Fraud Alerts & Scam News

Official warnings from government agencies worldwide, updated daily.

Last updated: 2026-10-20 06:00 UTC — 5099 alerts in database
🇺🇸 FTC 🇺🇸 FBI IC3 🇬🇧 Action Fraud 🇦🇺 ScamWatch 🔐 Krebs
Latest Alerts
None General
Nikkei discloses third data breach in a month, 1.8M records exposed

Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]

None General
WordPress SEO plugin Rank Math compromised to backdoor websites

Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week. [...]

None General
Hackers hijack AOMEI update servers to secretly spread malware

Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files befor...

None General
Bullhorn takes staffing platform offline to contain cyberattack

Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. [...]

🔍 CyberScoop General
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic

At risk, the Oregon Democrat warned, are online crime tipsters, whistleblowers and others. The post Wyden seeks adoption of encryption tech at hundreds of federal agencies to prote...

🛡️ SecurityWeek General
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks

Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures. The post Siemens Software Center Vulnerability Expl...

None General
OpenCode hack exposes API keys amid AI distillation attacks

The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. [...]

🛡️ SecurityWeek General
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules. The post Drupal Warns of Fast Exploitation Risk for Critical Core RCE ...

🔍 CyberScoop General
DHS to ban DeepSeek from federal civilian agencies

The order cites national security concerns, including sending data to servers in China, the potential for malware and the overall risk to federal IT systems. The post DHS to ban De...

🛡️ SecurityWeek General
Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack

Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16. The post Rank Math PRO WordPress Plugin Compromised in Supply Ch...

None General
Microsoft fixes game, app crashes caused by recent Windows update

Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010)...

None AI/Deepfake
Inside the Underground Market for Know Your Client Services

Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these ...

None General
F5 releases out-of-band patches for critical NGINX vulnerabilities

F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vu...

🔐 Krebs General
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware neg...

🛡️ SecurityWeek General
ConnectWise Suspends Cloud Services in Response to Cyberattack

The services remain unavailable as the company continues remediation and security validation. The post ConnectWise Suspends Cloud Services in Response to Cyberattack appeared first...

None General
Microsoft fixes classic Outlook bug that hid Copilot buttons

Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users. [...]

🛡️ SecurityWeek Crypto
Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

Threat actors have been observed delivering cryptocurrency miners and proxy software. The post Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure appea...

🛡️ SecurityWeek General
One Compromised Login Exposed Millions of California Students’ Records

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006. The post One Compromised Login Exposed Millions of Califor...

🛡️ SecurityWeek General
Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack

The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom H...

🔍 CyberScoop General
Spyware found on devices belonging to prominent Serbian critics as elections loom

The confirmed and suspected targets include a university rector backing Serbia's protests and a prosecutor who investigated a Trump-linked Belgrade development, weeks before parlia...

🛡️ SecurityWeek General
MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks

Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics. The post MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility ...

None General
Microsoft: October Windows Server updates break Exchange sign-in, mail flow

Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems. [...]

🛡️ SecurityWeek General
Anthropic Acquires Confidential AI Startup Opaque Systems

Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underlying hardware. The post Anthropic Acquires Confidential AI S...

Новости Краснодара и Краснодарского края Phishing
Мошенники в 2026 году сменили тактику: эксперты зафиксировали переход от телефонных звонков к фишингу в мессенджерах - Новости Краснодара и Краснодарского края

Мошенники в 2026 году сменили тактику: эксперты зафиксировали переход от телефонных звонков к фишингу в мессенджерах  Новости Краснодара и Краснодарского края

Anwalt.de Crypto
BrintelexisPro – Betrug? – anwaltliche Unterstützung - Anwalt.de

BrintelexisPro – Betrug? – anwaltliche Unterstützung  Anwalt.de

Tribuna de León. Crypto
El falso mensaje del FBI que puede dejarte sin dinero y con tu DNI en manos de estafadores - Tribuna de León.

El falso mensaje del FBI que puede dejarte sin dinero y con tu DNI en manos de estafadores  Tribuna de León.

futurezone.de Phishing
Neuartiger Betrug: Hörst du so etwas am Telefon, solltest du jetzt noch schneller auflegen - futurezone.de

Neuartiger Betrug: Hörst du so etwas am Telefon, solltest du jetzt noch schneller auflegen  futurezone.de

León 24 Horas Crypto
Se hacen pasar por el FBI para estafar a una víctima de criptomonedas: el INCIBE alerta del engaño por WhatsApp - León 24 Horas

Se hacen pasar por el FBI para estafar a una víctima de criptomonedas: el INCIBE alerta del engaño por WhatsApp  León 24 Horas

None General
Hackers exploit SiteGuard WAF flaw to run commands as admins

Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers. [...]

🛡️ SecurityWeek General
US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars

CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag. The post US Cybersecurity Job Postings Fall 26% as AI Security Engin...

NEWS.ru Govt Impersonation
МВД предупредило россиян о последствиях взлома аккаунта на «Госуслугах» - NEWS.ru

МВД предупредило россиян о последствиях взлома аккаунта на «Госуслугах»  NEWS.ru

Techora.ru Govt Impersonation
МВД: взлом Госуслуг грозит кредитами и микрозаймами - Techora.ru

МВД: взлом Госуслуг грозит кредитами и микрозаймами  Techora.ru

Anwalt.de Investment
EuGH-Urteil 2026 zu Onlinebetrug: Haften Banken auch bei Online-Trading- und Anlagebetrug? - Anwalt.de

EuGH-Urteil 2026 zu Onlinebetrug: Haften Banken auch bei Online-Trading- und Anlagebetrug?  Anwalt.de

Anwalt.de Phishing
EuGH stärkt Rechte von Phishing-Opfern:Banken müssen bei Phishing‑Betrug sofort erstatten–auch bei grober Fahrlässigkeit - Anwalt.de

EuGH stärkt Rechte von Phishing-Opfern:Banken müssen bei Phishing‑Betrug sofort erstatten–auch bei grober Fahrlässigkeit  Anwalt.de

None General
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 te...

None General
Drupal patches critical RCE flaws, warns exploits may emerge soon

Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [......

Агентство городских новостей «Москва» Bank Fraud
Эксперты предупредили о новых схемах мошенничества на фоне внедрения цифрового рубля - Агентство городских новостей «Москва»

Эксперты предупредили о новых схемах мошенничества на фоне внедрения цифрового рубля  Агентство городских новостей «Москва»

🛡️ SecurityWeek General
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel

Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets. The post Israeli Ad Firm Doubled as Candiru’s Z...

Techora.ru Phishing
Фишинг: мошенники требуют установить WodeApp для разблокировки WhatsApp - Techora.ru

Фишинг: мошенники требуют установить WodeApp для разблокировки WhatsApp  Techora.ru

12 Канал Phishing
Омичам рассказали, как распознать фишинг и защитить личные данные от интернет-мошенников - 12 Канал

Омичам рассказали, как распознать фишинг и защитить личные данные от интернет-мошенников  12 Канал

Smart-Lab Crypto
Мошенники украли $500 000 у криптокомпании через поддельный чат WhatsApp - Smart-Lab

Мошенники украли $500 000 у криптокомпании через поддельный чат WhatsApp  Smart-Lab

El Confidencial Phishing
Los bancos apuntan a las 'telecos' y esperan mano dura con los SMS fraudulentos - El Confidencial

Los bancos apuntan a las 'telecos' y esperan mano dura con los SMS fraudulentos  El Confidencial

CriptoNoticias Phishing
Estafadores explotan el miedo por Ledger con una falsa actualización de firmware - CriptoNoticias

Estafadores explotan el miedo por Ledger con una falsa actualización de firmware  CriptoNoticias

🔍 CyberScoop General
Federal agencies recommend cyber controls, independent testing for frontier AI systems

While voluntary, the document marks the federal government’s most detailed cybersecurity guidance for securing sandbox environments during AI model tests. The post Federal agencies...

Финансы Mail Crypto
Мошенник потерял $5 млн в биткоинах из-за взлома аппаратных кошельков Ledger - Финансы Mail

Мошенник потерял $5 млн в биткоинах из-за взлома аппаратных кошельков Ledger  Финансы Mail

None General
Critical BlockStrap flaw lets hackers run code on Magento servers

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbit...

Infobae Bank Fraud
Cómo identificar llamadas falsas a nombre del Banco del Bienestar y qué hacer para proteger tu dinero - Infobae

Cómo identificar llamadas falsas a nombre del Banco del Bienestar y qué hacer para proteger tu dinero  Infobae

None General
Targeted ads installed Candiru spyware in zero-click attacks

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the...

🔍 CyberScoop General
Prolific Chinese espionage group exploits BeyondTrust zero-day

Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group previously compromised Ivanti and Citrix customer...

🔍 CyberScoop General
Cybersecurity incident at BAE Systems disrupts US bankruptcy court system

The outage has stopped official bankruptcy notices nationwide since Oct. 9, with no cause or restoration date announced. The post Cybersecurity incident at BAE Systems disrupts US ...

🛡️ SecurityWeek General
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack. The pos...

None General
Employees using personal ChatGPT at work? Here's what IT admins need to do

Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how ...

Yahoo Crypto
Hasta los estafadores son robados: $4.8 millones desaparecen en el drenaje de la wallet Ledger - Yahoo

Hasta los estafadores son robados: $4.8 millones desaparecen en el drenaje de la wallet Ledger  Yahoo

None General
Burger King Japan data breach exposes 11 million customer records

Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer ...

🛡️ SecurityWeek General
BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts

A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week. The post BAE Systems Security Incident Stal...

Incrypted Crypto
Мошенники украли у сотрудника криптокомпании более $500 000 через фальшивую группу WhatsApp - Incrypted

Мошенники украли у сотрудника криптокомпании более $500 000 через фальшивую группу WhatsApp  Incrypted

🛡️ SecurityWeek General
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-...

🛡️ SecurityWeek Crypto
OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks

Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report. The post OpenAI Models Hacked Data Portals, Raided a...

CoinDesk Crypto
Estafador es estafado en exploit del chip espía de Ledger, pierde casi 5 millones de dólares en bitcoin - CoinDesk

Estafador es estafado en exploit del chip espía de Ledger, pierde casi 5 millones de dólares en bitcoin  CoinDesk

🛡️ SecurityWeek General
F5, Juniper Networks Patch Critical Vulnerabilities

Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post F5, Juniper Networks Patch Critical Vulnerabilities appeared ...