Issues on Cyber, AI & Privacy News

Issue #4 — A firewall bug leaking logins, an AI agent that ran a ransomware attack, and Google's new AI-training default

Sat, 18 Jul 2026 00:00:00 +0000

top story A Firewall Bug Called FortiBleed Is Actively Stealing Logins From Small Businesses

If your office uses a Fortinet FortiGate device — the box that handles your firewall and lets staff connect remotely — there’s something you need to check this week, even if you have no idea whether you actually run one.

Researchers have been tracking an ongoing operation, nicknamed “FortiBleed,” in which criminals have collected working login credentials from tens of thousands of FortiGate devices around the world, across 194 countries. Fortinet’s own security team confirmed the activity and traced the cause to a mix of factors: attackers reusing passwords stolen in earlier, unrelated breaches, brute-forcing devices that had weak passwords and no second login step, and an old flaw in how Fortinet stored administrator passwords. Older FortiGate software kept passwords in a weaker, more crackable format even after a security update was installed — that older, weaker version stuck around until an administrator actually logged in again after upgrading. Reporting on the campaign has put the number of harvested credentials at more than 110 million across affected devices, with security firms tracking it describing small businesses and the IT companies that manage their networks as the primary targets. That matters because if your firewall is managed by an outside IT provider, criminals getting into that provider’s systems can be a backdoor into yours too.

Issue #3 — AI voice cloning, fake job listings, and who still has your old logins

Thu, 09 Jul 2026 00:00:00 +0000

top story The Big One: AI voice-cloning scams are targeting business owners

The “grandparent scam” — a panicked phone call claiming to be a family member in trouble — has a business version now, and it’s more convincing because of AI. Tools that clone a voice from a short public sample (a video interview, a voicemail greeting, a podcast clip) let a scammer call an employee sounding exactly like their boss or a company owner, urgently requesting a wire transfer or gift cards “before the bank closes.”

Issue #2 — Urgent password resets, a browser default that changed, and patch day

Thu, 02 Jul 2026 00:00:00 +0000

top story The Big One: why ‘urgent password reset’ emails are the new favorite scam

An email lands saying your password is about to expire, or that unusual sign-in activity was detected, with a button to “secure your account now.” The button leads to a page that looks exactly like your email provider’s or bank’s real login page. Type your password in, and it goes straight to the scammer — who now has thirty seconds to get into your real account before you notice anything wrong.

Issue #1 — Fake invoices, a note-taker that keeps listening, and one 15-minute fix

Thu, 25 Jun 2026 00:00:00 +0000

top story The Big One: fake-invoice emails are getting past small vendors

If you pay other businesses by email — a supplier, a contractor, a landlord — you’re a target for one of the oldest scams that’s still working: the fake invoice. It looks like routine business mail: a familiar vendor name, a real-looking invoice attached or linked, sometimes a note that “our bank details have changed.” The email account it comes from might even be a real vendor’s account that got broken into, which is why it’s so convincing.