuy class: Protect Your Money From Todays Biggest Threats

Join us Saturday, Aug. 29, at 10 a.m. ET for a free CyberGuy LIVE class covering five simple steps to help defend yourself against AI scams, fraud, identity theft and financial hacks. Kurt "CyberGuy" Knutsson will explain how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed. Youll also receive our financial protection checklist, and every registrant will get a link to the class recording afterward.

Reserve your free spot today at CyberGuyLive.com.

FAKE BOOKING.COM TRAVEL CREDIT SCAM TARGETS TRAVELERS

The message claimed $8,250 had already been charged through Apple Pay and warned that a duplicate $8,250 transaction would "auto-approve" in 35 minutes. It told Paul to call an 855 number, quote "Case CA-3321" and "verbally kill the pending charge." We partially masked the callback number so no one calls it accidentally.

The message looks chaotic, but nearly every phrase has a purpose. The sender uses dramatic wording, fake authority and a tight deadline to push Paul toward one action: calling the number in the text.

The message came from a number beginning with +44, the international calling code for the United Kingdom. Yet it claims to come from "Apple Pay Account Services" and tells Paul in Washington, D.C., to call a separate 855 toll-free number. A different callback number does not automatically prove fraud. However, an overseas sender directing a U.S. recipient to an unrelated support line should make you stop before calling.

The text uses the Apple Pay name several times and signs off as "Apple Pay Account Services." It also arrived as a blue iMessage with the word "Encrypted" shown beneath it. Those details can make the message feel official. However, encryption only means the message was protected while traveling between devices. It does not confirm that Apple sent it. The signature also sounds generic. It does not name Paul's bank, identify the card involved or provide an official Apple support channel.

The first line reads: "$8,250.00 APPLE PAY - 35-MINUTE DEADLINE." The message then claims $8,250 has already disappeared and warns that a duplicate $8,250 charge will be approved in 35 minutes. That raises the threatened loss to $16,500. The exact 35-minute deadline feels calculated. It gives Paul enough time to call while discouraging him from checking Wallet, opening his bank's app or asking someone else for advice.

The message says Paul's Apple Pay account has "hemorrhaged" money. It calls the situation a "catastrophic fraud event" and claims his contactless limit has been "crushed" to $0. It later tells him to "verbally kill the pending charge." Those words sound dramatic because they are meant to produce fear. A legitimate financial alert would normally use clear terms such as charged, declined, frozen or pending. It would not describe an account as hemorrhaging money or ask you to kill a charge.

The first transaction allegedly happened at: "an agricultural processing surplus in Stockton, CA." The second supposedly involved: "a payday lending chain in Modesto." Neither phrase identifies an actual merchant. They sound specific at first because they include industries and real California cities. However, they fall apart when you look closer. A legitimate transaction alert would usually show the merchant's name. It would not rely on vague descriptions such as "agricultural processing surplus."

The sender claims Paul's contactless spending limit has been "crushed to $0." In the same message, it says the second $8,250 transaction is pending and "will auto-approve in 35 minutes." Those claims do not fit together. If the sender had already blocked contactless activity, why would another contactless charge automatically go through? The contradiction matters because it shows the message was written to create panic rather than explain a real account problem.

The message says: "Do not ignore this." It then orders Paul: "You must call." The sender provides a case number, tells him to "verbally kill" the charge and warns that the money will be "gone forever" if he fails to respond. It also threatens to blacklist his account and calls this his "only warning." That language gives Paul one supposed solution: call the number in the text. The message never tells him to open Wallet, check his bank's official app or call the number printed on his card. That is the biggest red flag of all. Every part of the message funnels him toward a stranger waiting on the other end of the phone.

AMAZON RECALL TEXT SCAM COMES WITH RED FLAGS

The text serves as bait. The phone call allows the scammer to take control of the conversation. Once you call, the person may claim to see your account. They could ask for your name, card number or Apple Account email. Next, they may request a verification code and describe it as a way to cancel the charge.

A scammer could also ask you to install a remote-access app. That would let the person view your screen or guide you through financial transactions. Some callback scams eventually instruct people to transfer money into a "safe" account. Others claim they sent an oversized refund and demand that the extra money be returned.

The FTC warns that fake support agents may seek remote access, steal card information or convince people to move money. CyberGuy previously heard from another person whose Apple Pay scam text nearly led to a $15,000 loss. In that case, the caller used personal information and pressure to keep her on the phone while she drove to her bank.

Do not call the number in the text. Instead, check through channels you already trust:

Apple notes that Wallet may not display the complete transaction history for every card. Your bank or card issuer remains the best source for questions about an Apple Pay charge. Do not rely on a phone number from a text, caller ID or sponsored search result.

Before deleting the message, save a screenshot that includes the sender information.

On an iPhone:

Apple recommends emailing screenshots of suspicious Apple text messages to its phishing address. It also lets iPhone owners report junk directly inside Messages. For more ways to handle messages like this, see our guide on how to protect yourself from tech support scams.

Hang up as soon as you suspect fraud. Then take action based on what you shared:

FAKE SHINYHUNTERS SEXTORTION EMAIL USES CARNIVAL BREACH DATA

These steps can help you check the warning safely without following the scammer's script.

A deadline can make a fake warning feel real. Give yourself time to check the account independently. A legitimate fraud department will still be there after you close the text and open the official app.

Do not call the number in the text or reply to the sender. Instead, open Wallet or your bank's official app and review recent transactions. You can also call the number printed on the back of your card. Never rely on contact information supplied in an unexpected message.

A security code can approve a login, password reset or payment. Never read one to a caller, even when the person claims it will cancel a fraudulent charge. Also, do not install an app or share your screen because someone says they need access to fix the problem. Apple representatives will not ask for your password, device passcode or two-factor authentication code.

The message Paul received contains no link. Therefore, antivirus software would not stop the pressure created by the text or phone call. However, scam campaigns can quickly change tactics. A later message may include a fake Apple login page or another dangerous site. Strong security software can detect malicious links and warn you about known scam pages. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

The text sent to Paul did not include his name or other private details. However, callers may use information from data brokers or past breaches to make their stories sound credible. A data removal service can reduce the amount of personal information available through people-search sites. It cannot erase every record or stop every scam. Still, less exposed data gives criminals fewer details to use against you. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Consider stronger monitoring if you shared sensitive information or continue receiving targeted financial scams. Identity theft protection can alert you when someone opens a new credit account. It may also notify you when monitored information appears in known breaches. The service cannot prevent every form of identity theft. Therefore, you still need to review alerts and secure affected accounts. See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.

Reporting the message may help Apple and your carrier identify similar scams. On an iPhone, tap Report Spam or Report Junk beneath the message, depending on the option shown. Then block the sender and delete the conversation. You can also forward the text to 7726, which spells SPAM. Because this message impersonates Apple, take a screenshot and email it to reportphishing@apple.com.

This Apple Pay scam piles on fear from the opening line. The $8,250 charge grabs your attention, while the 35-minute deadline tries to stop you from checking whether any of it is real. Even the strange phrases serve a purpose because they keep the message sounding urgent and severe. Paul made the right move by pausing instead of calling. When an unexpected fraud alert arrives, leave the message and check through Wallet, your bank's official app or the number printed on your card. Never give a caller a verification code or access to your screen.

Have you received a convincing Apple Pay alert or another scam text that nearly fooled you? Write to us at CyberGuy.com and tell us what the message said and how you spotted the warning signs.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

However, the intruder has threatened to release information it claims to have stolen. The Brinks Home data breach could affect a wide audience. Brinks Home says it serves residential customers in all 50 states. It also says it protects more than 1 million people across North America. For now, customers face a frustrating gap. Brinks Home has not confirmed exactly what information was accessed or who may be affected.

New! Free live CyberGuy class: Protect Your Money From Todays Biggest Threats

Join us Saturday, Aug. 29, at 10 a.m. ET for a free CyberGuy LIVE class covering five simple steps to help defend yourself against AI scams, fraud, identity theft and financial hacks. Kurt "CyberGuy" Knutsson will explain how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed. Youll also receive our financial protection checklist, and every registrant will get a link to the class recording afterward.

Reserve your free spot today at CyberGuyLive.com.

COULD THE 7-ELEVEN BREACH AFFECT YOU?

Brinks Home discovered unauthorized access to part of its systems on July 20, 2026. The company activated its incident response procedures and moved to contain the intrusion. It also brought in outside cybersecurity experts to investigate. William Niles, CEO of Brinks Home, said the company was working with leading forensic experts to address the incident.

CyberGuy reached out to Brinks Home for additional comment. The company confirmed that its response began as soon as it detected the intrusion. "Brinks Home recently identified a security incident in which an unauthorized party gained access to certain company systems. Upon discovering the incident, we immediately activated our incident response plan, contained the activity, and engaged an industry-leading cybersecurity forensics firm to investigate," Brinks Home told CyberGuy.

The company's most reassuring update involves its security services. Brinks Home says the incident did not involve its products or monitoring services based on what it knows so far. Your security panel and sensors should continue working. Emergency monitoring should also remain available without interruption. However, the investigation has not determined the full scope of the incident.

Brinks Home stressed that its investigation remains in the early stages. "Our investigation is early and ongoing. Our systems are secure, and we are continuing to assess the full scope and potential impact of the incident while closely monitoring our environment," the company said. "If we determine that your information was affected, we will notify you and explain what steps, if any, you should take," the company says in its cybersecurity FAQ.

The ShinyHunters extortion group has claimed responsibility for the attack. The gang alleges that it stole more than 4.9 million records from Brinks Home's Salesforce environment. That number refers to database records. It does not mean 4.9 million separate people were affected. One customer may appear in several records.

According to ShinyHunters, the stolen information includes more than 1.1 million rows from a Salesforce customer contacts database. The hackers also claim they obtained more than 4,000 employee records. Those records allegedly contain names, email addresses, job titles and phone numbers. In addition, the group claims it stole around 3.8 million customer support chat logs from the Brinks Care Cresta platform. Those claims have not been independently verified.

BleepingComputer says it has not reviewed the allegedly stolen data. The publication could not confirm the hackers' figures or descriptions. Brinks Home has not confirmed that those specific records were taken. It also has not confirmed that personal information was compromised. That distinction is important. Criminal groups often mix real information with inflated claims to increase pressure on a company. The FBI has warned that ShinyHunters uses real or exaggerated claims while demanding payment. The gang may also use threatening messages or harassing phone calls.

ShinyHunters told BleepingComputer that it entered Brinks Home's systems on July 13. The group claims it used a Microsoft Entra voice phishing attack. This type of attack is also called vishing. During a vishing attack, a criminal calls an employee while pretending to work for the company's technology department.

The caller may say the employee needs to complete an account update. The criminal then guides the employee through an authentication or device registration process. If the employee approves the request, the hacker may gain access to the account and its connected business tools. Brinks Home has not confirmed this version of events. Its FAQ says the company is still investigating the incident.

Still, the allegation highlights a growing problem. A hacker may not need to crack a password when an employee can be persuaded to approve access. Voice phishing has helped criminals break into other corporate cloud accounts. That makes unexpected login requests especially dangerous.

A customer support chat may sound less sensitive than a password. However, those conversations can contain useful personal details. You may have discussed an installation date or a billing problem. Perhaps you mentioned the equipment installed in your house. A chat could also reveal your contact details, previous service issues or the names of authorized account users. Criminals can use those details to make a scam feel familiar.

For example, a caller might know that you recently contacted Brinks Home. The person could mention your equipment before claiming that an urgent security update is required. That context may make the call sound legitimate. It can also lower your guard before the criminal asks for a password or authentication code. The FBI warns that criminals can use stolen real-world context to create highly convincing phishing campaigns. You can learn more about how exposed contact information helps criminals launch attacks in our guide to ways scammers can use your phone number.

Brinks Home is warning customers to stay alert for suspicious communications related to the breach. A scammer might pretend to represent Brinks Home. The person could also claim to be a cybersecurity investigator or another party involved in the response. The message may say that your data will be released unless you act immediately. It could direct you to a fake login page or ask you to confirm account credentials.

Brinks Home says it will never ask you to provide sensitive information through an unsolicited communication. That warning deserves your attention even though the company has not confirmed whose data was involved. Hackers do not need a complete customer database to start sending scams. They may use public information or previously stolen data to target people while news of the breach spreads.

ShinyHunters threatened to release the alleged data if Brinks Home did not respond by July 30, 2026. That deadline has passed. However, as of today, Brinks Home had not publicly confirmed that customer information had been released. Its official update continued to say that the company was investigating what information may have been involved.

The absence of a confirmed leak does not prove that the hackers lack the information. At the same time, the group's claims should not be treated as established facts without evidence. Customers should focus on what they can control now. That includes securing their accounts and becoming more suspicious of unexpected requests.

These steps can help protect your accounts, devices and identity while Brinks Home continues its investigation.

Be cautious if someone contacts you about the breach and asks you to confirm personal information. A scammer may claim that your alarm will stop working. The person might also say your account needs an urgent security update. Do not use a link or phone number included in the message. Instead, open the official Brinks Home app yourself. You can also type the company's website address directly into your browser.

Do not trust a caller simply because the person knows your name or account details. Hang up and contact Brinks Home through the app or its official website. Avoid calling a number supplied by the person who contacted you. The FBI recommends verifying unusual requests through a separate communication method before responding.

A legitimate representative should not ask you to read aloud a one-time security code. That code may be the final step a criminal needs to enter your account. End the call if someone asks for one. Also, never approve an unexpected login notification. Select deny or reject when you did not initiate the request.

Change your password if you reused it on another website. You should also change it if you notice unusual account activity or receive an unfamiliar login alert. Create a long password that you have never used for another account. A password manager can create and store a different password for every login. That way, one exposed password cannot unlock several accounts. Pay close attention to your email password. Your email account may control password resets for Brinks Home and many other services.

FAKE SHINYHUNTERS SEXTORTION EMAIL USES CARNIVAL BREACH DATA

A data removal service can request that data brokers and people-search websites remove your personal information. This may include your home address, phone number and relatives' names. Removing those details can make it harder for scammers to combine breached records with information found elsewhere online. However, a data removal service cannot erase information already taken from Brinks Home. It also cannot guarantee that stolen data will disappear from criminal forums. Its value comes from reducing the extra information scammers can use to build a convincing profile about you. Data broker profiles can reappear, so ongoing monitoring and repeated removal requests may be necessary. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Multifactor authentication adds another check after you enter your password. An authenticator app or physical security key can offer stronger protection than a code sent through a text message. Turn on the strongest option available for your Brinks Home account. You should also protect your primary email account. Our guide to the top multifactor authentication apps explains how these tools work.

Open the Brinks Home app or customer portal and review your account information. Check your email address and phone number. Look for unfamiliar authorized users or account changes. Confirm that your emergency contacts and recovery information remain correct. If you ever shared an alarm code or verbal security password in a support chat, contact Brinks Home through an official channel. Ask whether that credential should be changed. Do not change settings through a link sent in an unexpected message.

An exposed phone number can help a criminal attempt a SIM swap or number transfer scam. Contact your wireless carrier and add an account PIN. Ask whether it offers a port-out lock or number transfer lock. These protections can make it harder for someone to transfer your phone number and intercept security codes. You should also use an authenticator app instead of text-message codes when an account offers that choice.

Install strong antivirus software on your computer and mobile devices. This protection can help detect malicious links, fake websites and suspicious downloads before they cause harm. It may also warn you when a phishing page tries to steal your password. Antivirus software cannot reverse the Brinks Home breach. However, it can provide another layer of defense against scams that follow it. Keep the antivirus software updated and allow it to run automatic scans. You should also install operating system, browser and app updates as they become available. Strong antivirus tools can block malware, dangerous websites and unsafe downloads in real time. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

Brinks Home has not confirmed that Social Security numbers or financial account details were involved. Therefore, customers do not currently have evidence that they all need to replace payment cards. Still, review your bank statements and credit card activity. Watch for small charges that you do not recognize. Check your credit reports for new accounts or unfamiliar inquiries. Our guide to quiet signs of identity theft explains what can appear before larger problems surface. You may also consider an identity theft monitoring service if Brinks Home later confirms that sensitive personal information was exposed.

A credit freeze can make it harder for a criminal to open a new account in your name. You must place the freeze separately with Equifax, Experian and TransUnion. Adding or removing a freeze is free. However, a credit freeze cannot stop misuse of an existing bank or credit card account. Brinks Home has not confirmed that customers need to freeze their credit because of this incident. That recommendation could change if the company identifies exposed identity information.

Brinks Home tells customers not to respond to a suspicious message or click its links. However, the company also says not to delete the communication right away. Take screenshots and preserve the sender's details. Save the date, time and phone number or email address involved. Then report the message using the contact information listed in the official Brinks Home incident FAQ. The company lists 469-391-4024 as a reporting number. You can also report online fraud or extortion attempts to the FBI's Internet Crime Complaint Center at IC3.

Brinks Home says it will contact affected individuals if its investigation confirms that personally identifiable information was involved. However, criminals may send fake breach notices first. Compare any notice with information posted on the official Brinks Home cybersecurity update at brinkshome.com/cybersecurity-update. Contact the company directly when something looks unusual. Do not pay anyone who threatens to release your information.

Brinks Home says it plans to provide more information once its investigation produces verified findings. "Protecting the information entrusted to Brinks Home remains a top priority, and we take our data security responsibilities very seriously. We appreciate the patience and understanding of our customers as we work through this process. We will provide additional updates as appropriate when more verified information becomes available," the company told CyberGuy.

While Brinks Home serves more than 1 million customers nationwide, its recent cybersecurity incident shows that even a company trusted to protect homes can face digital vulnerabilities, despite assurances that alarm monitoring and system functionality continue without interruption. There are many other options in the market, whether you prefer a professionally installed system or a do-it-yourself one.

For reference, you can check out my guide on the best home security systems at Cyberguy.com, where Ive listed four of my favorite options. You might also want to find out if your home insurance offers a discount for installing robust security protection.

IS YOUR SOCIAL SECURITY NUMBER ON THE DARK WEB?

The Brinks Home cyberattack feels personal because this company may hold information connected to your household. So far, Brinks Home has confirmed unauthorized access to part of its IT environment. It has not verified the hackers' claim that they stole 4.9 million Salesforce records. The company says its alarm monitoring and security products continue to work normally. Customers do not need to disconnect their systems based on the information available now. The immediate danger may come from phishing. A criminal who knows your name or previous support issue can build a message that sounds convincing. Slow down when someone creates urgency. Contact Brinks Home through an official channel and never hand over a security code.

When a company is trusted to help protect your home, should it face a higher standard for guarding the personal information connected to it? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

Now, Atlas and Kodiak plan to grow the fleet from 28 driverless trucks to 100 by mid-2027. They also expect the trucks to begin operating on public roads in early 2027. However, that timeline still depends on operational milestones.

The expansion gives us a clearer look at how driverless trucking could move from private industrial roads onto highways.

New! Free live CyberGuy class: Protect Your Money From Todays Biggest Threats

Join us Saturday, Aug. 29, at 10 a.m. ET for a free CyberGuy LIVE class covering five simple steps to help defend yourself against AI scams, fraud, identity theft and financial hacks. Kurt "CyberGuy" Knutsson will explain how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed. Youll also receive our financial protection checklist, and every registrant will get a link to the class recording afterward.

Reserve your free spot today at CyberGuyLive.com.

NEW YORK SCHOOL PAUSES HUMANOID CLASSROOM ROBOT PILOT PROGRAM

Atlas previously operated its driverless trucks from one load-out location at a time. It now runs them simultaneously from two depots about 90 minutes apart. One site is in Texas while the other is in New Mexico. The wider footprint lets Atlas reach more well sites across the Permian Basin. It can also respond faster when customers need more sand delivered. The operation connects with Atlas' 42-mile Dune Express conveyor system. That system moves sand closer to the well sites before the trucks complete the final portion of the trip.

Don Burnette, founder and CEO of Kodiak, said the two companies have built the world's largest fleet of driverless big-rig trucks: "Together, Atlas and Kodiak have deployed the world's largest fleet of driverless big-rig trucks. We've demonstrated that autonomous trucking is delivering meaningful results today. Our expanding partnership, which now covers two unique locations, is creating a blueprint for how autonomy can transform logistics by improving efficiency, increasing productivity, and delivering lasting value for customers at commercial scale."

As of March 31, 2026, Atlas's driverless program operated 28 driverless trucks across 15 routes. Those trucks had carried about 7,000 loads and hauled more than 450,000 tons of sand. The fleet also logged more than 23,500 driverless operating hours during the first quarter of 2026. On July 20, Kodiak-powered trucks delivered 176 loads in one day. The companies called it a daily record for the 18-month deployment.

Earlier in 2026, Kodiak and Atlas also introduced a driverless truck that can pull three connected trailers. The combined loaded weight tops 135 tons. That kind of load would grab anyone's attention. It also raises an obvious question. What happens when these trucks leave private roads and begin driving beside the rest of us?

Kodiak plans to launch driverless highway operations by the end of 2026. Atlas expects its Kodiak-equipped fleet to follow onto public highways in 2027. The company is not alone in moving toward humanless highway freight. A separate autonomous truck recently completed a 230-mile commercial delivery in Texas with nobody in the cab.

Burnette told CyberGuy that other motorists should not expect unusual behavior from Kodiak-powered trucks: "Kodiak-powered trucks already operate autonomously on highways across the southern United States with a safety driver in the cab to oversee the system.The Kodiak Driver is engineered to be a safe and cautious driver and to follow normal driving etiquette, so other motorists should not notice anything unusual."

That may sound reassuring. Still, most drivers will want more than a smooth lane change before they feel comfortable beside a truck with no human behind the wheel. CyberGuy recently took a closer look at whether autonomous trucks can make highways safer, including Kodiak's arguments about fatigue, distracted driving and real-world testing.

The Permian Basin can be brutal on vehicles. Trucks can face triple-digit temperatures, dust storms, sudden flooding and high crosswinds. Dense morning fog can also make visibility difficult. Kodiak equips its trucks with a sensor suite built around cameras, with radar and lidar support. These systems give the truck a detailed view of the surrounding environment.

However, more sensors cannot make every condition safe. Burnette said the truck will stop instead of pushing through dangerous weather: "And if conditions aren't safe, the truck won't keep driving. It slows down and safely pulls over." Kodiak says its system responds to construction zones and emergency vehicles as part of normal driving. It also adjusts to changing road conditions. Severe fog or other hazardous weather can still stop an autonomous trip. According to Burnette, Kodiak-powered vehicles will remain parked when conditions become unsafe.

AI KILL SWITCH BILL COULD SHUT DOWN ROGUE MODELS

A damaged component or communications failure can create a serious problem in any large truck. The stakes may feel even higher when nobody is sitting in the cab. Burnette said the Kodiak Driver checks both the truck and its autonomous system while it operates: "The Kodiak Driver continuously monitors the truck and its autonomous driving system. If it detects a critical problem, such as a mechanical, sensor or communications failure, it can execute a fallback maneuver that safely pulls the truck out of traffic and brings it to a stop in a safe location."

According to Burnette, "The health and safety of all trucks are overseen by Kodiak's command center, and a human can remotely provide assistance should a truck need additional help."

Kodiak also cites a safety evaluation from Nauto, an AI-powered fleet safety company. The Kodiak Driver earned a VERA safety score of 98 out of 100. That result tied for the highest score among more than 1,000 commercial fleets in Nauto's network. The other fleets used human drivers. The system earned a perfect score for inattentive driving and high-risk driving. It also earned 100 for traffic violations. Its aggressive driving score was 95. You can read CyberGuy's full breakdown of the Kodiak Driver's independent safety score. Burnette pointed to the evaluation in his response: "We are proud that an independent evaluation by Nauto, a leader in AI-powered fleet safety technology, gave Kodiak the highest score in a safety study, tying for first place and outperforming 1,000 human-driven fleets."

Driverless trucks create another concern that has nothing to do with rain or road debris. A connected vehicle can become a cybersecurity target. Kodiak does not publicly detail every safeguard. Publishing a complete security blueprint could help attackers. Burnette said Kodiak treats cybersecurity as part of its safety work: "Cybersecurity is something we take extremely seriously because safety starts long before a truck ever reaches the road."

He said Kodiak uses multiple security layers and continuously watches for suspicious activity. The company also tightly limits access to its systems. "We build multiple layers of security into our vehicles and systems to help protect against unauthorized access, and we continuously monitor for unusual activity. For security reasons, we don't discuss the specific safeguards we use or how they're implemented. But access to the systems is tightly controlled and if it detects something unusual, it will bring itself to a safe stop rather than continuing to operate." Kodiak's public technology materials say the company isolates safety-critical functions from external communication ports. It also says it protects vehicle infrastructure with end-to-end encryption.

You probably will not wake up tomorrow and find every delivery truck driving itself. Early public deployments will likely focus on routes where operators already understand the conditions. Still, the Atlas expansion shows that fully driverless trucking has entered commercial service. These trucks are already working without a person in the cab.

The next major step will bring them onto roads used by commuters and families. Other truck drivers will also begin sharing lanes with autonomous rigs. For you, the biggest issue is how the system responds when normal driving suddenly becomes abnormal. Dangerous weather can change a trip in seconds. So can equipment failures, cyberattacks or unpredictable motorists.

Kodiak says its system will reduce speed and move toward a safe stop when conditions become unsafe. Human teams will also monitor the fleet through a command center. The technology could eventually affect deliveries and transportation costs. It may also change trucking jobs, an issue CyberGuy explored in a closer look at whether autonomous trucks could replace drivers by 2027.

As these vehicles reach public highways, transparency will become even more important. Drivers deserve clear information about crash reporting and emergency response. They also need to understand the limits of remote assistance. Regulators will need to test company safety claims against real-world results. A strong safety score provides a starting point, but public trust will depend on consistent performance over time.

OUR ENEMIES FOUND A WEAKNESS IN ESSENTIAL TECHNOLOGY. WE MUST FIX IT FAST

Kodiak and Atlas are rapidly expanding a commercial driverless truck operation that already moves heavy loads without anyone in the cab. The plan to grow from 28 trucks to 100 by mid-2027 shows how quickly autonomous trucking can scale inside a demanding industrial environment. Public highway use will bring a new level of scrutiny. Drivers will want answers about severe weather, system failures, public-road emergencies and cybersecurity. Kodiak says its trucks can stop when something goes wrong. Human teams also remain available through a command center. However, the technology must prove that those protections work reliably as more trucks enter service. The expansion could reshape how companies transport essential materials. Yet public trust will depend on what happens when these trucks encounter the unpredictable moments every driver knows too well.

Would you feel comfortable driving beside a 135-ton truck with no one in the cab if the company said its AI could handle the unexpected? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

Realbotix and Salamanca City Central School District had announced a limited pilot program for fall 2026 involving Optio, an artificial intelligence-powered  educational assistant, and one new Realbotix M-Series humanoid unit.

On July 24, the district announced that the pilot program had been paused while it works through enhanced student data privacy agreements with the New York State Education Department.

The district is also continuing discussions with community members and other stakeholders before moving forward. It has not announced a new date for the pilot program. The technology was intended to support AI and robotics lessons while teachers remained in control. Still, putting a humanlike machine in front of students raises questions about privacy and how quickly students may trust it.

CyberGuy Live: Missed "Sick of Spam?" Get the replay and checklist

Our free CyberGuy Live class, "Sick of Spam?", has ended, but you can still watch the full replay and download our spam-stopping checklist. Kurt "CyberGuy" Knutsson walks you step by step through simple ways to reduce robocalls, spam texts, junk email and unwanted messages. Youll also learn how to curb political texts, clean up your inbox and spot messages that could put your personal information at risk.

Get the free replay and checklist now at CyberGuyLive.com.

FOREIGN ROBOT BAN TARGETS CHINA OVER SECURITY FEARS

Salamanca City Central School District is located in western New York on Seneca Nation territory. The district had planned to introduce Optio to high school students enrolled in Woz ED AI and Robotics courses.

Realbotix previously described this as a limited fall 2026 pilot involving its digital assistant and one physical robot. The district has since placed the project on hold while it addresses student privacy agreements and gathers additional community input. Realbotix told CyberGuy, "The partnership also gives educators an opportunity to evaluate these technologies in a controlled classroom environment under district oversight."

The district reportedly paid $57,590 for the robot and AI program, according to the school board contract. Realbotix reportedly discounted the package from the M-Series robot's listed starting price of $95,000. The initial Optio rollout had been expected to expand to approximately 500 high school students during the fall semester. That planned expansion would have applied to the AI platform and student avatars rather than 500 physical robots.

The proposed project includes two connected parts. Optio is the digital AI educational assistant that students can access through personalized avatars. The M-Series robot would give that technology a physical presence in the classroom. Realbotix told CyberGuy, "Its technology combines conversational AI with a physical humanoid platform capable of natural interaction and lifelike expressions."

The company says its humanoid platform can use natural conversation and facial expressions during real-time interactions. The robot is designed to give students hands-on exposure to AI and robotics rather than limiting the lesson to a laptop screen.

The robot was expected to remain seated while using upper-body movements and facial expressions. The school reportedly requested a Western New York accent. However, Realbotix told CyberGuy, "The physical unit has not yet been deployed. Additional details regarding its implementation will be determined in coordination with the district."

That means some details reported about the robot may reflect the planned design rather than the finished classroom robot. The district had said the system would use school-approved curriculum instead of searching the open internet. When the technology lacked an answer, it was trained to say, "I don't know," rather than inventing information.

EDUCATORS WARN AI DEBATE HAS FOCUSED TOO MUCH ON CHEATING, NOT ENOUGH ON STUDENT LEARNING

Realbotix designed Optio as an AI educational assistant and an at-home tutor. Students will interact with avatars trained on district curriculum. The platform is designed to reinforce concepts and provide individual tutoring outside regular school hours. Realbotix says it can also offer homework support across multiple languages.

Students reportedly may be able to upload photos of homework for feedback. They could also request lessons based on their interests or receive real-time translations. Teachers may use Optio for lesson planning and curriculum adjustments. The physical robot could also provide prompts based on material already loaded into the system.

Realbotix told CyberGuy, "The program is intended to complement, not replace, teachers by giving students supervised access to emerging AI and robotics tools as part of the district's existing STEM curriculum." The company added, "Realbotix's products are designed to support human engagement and expand access to information and services while complementing the work of educators and other professionals."

The district has paused the pilot program while it works through enhanced student data privacy agreements with the New York State Education Department. It says appropriate privacy protections and community input are important parts of the process. The district has not said when those agreements could be completed or when the pilot might resume.

If the program moves forward, it would operate under district oversight with education-specific safeguards. Realbotix says those guardrails are designed to block inappropriate responses and reduce unreliable outputs. The robot and avatar would reportedly operate through a closed system without an open internet connection. The district also said Realbotix will lack access to personally identifiable student information.

The classroom robot would reportedly lack facial recognition and recording features found in some other Realbotix models. However, personalized learning requires the system to remember some information. Students will use unique identification codes when interacting with the technology. Those codes will allow Optio to retrieve learning information and continue earlier conversations without relying on a student's name.

Several media reports connected the school project to an adult-products business under the same parent company. Realbotix disputes the way some reports characterized that relationship.

Realbotix provided this clarification to CyberGuy:

"For clarity, some media reports have falsely connected the Salamanca project to an adult product or adult-products business. The Salamanca robot is a newly manufactured, purpose-built educational unit; no existing product or hardware is being modified or repurposed for the school." The company continued, "Realbotix LLC focuses exclusively on non-adult commercial applications, including healthcare and education. No adult-products company has any involvement in the Salamanca project or in any product or project developed by Realbotix LLC. Separate companies."

Realbotix Corp. describes itself as a holding company with two separately operated businesses. Realbotix LLC develops humanoid robots for commercial uses, while Intima LLC operates in the adult wellness and companionship market. The company says the subsidiaries maintain separate employees and facilities. It also says they do not share products, inventory, manufacturing resources or technology. Realbotix told CyberGuy, "The Salamanca robot is a newly manufactured, purpose-built educational unit; no existing product or hardware is being modified or repurposed for the school."

STUDY FINDS MORE AI PRAISE FOR BLACK STUDENTS, SOFTER TREATMENT OF FEMALES

Most students and teachers will not see a humanoid robot in the classroom anytime soon. Still, Salamanca's paused pilot shows where school technology may eventually be heading. Giving AI a face and a voice could make lessons more engaging. It could also lead students to trust the technology more quickly than they would trust a typical computer program.

Parents should pay close attention to what Optio remembers and who can access that information. Teacher oversight will also be important when the system gives an answer that sounds confident but may be wrong. A closed system would give the district more control than an open chatbot. Even so, students, teachers and parents deserve clear rules about student data and how the robot will be used.

The physical unit has yet to enter the school, and the district has not announced a new start date. Before moving forward, Salamanca says it will work through enhanced student data privacy agreements with the New York State Education Department and continue engaging with community members and other stakeholders. Many key questions will remain unanswered until those protections are finalized and students and teachers begin using the system in a real classroom.

Pausing the pilot program makes sense while the district works through student privacy agreements. The robot could make AI lessons more engaging, but families still need clear answers about what Optio remembers, who can access that data and when the district deletes it. The real test will come if the district restarts the pilot and shows that the technology can support learning without putting student privacy at risk.

Would you feel comfortable with a lifelike robot helping in your child's classroom, or does this take school technology too far? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

A coordinated cyberattack targeted operational technology at more than 30 community water systems on Sunday, July 26, and Monday, July 27. Minnesota IT Services, known as MNIT, activated the state's cybersecurity response and brought in federal agencies to help investigate.

One water plant temporarily went offline. Meanwhile, other communities reported problems involving automated controls or communications equipment. Workers switched to manual operations or used backup procedures to keep essential services running. Fortunately, state officials reported no active requests for residents to reduce or change their drinking water use.

The FBI has since said that water or wastewater utility companies in seven states have been affected.

"Some of that activity degraded water operations," the bureau said.

This water cyberattack raises an uncomfortable question for towns across America. How many local utilities could keep operating if hackers gained access to the computers controlling their equipment?

INVESTIGATORS BELIEVE IRANIAN HACKERS ARE LIKELY BEHIND CYBERATTACK ON MINNESOTA WATER SYSTEMS: REPORT

CyberGuy Live: Missed "Sick of Spam?" Get the replay and checklist

Our free CyberGuy Live class, "Sick of Spam?," has ended, but you can still watch the full replay and download our spam-stopping checklist. Kurt "CyberGuy" Knutsson walks you step by step through simple ways to reduce robocalls, spam texts, junk email and unwanted messages. Youll also learn how to curb political texts, clean up your inbox and spot messages that could put your personal information at risk.

Get the free replay and checklist now at CyberGuyLive.com.

The attack targeted operational technology, commonly called OT. These systems control physical equipment such as pumps, valves and treatment machinery. In Braham, city officials initially reported that the water plant had gone offline for an unknown reason. Crews restored the facility within hours and said it was again filtering and treating water as expected.

Officials later blamed the outage on a malicious cyberattack against computerized operating systems. The city relied on water already stored in its tower while crews worked on the problem. Plymouth reported communications problems involving two water towers and several wastewater lift stations. However, officials said water levels and water quality remained unaffected.

South St. Paul also identified a cybersecurity incident involving automated water utility controls. Public Works employees used established contingency procedures to maintain normal water and wastewater operations. Maple Plain publicly confirmed that its water utility technology had also been targeted.

In total, four communities have publicly described specific effects, although MNIT says attackers targeted more than 30 systems statewide. That difference is important. Being targeted does not mean every system suffered a shutdown. However, it shows that someone tried to reach a large number of local utilities within a short period.

Officials have not announced a definitive attribution. However, a July 30 report from The New York Times says investigators preliminarily believe Iranian hackers were probably responsible. The report cited U.S. and state officials familiar with the investigation, but President Donald Trump said he rejected the suggestion that Iran was behind the breaches.

Those officials cautioned that the assessment could change as investigators collect more technical evidence. They also have not ruled out the possibility that attackers tried to make the activity appear Iranian. Therefore, Iran should be described as the leading preliminary suspicion rather than the confirmed attacker.

The timing has drawn attention because CISA warned in April that Iranian-affiliated hackers were targeting internet-exposed programmable logic controllers. These devices help control machinery and other equipment at water systems and additional critical infrastructure facilities. CISA initially highlighted certain Rockwell Automation and Allen-Bradley controllers. On July 22, the agency expanded its warning to include equipment from Schneider Electric, Siemens and potentially other manufacturers.

Still, federal officials have not publicly tied that campaign to the Minnesota incidents. CyberGuy has previously examined Iran's expanding cyber threat to U.S. critical infrastructure. Water systems remain attractive targets because even a limited disruption can create fear far beyond the equipment involved.

IRAN-LINKED HACKERS TARGET US MEDICAL TECH COMPANY

Minnesota's experience could happen in any state. The United States has close to 170,000 drinking water and wastewater systems. Many now connect physical equipment to internet-enabled technology so workers can monitor facilities from a distance. That remote access helps utilities manage equipment spread across wide service areas. However, it may also give an attacker a route into vital controls when operators fail to secure the connection.

Smaller communities often face the greatest challenge. The Government Accountability Office says water systems have widely different cybersecurity capabilities. Many also use older technology that can be difficult to update. At the same time, utilities must stretch limited budgets across essential repairs and regulatory requirements. Cybersecurity upgrades may compete with work that residents can see, such as replacing aging equipment.

A large utility may employ dedicated security professionals. A small town may rely on plant operators who already handle daily operations and after-hours problems. As a result, the communities with fewer resources may also have less ability to monitor suspicious activity around the clock.

Foreign governments have already shown interest in those weak spots. CyberGuy previously reported how Chinese hackers gained access to critical American systems, including infrastructure connected to water and energy. The attacker may change. The underlying weakness often looks familiar: exposed equipment, outdated technology or remote access that lacks strong protection.

A cyberattack against a water utility does not automatically mean the water has been contaminated. In Minnesota, officials reported no known impact on drinking water quality. They also told residents in publicly identified communities that normal water use could continue.

However, a successful attack can cause more serious consequences. The EPA warns that hackers could disrupt treatment or damage equipment. In a worst-case situation, attackers might also interfere with processes that protect water quality.

Manual operations can provide an important safety net. Minnesota workers used those procedures to keep systems running while investigators examined affected technology. Still, a manual backup only helps when employees know how to use it. Utilities need to test those procedures before screens go dark and alarms stop reporting correctly.

CISA published new international guidance on July 28 called "CI Fortify: Advice for Isolating Vital Systems." The guidance urges critical infrastructure operators to separate vital operational technology from less trusted networks. That isolation can help an essential service continue operating when another part of the organization becomes compromised.

CISA released the guidance on the same day MNIT publicly announced the statewide attack. However, the agency has not said it created the document in response to Minnesota. For water utilities, stronger protection may begin with removing unnecessary internet exposure. When remote access remains necessary, CISA advises placing security controls in front of programmable controllers.

Utilities should also change factory passwords and give employees separate login credentials. EPA inspectors have found water systems that continued using default passwords. Inspectors also discovered shared staff accounts or access that remained active after employees left.

Another EPA finding needs careful context. The agency says more than 70% of inspected systems violated basic federal risk assessment or emergency response planning requirements. That figure does not mean 70% had confirmed cybersecurity breaches. However, inspectors found serious digital security weaknesses at some of those facilities.

TRUMP REJECTS IRAN BLAME FOR MINNESOTA CYBERATTACK, POINTS FINGER AT 'CORRUPT' POLITICAL FOE

Residents cannot secure a municipal treatment plant themselves. However, a few steps can help you receive reliable information and avoid scams during an incident.

Check your city, county health department or water utility website for updates. Officials will tell you whether you need to reduce water use or boil tap water. Avoid making decisions based on an unverified neighborhood post.

A cyberattack may affect communications or automated equipment without changing water quality. Continue normal use unless local officials provide different instructions. However, follow any boil-water notice immediately if one appears.

Your city may use text messages, automated calls or government phone alerts during a service disruption. Take a moment to check the emergency alert settings on your iPhone or Android. Also, sign up for your city's local notification system if one is available.

A backup supply can help during any water interruption, whether it begins with a cyberattack or equipment failure. The CDC recommends storing at least one gallon of water per person each day for three days. Households may need more for pets or people with medical needs.

Scammers often take advantage of outages and breaking news. You may receive a message claiming that your water bill failed or that your service will be disconnected. Another message may offer bottled water assistance through a payment link. Do not use the phone number or link inside an unexpected message. Instead, contact the utility through its official website or the number printed on your bill. CyberGuy has also explained how scammers impersonate water and other utility companies by spoofing familiar phone numbers.

Minnesota contained a troubling attack without a known drinking water emergency. Workers restored Braham's plant while other utilities relied on manual controls or contingency procedures. However, the number of systems targeted should get the attention of every governor and mayor in America. Hackers apparently found a way to reach dozens of local utilities during the same two-day period. The preliminary suspicion involving Iranian hackers also raises the stakes. Still, investigators need more evidence before anyone treats that attribution as settled. Every community should know which water controls face the internet and whether workers can operate essential equipment manually. States should also help smaller towns that cannot afford their own cybersecurity teams.

How confident are you that your community could handle a cyberattack on its water system, and what would you want local officials to tell you first? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

That's how scam texts work. They don't always look wild or obviously fake. They look routine, urgent and easy to deal with in a hurry. The good news: You don't need to memorize every scam. You just need a quick way to test suspicious messages before you tap. Here's the simple scam text test to run before you click, pay or share anything.

CyberGuy Live: Missed "Sick of Spam?" Get the replay and checklist

Our free CyberGuy Live class, "Sick of Spam?", has ended, but you can still watch the full replay and download our spam-stopping checklist. Kurt "CyberGuy" Knutsson walks you step by step through simple ways to reduce robocalls, spam texts, junk email and unwanted messages. Youll also learn how to curb political texts, clean up your inbox and spot messages that could put your personal information at risk.

Get the free replay and checklist now at CyberGuyLive.com.

FAKE SHINYHUNTERS SEXTORTION EMAIL USES CARNIVAL BREACH DATA

If a text asks you to click, pay, verify, sign in or fix a problem, run through these checks first.

Are you actually waiting for that package? Do you use that bank? Did you recently drive on a toll road? If the answer is no, treat the message as suspicious. Even if the answer is yes, don't assume it's real. Scammers rely on coincidence. They send thousands of similar messages knowing that some recipients will be waiting for a package or use the company being impersonated.

Urgency is one of the biggest red flags. Watch for phrases like:

A real company may send an urgent alert, but scammers use pressure to stop you from checking whether the message is legitimate. Take a breath before responding. A few extra minutes spent verifying the message can prevent days or weeks of dealing with a stolen account.

Before tapping, check for:

Even if the address looks legitimate, avoid opening links in unexpected texts. Scammers can disguise links or create convincing copies of real websites. Verify the message through the company's official app or a website you type in yourself.

Many scam texts use vague greetings, odd wording, awkward punctuation or slightly incorrect brand names. You might see a message addressed to "Dear customer" instead of your name. It may refer to a package without showing an order number or claim to come from a bank without identifying the account involved. Good grammar doesn't guarantee a message is safe. Scammers now use artificial intelligence to write more convincing messages. Still, sloppy wording and missing details remain warning signs.

Be skeptical of any text asking for:

Legitimate companies may send you a one-time verification code. However, a bank, government agency or customer service representative should never ask you to give that code to someone else. Anyone who asks for your code may be trying to take control of your account.

This is the most important step. Instead of using the link or phone number in the message:

If the issue is real, you should still be able to find it through one of those trusted channels.

FAKE PASSWORD-MANAGER ALERTS COULD PUT YOUR VAULT AT RISK

Scam texts often fall into a few familiar categories.

These messages claim a package was delayed, an address needs to be corrected or a small shipping fee must be paid. The link may lead to a fake postal or delivery website that collects your card information, password or home address.

These texts claim someone used your card, your account has been locked or you must verify a transaction immediately. The message may include a phone number connecting you to a scammer pretending to work for the bank.

Toll scams claim you owe a small amount and will face a larger penalty if you don't pay immediately. The amount is often low enough to make paying seem easier than investigating. The payment page then steals your financial information.

These messages claim your email, payment app, streaming service or social media account will be suspended. They direct you to a fake login page designed to capture your username and password. These scams work because each message sounds plausible. The goal is to make you react first and think later.

Don't panic, but act quickly.

Simply opening a phishing page doesn't always mean your information was stolen. The risk increases if you entered information, downloaded a file or approved a permission request.

Use a different password for every important account. A password manager can create and store strong passwords so one stolen login doesn't give scammers access to everything else.

Change the affected account's password immediately and check whether a new device, email address or phone number was added. Contact the company through its official app, website or phone number. Tell the representative that someone may have gained access to your account.

Report any charges you don't recognize as soon as possible.

HOTEL WI-FI PHISHING ATTACK TARGETS MICROSOFT LOGINS

Visit IdentityTheft.gov to create a recovery plan. You may also want to place a fraud alert or security freeze on your credit files. A credit freeze can prevent criminals from opening many types of new accounts in your name.

Avoid entering sensitive information on the device until you are confident it is secure.

After securing your accounts:

Reporting scam texts helps phone carriers and government agencies identify active campaigns.

Good habits are your first line of defense, but strong antivirus software can add another layer of protection. Some security tools can warn you about suspicious links, phishing websites and malicious downloads before they put your information at risk.

Many text scams are only the first step. The message sends you to a fake website. That site may steal your password, payment details or other personal information. In some cases, it may also try to install malware on your device.

Look for security software that offers:

Security software cannot catch every scam or replace careful judgment. Still, it can help stop a suspicious link or malicious download before one quick tap leads to fraud or an account takeover. Features vary by provider and device, so check what is included before choosing a service.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

You never have to solve a surprise text from inside the text. Stop, verify independently and only act through official channels. That one habit can help you avoid a huge number of text scams.

Scam texts work because they make an everyday problem feel urgent. A package delay, unpaid toll or bank warning can seem believable enough to make you tap without thinking. Don't use the link or phone number in the message. Open the company's official app, type its website yourself or call a number you already trust. Strong antivirus software can help flag some suspicious texts and fake websites, but no security tool catches everything. Taking a few seconds to verify the message can save you from a stolen account or a costly mistake.

What is the most convincing scam text you have received, and what tipped you off before you tapped? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.

The Flight Dynamics Research Facility, located at the agencys Langley Research Center in Hampton, Virginia, will serve as a testing ground for future aircraft and space missions.

"The opening of the Flight Dynamics Research Facility represents a significant advancement for NASA and for the nation," said Dr. Trina Dyal, NASA Langley center director. "By bringing modernized testing capabilities under one roof, we are enabling transformative research that will ensure the United States remains at the forefront of aeronautics and exploration."

NASA AT 68: AMERICA MUST LEAD ON THE MOON, MARS AND BEYOND OR CHINA WILL

Built through a partnership with the U.S. General Services Administration, the more advanced and efficient tunnel replaces two facilities that had operated for more than 80 years.

NASA CHIEF CONFIRMS AGENCY HAS UNEXPLAINED UFO IMAGERY: 'WE DON'T KNOW WHAT IT IS'

The project is part of NASAs broader effort to modernize its infrastructure and reduce the cost of maintaining aging facilities.

"If we continue to invest our resources, maintaining a lot of our historic facilities that have less current or anticipated demand," said Jared Isaacman, administrator of NASA, "it will come directly at the expense of the next generation capabilities that are going to be essential to again, meet the mission of today and also all that we imagine go forward."

NASA celebrated the facilitys opening with a ribbon-cutting ceremony at Langley attended by hundreds of industry leaders, government officials and community members. Some attendees later toured the new tunnel.

The 25,000-square-foot facility contains a vertical test section measuring 20 feet in diameter and 24 feet tall. The temperature-controlled tunnel can generate wind speeds of up to 117 mph.

NASA ADMINISTRATOR DETAILS MISSIONS TO MOON, MARS, VENUS AND THE AGENCY'S EFFORTS ON EARTH

"The capabilities in terms of wind speed that this can provide are much greater," said Giovanny Guecha, technical lead for the NASA Dragonfly parachute decelerator system. "It's almost a factor of ten compared to the previous way it's been done. So that helps us, you know, test more stressful conditions that are closer to Venus."

Four 750-horsepower motors power the tunnel, with each motor paired with a 14-foot-diameter, eight-bladed fan. The lightweight carbon-fiber blades allow engineers to adjust airflow quickly during free-flight testing and simulate flight at higher altitudes.

The wind tunnel will be used to test technology for future exploration of Venus and Titan, Saturns largest moon, as well as missions to Earths moon and Mars. It can also evaluate scale models of vehicles designed to travel through an atmosphere, including spacecraft returning to Earth.

"This facility will absolutely have a role in every future space mission," said David Storch, facility manager for NASA's transonic dynamics tunnel. "You know, anything that has to come back to Earth. Absolutely."

The facility will provide NASA and its partners with a critical resource for testing the safety and performance of future generations of aircraft, rockets, space-exploration vehicles, X-planes, drones and autonomous flight vehicles.