Technology News Articles on Fox News

Apple's first touchscreen MacBook comes at a price

Wed, 04 Nov 2026 07:48:11 -0400

Apple has finally given the MacBook Pro something many people have wanted for years: a touchscreen. The company unveiled its first touchscreen MacBook Pro on Oct. 28, introducing a new way to interact with its laptop. It also brings a stunning OLED display, a thinner design and some serious processing power. However, there's one detail that might make you think twice before reaching for your wallet. The new touchscreen MacBook Pro starts at $2,899.

That's a lot of money for a laptop, even by Apple's standards. So, what exactly are you getting for that price? More importantly, will touching your MacBook's screen make enough of a difference to justify an upgrade? Let's look at what Apple has introduced and who might benefit most.

Missed CyberGuy LIVE? Watch the replay and discover 5 ways to travel smarter and save money.

Our free CyberGuy LIVE class, 5 Ways to Travel Smarter and Save Money, has ended, but you can still watch the full replay. Kurt "CyberGuy" Knutsson walks you through five practical ways to protect your phone and personal information, avoid common travel scams, find better deals, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Watch the free replay + downloadable checklist now at CyberGuyLive.com.

8 BIGGEST THINGS WE LEARNED FROM APPLE'S 2026 EVENT

For years, Apple maintained that the Mac worked best with a keyboard and trackpad. Meanwhile, Windows laptop owners have enjoyed touchscreen options for a long time. Apple even experimented with touch controls through its Touch Bar, but that feature never replaced the traditional laptop experience.

Now Apple has changed course. Its new MacBook Pro with PROLED XDR Display lets you interact directly with the screen. You can scroll through websites with your finger or pinch to zoom into photos. Apple also lets you drag content between windows and interact with supported creative apps.

Think about how often you instinctively touch your laptop screen, especially after spending years using an iPhone or iPad. Now that gesture will actually do something on the new MacBook Pro. Apple also redesigned the hinge to keep the display steadier when you touch it. That's a thoughtful addition because nobody wants a screen wobbling every time they tap a button.

However, this remains a traditional laptop. It doesn't fold into a tablet, and it doesn't support Apple Pencil. You'll still use the keyboard and trackpad for much of your work. That may disappoint anyone hoping to replace both a MacBook and an iPad with one device.

While everyone is talking about the touchscreen, Apple's new display technology might have an even greater impact on your everyday experience. The company calls it the PROLED XDR Display, and it uses tandem OLED technology. Unlike traditional laptop screens that rely on a backlight, OLED pixels produce their own light. That allows the display to show deep blacks alongside bright highlights without the same backlight glow.

Apple says the new screen reaches up to 2,000 nits of peak brightness for both HDR and SDR content. It also delivers a claimed 10,000,000:1 contrast ratio and supports refresh rates up to 120Hz for smoother motion. Those numbers sound impressive, but what will you actually notice?

Photos should look more vibrant, especially when you're viewing pictures taken on your iPhone. Movies can show more detail in dark scenes. If you edit videos or work with photography, the improved color accuracy could be especially useful.

Apple has also added an antireflective coating to help reduce glare. An optional nano-texture finish provides additional reflection control for people who work in bright environments. For someone who spends hours looking at a laptop screen, these improvements could be more valuable than touch alone.

Apple isn't holding back on performance. The new touchscreen MacBook Pro comes with either an M5 Pro or M5 Max processor. Both target people who need more processing power than a basic laptop typically provides. If you're editing high-resolution video or working with large photo libraries, these chips are designed to handle that workload. Apple also offers configurations with up to 128GB of unified memory and 16TB of storage. However, those upgrades can drive the price considerably higher.

The new MacBook Pro runs macOS 27 and includes Apple Intelligence alongside Apple's upgraded Siri AI. It also brings Dynamic Island to the Mac for the first time. That familiar feature from the iPhone sits near the top of the display and gives you access to live updates and useful controls. For video calls, Apple includes a 12-megapixel Center Stage camera. Meanwhile, an upgraded six-speaker system promises deeper bass. The laptop also includes Thunderbolt 5 connectivity and an HDMI port, which should appeal to people connecting external displays.

12 BIGGEST APPLE WWDC 2026 TAKEAWAYS YOU NEED TO KNOW

One concern with touchscreen laptops is whether all that additional technology makes them heavier. Apple says it has managed to move in the opposite direction. The new 14-inch touchscreen MacBook Pro weighs about three pounds, roughly half a pound less than its predecessor. The 16-inch model comes in at four pounds, approximately 0.7 pounds lighter. Both models also feature slimmer designs. That should make carrying a MacBook Pro between meetings or packing one for a trip a little easier.

Apple promises up to 24 hours of battery life, depending on the configuration and usage. That's an impressive claim for a machine with this much performance and such a bright display. However, we'll need independent testing to see how battery life holds up during real-world work.

Apple has positioned its touchscreen MacBook Pro firmly in premium territory. The 14-inch model with the M5 Pro chip starts at $2,899, while the 16-inch version starts at $3,399. If you want the more powerful M5 Max processor, prices jump to $4,499 for the 14-inch model and $4,799 for the 16-inch version. And remember, those are starting prices for each configuration. Adding more memory or storage can increase the total substantially.

There is another important detail. Apple introduced a separate 14-inch MacBook Pro with its newer M6 chip on Oct. 27. That model starts at $1,999, but it uses a Liquid Retina XDR Display without touch support. That means you're looking at a $900 difference between Apple's entry-level M6 MacBook Pro and its least expensive touchscreen model. Of course, the more expensive version also includes an M5 Pro processor and the upgraded OLED display. These are different performance configurations, so the additional $900 doesn't represent the cost of touch alone.

For another perspective, the previous 14-inch MacBook Pro with the M5 Pro chip started at $2,499. That makes the new touchscreen version $400 more expensive than its comparable predecessor. Still, this gives you a meaningful choice. You can buy a powerful new MacBook Pro for considerably less if you don't need to interact directly with the screen. We've previously reported on how rising AI chip costs have pushed Apple prices higher. This latest introduction adds another premium option to an already expensive lineup.

Apple says many existing Mac apps will respond to touch immediately because macOS can translate finger taps into mouse clicks. That should make basic interaction straightforward, even before developers fully optimize their software. However, Apple's bigger ambition involves creative applications. The company demonstrated touch controls in Final Cut Pro that let editors manipulate clips directly on the screen. Musicians can use Logic Pro to play virtual instruments with their fingers.

Apple also expects third-party apps, including Adobe Lightroom and Microsoft Office applications, to take advantage of the new touch capabilities. That sounds promising. Still, a touchscreen doesn't automatically make every app easier to use. Tiny buttons and crowded menus can be frustrating when you're trying to select something precisely with a finger.

Early hands-on reports suggest that touch works smoothly for common gestures. However, some smaller macOS controls can still be awkward to tap. Those are preliminary impressions rather than findings from extended testing. It will be interesting to see how quickly developers adapt their interfaces and whether people continue using touch regularly after the initial excitement wears off.

This is the question I'd ask before spending nearly $3,000. If you already own a relatively recent MacBook Pro that handles everything you throw at it, I wouldn't rush to replace it solely for touchscreen capabilities. A mouse or trackpad still gives you excellent control, especially when you're working on detailed projects.

However, if you edit video professionally or spend your days working with photos, the OLED display could make a real difference. The improved portability also makes the new model appealing to people who regularly travel with demanding workloads. For everyday activities like email and web browsing, a less expensive MacBook Air or standard MacBook Pro will probably be more than enough.

Before making that decision, take a look at our guide explaining how to know when it's time to replace your Mac. A computer that still performs well may have several good years left. You can also explore our best laptops for 2026 at CyberGuy.com to compare other options before committing to Apple's premium model.

One more suggestion: If you're considering the touchscreen MacBook Pro, visit an Apple Store when it becomes available on Nov. 6. Spend some time using the touchscreen alongside the keyboard and trackpad. That hands-on experience could tell you more than any specification sheet.

If you're spending nearly $3,000 on a new MacBook Pro, protecting that investment should be a priority. While macOS includes built-in security features, Macs can still face malicious downloads and online scams. I recommend keeping your software updated and using strong antivirus software for an additional layer of protection. Strong antivirus software can help detect malware and warn you about dangerous websites before they cause trouble. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

I have to give Apple credit for finally bringing a touchscreen to the MacBook Pro. It feels like a feature that should have arrived years ago, especially when we're all so accustomed to touching the screens on our phones and tablets. I'm also impressed by what Apple is promising with its new OLED display. For people who work with visual content, that could be the most compelling reason to upgrade.

But here's where I hesitate. At $2,899, Apple is asking a lot for a feature that many competing laptops have offered for years. And with the standard M6 MacBook Pro starting at $1,999, there's a pretty compelling argument for saving that extra $900. I want to see how useful touch becomes in everyday work before calling this a must-have upgrade. My advice is to try it in person before spending the money. A touchscreen sounds great, but the real test is whether you still reach for it after the excitement wears off.

Would you pay nearly $3,000 for a touchscreen MacBook Pro? Let us know why or why not by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

7 holiday shopping scams to watch for this season

Tue, 03 Nov 2026 14:30:31 -0400

Black Friday is still weeks away, but the holiday shopping season is already picking up. Stores are promoting early deals, our inboxes are filling with sales emails, and chances are you're already thinking about gifts for family and friends. Scammers are getting an early start, too.

Holiday shopping scams are designed to blend in with legitimate promotions and messages. A tempting discount could lead to a fake online store. A delivery alert might ask you to confirm your address or pay a small fee. And an email about a problem with your order could be an attempt to steal your payment information.

The tricky part is that these messages often arrive when you're already looking for deals or expecting packages. Before you click or enter your credit card information, here are seven holiday shopping scams to watch for and simple ways to protect yourself.

DO NOT CLICK FAKE 'ACCOUNT RECOVERY' AMAZON EMAIL

Missed CyberGuy LIVE? Watch the replay and discover 5 ways to travel smarter and save money.

Watch the free replay, plus a downloadable checklist, now at CyberGuyLive.com.

During the holidays, it is normal to receive messages from unfamiliar stores. You may also be expecting several deliveries at once. Meanwhile, sales and shipping deadlines create pressure to act quickly. Scammers take advantage of those distractions. A fake message becomes more convincing when it matches something you are already expecting. That's why one of the best ways to avoid holiday shopping scams is to verify unexpected messages through a company's official website or app rather than responding directly.

You see a social media ad for a name-brand coat, popular gadget or designer handbag at 80% off. The photos look professional, and a countdown clock warns that the deal is about to expire. Big discounts happen during the holidays. However, unusually low prices on popular merchandise can signal a scam. Some fake stores collect your payment and send nothing. Others deliver cheap counterfeits or products that look nothing like the advertisement.

The Federal Trade Commission warns that scammers frequently use social media advertisements featuring popular products at unusually low prices.

Fake shopping websites can look remarkably convincing. Scammers copy brand logos, product photography and website layouts to make their stores appear legitimate. Sometimes, the biggest clue is hiding in the website address. A fake store might add words such as "outlet" or "sale" to a familiar brand name. Others use subtle misspellings or unfamiliar web addresses.

One important detail: A padlock icon or HTTPS connection does not guarantee that a shopping website is legitimate. It means the connection is encrypted. Scammers can use encrypted websites, too. When in doubt, type the retailer's official address into your browser or open its trusted app.

"Your package could not be delivered. Please confirm your address." Messages like this appear through text messages and emails, often claiming to come from the U.S. Postal Service, UPS or FedEx. Because you may have packages on the way, the message can seem believable. Scammers frequently direct you to a fake tracking page. There, they may ask you to enter your address, credit card number or other personal information. Some demand a small redelivery fee.

The Postal Service confirms that it does not charge a fee for redelivery. If a text claims you must pay USPS to receive your package again, treat it as a warning sign.

Another common scam involves an email claiming that your payment failed, your shopping account has been locked or a purchase needs immediate confirmation. Some messages go further. They claim someone made an expensive purchase using your account and provide a phone number to call if you want to cancel it. That number may connect you directly to a scammer. Once you call, the person may request your credit card information, ask for a one-time verification code or pressure you into installing remote-access software.

If you cannot verify the message through your account, contact the company's customer service department using contact information from its official website.

Gift cards make convenient holiday presents. Unfortunately, scammers also like them because the money can be difficult to recover once the card numbers and PINs are shared. A scammer may pretend to be a seller, employer or family member who urgently needs financial help. Some even claim to represent government agencies or utility companies.

A legitimate company might sell gift cards or accept its own gift cards for purchases. However, demands to buy gift cards and send someone the card numbers or PINs are strong signs of fraud.

The holidays are a popular time for charitable giving. Scammers know that emotional appeals can encourage people to donate quickly. Fake charities may use names that resemble familiar organizations. Others take advantage of natural disasters or heartbreaking stories to solicit donations. Some scammers impersonate legitimate charities and direct donations to fraudulent payment pages.

You can also consult the FTC's charity guidance before donating.

CHEAP ANDROID PHONES FOUND WITH MALWARE ALREADY INSTALLED

Online marketplaces and local resale groups can be useful places to find holiday bargains. However, they also attract scammers posing as legitimate sellers. A seller might advertise a popular item at an unusually low price, then demand payment before you can inspect it. Others try to move conversations away from the marketplace to avoid its protections. Fake payment confirmations and requests for additional shipping fees are other warning signs.

Remember that not every marketplace provides buyer protection. Check its policies rather than assuming it will refund a fraudulent purchase.

Avoiding holiday shopping scams starts with a few simple habits. These precautions can help protect your finances and personal information.

These habits help reduce your risk even when an advertisement or shopping website looks legitimate.

Even careful shoppers can encounter convincing scams. The important thing is to respond based on what actually happened.

Simply opening a webpage does not automatically mean your accounts have been compromised.

Acting quickly can improve your chances of limiting the damage.

Good habits are your first line of defense, but nobody spots every scam every time, especially during the busy holiday season. That's where reliable security software can provide an extra layer of protection. I recommend using strong antivirus software that helps detect suspicious websites, phishing attempts and malicious links before they put your personal information at risk.

Look for software that offers real-time protection against viruses, malware, spyware and ransomware. Some security solutions also include scam detection tools that can help identify fraudulent text messages, fake shopping websites and suspicious links. These features are particularly useful when scammers impersonate familiar retailers or delivery companies.

A built-in password manager is another valuable feature. It can generate and securely store strong, unique passwords for your shopping accounts. That helps reduce the risk of someone accessing multiple accounts if one password is compromised.

AI-powered scams are also becoming more convincing. Fake celebrity endorsements, manipulated videos and fraudulent holiday giveaways can make questionable offers appear legitimate. Some security products now include AI-powered scam detection and deepfake detection tools to help identify certain types of manipulated content. However, these capabilities vary by product, device and platform.

While security software cannot stop every scam, combining it with secure payment methods, account alerts and careful shopping habits can help protect your money and personal information throughout the holiday season.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

SCAMMERS ARE BUYING GOOGLE ADS TO STEAL BANK LOGINS

I love finding a great holiday deal as much as anyone. But I've learned that the best way to avoid getting scammed is to be a little skeptical when something looks unusually attractive or demands an immediate response. Scammers are getting better at copying familiar stores and creating convincing messages. They're also using AI to make fraudulent offers look more believable. That's why I recommend checking purchases directly through retailers you trust and using security tools that can help flag suspicious activity. A few extra seconds of checking could save you a lot of trouble. The holidays should be about enjoying time with the people you care about, not cleaning up after a scam.

Have you ever received a fake delivery alert or spotted an online shopping deal that turned out to be a scam? What tipped you off? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

iPhone Duo vs Galaxy Z Fold 8: Is $2,000 worth it?

Tue, 03 Nov 2026 11:37:23 -0400

How much would you pay for a phone that turns into a small tablet? Apple is betting the answer is nearly $2,000. After seven years of watching Samsung build folding phones, Apple has finally entered the race with its first-ever foldable iPhone.

The new iPhone Duo, which went on sale Oct. 23, opens like a book to reveal a 7.6-inch screen. Its biggest competitor, Samsung's Galaxy Z Fold 8, offers the same screen size and a remarkably similar design. However, Samsung's phone is lighter and costs about $100 less.

Apple has some interesting advantages of its own, including impressive battery performance and a clever screen designed to reduce glare. But there are compromises on both sides, including a repair bill that might make you think twice about carrying either phone without protection. So, has Apple finally cracked the folding phone formula, or does Samsung still have the better idea?

Missed CyberGuy LIVE? Watch the replay and discover 5 ways to travel smarter and save money.

Watch the free replay + downloadable checklist now at CyberGuyLive.com.

8 BIGGEST THINGS WE LEARNED FROM APPLE'S 2026 EVENT

Samsung introduced the original Galaxy Fold in 2019. Those early devices came with plenty of growing pains, including concerns about screen durability. Since then, Samsung has steadily improved its folding technology.

Apple took its time. In fact, we covered one of the company's early ideas in our article about Apple's foldable iPhone patent in 2023. Now the iPhone Duo is finally here, and Apple has made some interesting design decisions. The phone features a polished titanium frame, Apple's A20 Pro processor and a large inner OLED display. It also introduces a redesigned version of iOS built around the folding experience.

Samsung's Galaxy Z Fold 8 takes a different approach. It uses Qualcomm's Snapdragon 8 Elite Gen 5 chip and Samsung's One UI 9 software, which has evolved through several generations of folding phones. That experience gives Samsung an advantage in some areas. However, Apple has already managed to outperform its rival in early battery testing.

Let's get the painful part out of the way. The iPhone Duo starts at $1,999 for 256GB of storage. The 512GB model costs $2,199, while the 1TB version jumps to $2,599. If you really want to splurge, Apple's 2TB model costs an eye-watering $3,199.

Samsung's Galaxy Z Fold 8 starts at $1,899.99 for 256GB. The 512GB version costs $2,099.99, while the 1TB model reaches $2,499.99. That puts Samsung roughly $100 below Apple at comparable storage levels. Of course, Samsung has another advantage. Its Fold 8 has been on sale since August, so retailers and carriers have had time to introduce promotions.

However, I'd look closely at those deals before celebrating the savings. Some carrier offers require a qualifying trade-in or a lengthy commitment to monthly bill credits. There's also a larger question. When you're already spending nearly $2,000, will saving $100 really determine which phone you choose? I suspect the answer comes down to what happens when you actually hold them.

One of the first things you'll notice about these phones is how similar they look. Both fold horizontally like a book, with smaller screens on the outside and expansive displays when opened. But there's a noticeable difference in weight. The iPhone Duo weighs 8.96 ounces, compared with 7.09 ounces for Samsung's Galaxy Z Fold 8. That's almost two ounces heavier for Apple's phone.

If you've ever carried a heavy smartphone in your pocket all day, you know how noticeable that can become. The difference could be even more apparent when you're holding the phone open for extended periods. Samsung also wins on thickness. Its Fold 8 measures about 0.38 inches thick when closed, while the Duo measures 0.44 inches. Apple counters with a rounded titanium design that may feel more comfortable in your hand. Samsung uses sharper edges and a flatter appearance.

There's also something worth thinking about. Both phones have relatively small outer screens. Apple's measures 5.4 inches, while Samsung's comes in at 5.5 inches. Those screens are perfectly usable for everyday tasks. However, they're considerably smaller than the displays on many conventional flagship phones. You could end up spending $2,000 on a device that requires an extra step whenever you want a bigger screen. That's why I'd recommend trying both in person before buying. The phone that feels exciting for five minutes in a store needs to feel comfortable after five hours in your hand.

Both folding phones open to reveal 7.6-inch OLED screens with adaptive refresh rates up to 120Hz. Each also offers peak outdoor brightness of 3,000 nits. The real difference comes down to how those displays handle reflections.

Apple developed a nano-texture finish for the Duo's inner screen. It creates a matte appearance that helps reduce glare and makes the fold crease harder to see. Anyone who has struggled to read a glossy screen near a sunny window might appreciate this approach.

Samsung's screen has a more traditional glossy finish, which can make colors appear richer. Some early iPhone Duo reviews suggest Apple's matte display sacrifices a little contrast and vibrancy to achieve its reduced reflections. Neither approach will appeal to everyone. However, Apple has another interesting feature coming.

The iPhone Duo now supports the Apple Pencil (USB-C) through iOS 27.2, which Apple released on Oct. 26. That means you can sketch or annotate documents directly on the folding screen. The feature already works in the software's release candidate.

Samsung's Galaxy Z Fold 8 does not support the S Pen. Samsung removed the feature as it pursued thinner folding designs. There is one catch with Apple's approach. The Duo works only with the USB-C Apple Pencil. Even if you already own an Apple Pencil Pro, you won't be able to use it with this phone.

The USB-C version also lacks the pressure sensitivity available on more advanced Apple Pencil models. Still, this could be useful for someone who regularly signs documents or prefers handwritten notes.

Here's where those seven years of Samsung experience become apparent. Let's say you're on a video call and someone sends you an important document. You want to review it without interrupting the conversation. Then you need to check your calendar. Samsung's Galaxy Z Fold 8 can handle several apps on its larger screen. You can run three apps in split-screen mode, and Samsung also offers pop-up windows for additional flexibility. The Fold 8 supports Samsung DeX, too, giving you a desktop-style experience when connected to compatible external displays.

Apple has introduced Split View on the Duo, allowing two apps to run side by side. That's a first for the iPhone, and it should make the larger screen far more useful. However, Apple's approach remains more restrictive than Samsung's. Split View uses a fixed arrangement, and you don't get the same floating-window flexibility. There's another issue that early iPhone Duo owners are discovering.

Apple redesigned iOS 27 for the Duo, which ships with iOS 27.1. Its own apps have been adapted to use the folding display. However, some third-party apps haven't caught up. Early reviewers found that certain apps display large black bars or awkward layouts when opened on the bigger screen. That could be frustrating when you've paid so much for additional screen space.

Fortunately, developers can update their apps to support the Duo's design. Some popular apps have already received updates, and more are expected. For now, though, Samsung has a more established folding software experience. I would also pay attention to which apps you use most. A larger screen loses some of its appeal when your favorite apps still behave as though they're running on a much smaller phone.

Folding phones have a difficult job. They need enough battery power to run a large display without becoming too bulky. Apple's iPhone Duo uses two internal batteries and an A20 Pro processor designed for efficient performance. Samsung equips its Galaxy Z Fold 8 with a 4,800mAh battery and Qualcomm's Snapdragon 8 Elite Gen 5 chip.

Both processors offer plenty of power for demanding apps. However, early independent testing suggests Apple has a surprising advantage when it comes to battery life. In one battery test involving continuous web browsing over 5G, the iPhone Duo reportedly lasted 13 hours and 20 minutes, compared with 10 hours and 6 minutes for Samsung's Galaxy Z Fold 8. That's more than three additional hours for Apple.

Another independent test produced encouraging results for the Duo. While streaming video over Wi-Fi with the larger screens at maximum brightness, Apple's foldable reportedly lasted 18 hours and 15 minutes, compared with 16 hours and 30 minutes for Samsung. Although the tests used different methods, both suggest Apple has managed to squeeze impressive battery life out of its first folding phone.

Apple officially claims up to 31 hours of video playback using the inner display. However, that figure comes from controlled laboratory testing, so everyday results will vary depending on how you use the phone.

Charging is another consideration. Apple says the Duo can reach 50% in about 20 minutes with a compatible wired charger. Samsung supports 45W wired charging and fast wireless charging. For anyone who spends long days traveling or regularly finds their battery running low before dinner, Apple's early results are encouraging.

THE IPHONE DUO IS OFFICIALLY HERE — GET IT FOR NO MONEY DOWN AT T-MOBILE

For nearly $2,000, you'd expect a phone with an incredible camera. And while both of these foldables take excellent photos, there's a catch. Apple's iPhone Duo has two 48MP rear cameras, while Samsung's Galaxy Z Fold 8 has two 50MP cameras. Neither has a dedicated telephoto lens, which means you're giving up some of the zoom capabilities found on other premium phones.

Think about trying to get a close-up shot of your child playing soccer or capturing something interesting in the distance while on vacation. Apple's Duo offers 2x optical-quality zoom by cropping into its main sensor. Samsung uses a similar approach, with digital zoom for subjects farther away. Both can handle everyday photos, but if you love getting those close-up shots, an iPhone 18 Pro Max or Galaxy S26 Ultra may be a better choice.

Here's where Samsung throws another option into the mix. Its Galaxy Z Fold 8 Ultra starts at $2,099.99, just $100 more than Apple's Duo at their regular starting prices. For that extra money, you get a 200MP main camera and a dedicated telephoto lens with 3x optical zoom. That's worth considering if you want a folding phone but aren't willing to give up a more versatile camera. And with Samsung already offering discounts on some models, you may not even have to spend more.

Ever try taking a group photo and realize you're the one missing from it? Apple's Smart Take could help with that. Just prop open the iPhone Duo, get into the picture and let its AI recognize when everyone is posing. The phone automatically snaps the photo, so there's no racing against a timer or asking someone else to take the shot.

Then there's Duo Preview, which lets the person you're photographing see themselves on the outside screen. That could save you from hearing, "Wait, let me see that one," after every picture. Apple also came up with Kid Cue, which plays Peanuts animations on the outer display to get children to look toward the camera. If you've ever tried getting a toddler to cooperate for a family photo, you can probably appreciate that one.

Samsung has a few tricks of its own. The Galaxy Z Fold 8 can show people a preview on its outer screen, and you can prop it partially open for hands-free photos. That comes in handy when you want to be in the picture instead of always being the one taking it.

Now let's talk about something that deserves far more attention than it usually receives. Repairs. Apple rates the iPhone Duo IP68 for dust and water resistance, while Samsung gives the Galaxy Z Fold 8 an IP48 rating. That gives Apple stronger protection against dust under standardized laboratory testing. However, neither rating guarantees that a folding screen or hinge will survive years of rough treatment. These phones also contain more moving parts than conventional smartphones. And if something goes wrong, the repair costs can be substantial.

There's another reason to think carefully about durability. As we reported in our article, Apple confirms iPhone Duo screen problems after launch. Some owners experienced cracks along the inner screen near the hinge within hours or days of purchase, sometimes during initial setup. Apple acknowledged an issue affecting a small number of devices and directed affected customers to contact AppleCare for replacements. The company hasn't identified the cause or disclosed how many phones are affected. An AppleCare+ subscription isn't required to request a replacement for this acknowledged issue. Still, it's something I'd consider before spending nearly $2,000 on a first-generation folding iPhone.

According to Apple's published repair estimates, replacing the iPhone Duo's damaged inner display costs $999 without AppleCare+. That's roughly half the cost of the entry-level phone. Apple also lists an estimated $1,499 charge for certain other damage repairs. There is some relief for minor screen damage. Apple's replaceable inner display cover layer costs $49 to replace without AppleCare+, provided the damage is limited to that layer. AppleCare+ can significantly reduce eligible repair charges. For example, an inner display repair is listed at $99 under the coverage, subject to the plan's terms. Of course, the coverage itself adds to the cost of ownership.

Samsung's folding phones also have specialized displays and hinges that can be expensive to repair. However, repair pricing varies by model, damage and coverage. This is one area where I'd encourage anyone considering either phone to look beyond the advertised purchase price. After all, a $2,000 phone is expensive enough without worrying about what happens if it slips out of your hand and you're suddenly facing a repair bill approaching $1,000.

Apple has made the iPhone Duo eSIM-only worldwide. That means you won't find a physical SIM card slot. Samsung's Galaxy Z Fold 8 supports both eSIM and a physical nano-SIM card, although configurations may vary by market.

For most people in the United States, this probably won't be an obstacle. Major carriers support eSIM, and many international providers offer digital plans. However, if you travel frequently and prefer buying physical SIM cards at your destination, Samsung gives you more flexibility. It's worth checking whether your preferred mobile provider supports eSIM before buying the Duo.

If you've been waiting years for a folding iPhone, Apple's Duo is an appealing first attempt. It offers excellent early battery performance, an impressive display and the convenience of staying within Apple's ecosystem. However, I wouldn't overlook Samsung. The Galaxy Z Fold 8 is significantly lighter, costs a little less and offers more flexible multitasking. Those advantages could become increasingly important once the excitement of owning a new folding phone wears off.

And here's something else to consider. If most of your day involves texting or checking email, you may spend far more time using the smaller outer screen than you expect. The larger display becomes especially useful when you frequently review documents or watch videos while traveling.

Before buying either phone, think about how much time you would realistically spend with it unfolded. Also, if you're considering switching between Apple and Samsung, take a look at our guide on how to transfer data to a new iPhone or Android at CyberGuy.com. It can help make the move considerably easier.

HERE ARE SOME TIPS ON HOW TO ORGANIZE PHOTOS WITH KEYWORDS ON YOUR PHONE

I have to give Samsung credit. Seven years ago, folding phones seemed like an expensive experiment, and I wasn't convinced they'd ever catch on. But Samsung stuck with the idea, and now Apple has finally joined the party. I like what Apple's done with the iPhone Duo, especially the display and those impressive early battery results. Still, I keep coming back to the price. Nearly $2,000 for a phone that's heavier than Samsung's and doesn't have a dedicated telephoto camera? That's a tough sell. And the possibility of a $999 inner screen repair would certainly make me nervous.

I also wouldn't count Samsung out just because Apple has entered the race. The Galaxy Z Fold 8 is noticeably lighter, and Samsung has spent years figuring out how to make that larger screen useful. Being able to run more apps at once is a nice advantage, especially if you're someone who likes getting work done on your phone. And let's face it, a lighter phone is something you'll appreciate long after the excitement of showing everyone how it folds has worn off.

If I were spending this kind of money, I'd want to see how Apple's first folding iPhone holds up after a few months of everyday use. I'd also want to hold both phones before deciding. But here's what I keep wondering. How often would I really open that larger screen? If I ended up using the smaller outside display most of the day, I'd have a hard time convincing myself that spending $2,000 was worth it.

Would you really spend $2,000 on a folding phone, or do you think Apple and Samsung are charging us more to solve a problem we never had? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Florida police unveil $148K flying patrol vehicle

Mon, 02 Nov 2026 14:30:06 -0400

You may be used to seeing police cars cruising through your neighborhood or helicopters flying overhead. But what if an officer could respond to an emergency in a small electric aircraft that looks like a giant drone? That idea is getting closer to reality in Florida. The Florida Polytechnic University Police Department in Lakeland has introduced a flying patrol vehicle that the university has nicknamed Astro. Jetson, the company behind the Jetson ONE personal flying machine, built the single-seat aircraft.

According to the university, it's the first U.S. law enforcement agency to add this type of piloted electric aircraft to its fleet. Jetson calls it a world first. However, Astro still needs FAA authorization before officers can use it for operational police patrols. Here's how Astro works and why police believe this unusual aircraft could change the way they respond to emergencies.

Missed CyberGuy LIVE? Watch the replay and discover 5 ways to travel smarter and save money.

Watch the free replay + downloadable checklist now at CyberGuyLive.com.

FLYING SPORTS CAR HIDES ITS WINGS AS PRODUCTION GETS CLOSER

Astro gets its name from the dog in the classic cartoon The Jetsons. The aircraft even looks like something George Jetson might have parked outside his house. Astro uses electric vertical takeoff and landing technology, commonly called eVTOL. As a result, it can lift straight into the air without needing a runway. Unlike a conventional police helicopter, Astro has a compact frame that folds for easier transport and storage. The aircraft features an open cockpit surrounded by a lightweight frame.

Eight electric motors power its eight propellers. Meanwhile, a four-axis joystick allows the pilot to control its movement. Florida Polytechnic University selected the Jetson ONE to explore its potential for law enforcement. The aircraft arrived during summer 2026. Since then, police personnel have completed flight training, according to Jetson. That includes Police Chief Aaron Murray. Jetson also identifies the aircraft by its registration number, N911FP. The number references emergency services and Florida Polytechnic University. Jetson tells CyberGuy that Astro is a standard Jetson ONE with police lights added. Officers use a handheld radio, and the aircraft has mounts for action cameras. The company says a pilot-controlled searchlight could be added in the future.

Astro may look compact, but its advertised performance is impressive. According to Jetson's published specifications, the aircraft can reach speeds of 63 mph. That's fast enough to cover short distances across a large campus without following roads or dealing with traffic. However, battery life limits how long it can stay airborne. Jetson estimates approximately 20 minutes of flight time per charge, making Astro better suited to short missions than extended patrols. Jetson tells CyberGuy that the aircraft takes approximately 90 minutes to recharge using a 240-volt connection. Charging through a standard household outlet takes about three hours. However, officers can swap batteries between flights. This allows them to return to the air sooner if fully charged replacements are available. Each flight still lasts approximately 20 minutes.

Jetson confirms that the 210-pound maximum includes the pilot, police gear and any emergency supplies. The company says this is a hard limit, which could restrict how much equipment an officer can carry. Jetson also advertises several safety features. The company says Astro can continue flying even if one motor fails. It also has an automatic landing system and a ballistic parachute designed for emergencies. Jetson lists the vehicle at $148,000 before taxes and additional fees, making it a significant investment for a police department.

Florida Polytechnic University wants to explore whether Astro can help officers respond when roads become difficult to navigate. Consider what happens after a major Florida storm. Roads may flood, debris can block access and emergency crews may struggle to reach certain locations. Once weather and flying conditions allow, a small aircraft that takes off vertically could help officers survey the damage.

Police Chief Aaron Murray believes Astro could help officers monitor the campus and reach places that traditional vehicles cannot easily access. The department also wants to investigate using it to deliver emergency supplies. "Advanced air mobility is a technology on the rise, and we can either choose to be proactive or reactive as it develops," Murray said.

The university also plans to collaborate with regional law enforcement agencies on potential emergency-response missions. However, Astro carries only its pilot. It cannot transport an injured person or bring someone back from a rescue mission. Because the 210-pound limit includes the officer and everything onboard, the amount of emergency supplies Astro can carry depends on the pilot's weight and equipment.

PILOTLESS CARGO AIRCRAFT COULD CHANGE HOW PACKAGES MOVE

There's an important regulatory issue before Astro can become a regular part of police operations. Jetson developed the ONE as a recreational aircraft designed around the FAA's Part 103 ultralight rules. Those rules allow qualifying ultralight vehicles to operate without traditional aircraft or pilot certification. However, Part 103 limits their use to recreational or sporting purposes. Police patrols fall outside those permitted uses. FAA guidance specifically identifies aerial surveying and patrolling as activities that cannot operate under Part 103.

Jetson says Florida Polytechnic University needs additional federal authorization involving FAA Part 91 rules to use Astro for public-safety missions. When the university announced the aircraft in mid-October, it said the approval process was in its final stages. At that time, officials expected approval in November or December. The university has not publicly confirmed when regular operational police patrols will begin.

Astro has another role beyond its potential police duties. It will serve as a hands-on research platform for Florida Polytechnic University students. The university launched an aerospace engineering degree program in fall 2026. As a result, students will have an opportunity to study electric aircraft technology while learning about the challenges of operating it.

Faculty members and students plan to use Astro's flight data for research and senior engineering projects. Reports also indicate that the university is exploring virtual training simulations for police officers. This could provide useful information about how small electric aircraft perform during specialized missions. It may also help future engineers identify limitations that need attention before wider adoption.

Florida is also expanding its involvement in advanced air mobility. The nearby SunTrax transportation testing facility in Auburndale has a dedicated aerial test track for emerging aircraft technology. Testing under Florida's participation in a federal advanced air mobility pilot program is expected to begin by the end of 2026. That statewide testing effort is separate from Astro's pending authorization for police operations.

Astro raises an interesting possibility for law enforcement agencies looking for alternatives to traditional helicopters. Police helicopters require significant resources to purchase and maintain. A smaller electric aircraft could eventually offer another option for certain missions, especially when an officer needs a quick view of an area from above.

However, Jetson's aircraft also has substantial limitations. Its short flight duration means officers would need to plan missions carefully. Swappable batteries could support repeated flights, but officers would still need to land between missions to replace them. Weather conditions and airspace restrictions could further affect operations. There's also the question of whether a single-seat piloted aircraft provides enough benefits compared with a drone, which can conduct aerial surveillance without putting an officer in the cockpit.

Even so, Jetson sees the police department's purchase as an important step toward expanding personal electric aircraft into professional use. The company says its entire 2026 and 2027 production is sold out. It is now accepting orders for 2028, with a listed price of $148,000. Jetson also expects Astro to appear at the public UP.Summit event at Kennedy Space Center in Florida on November 7 and 8.

You probably won't see flying patrol vehicles operating above your neighborhood anytime soon. However, Astro offers an early look at how public-safety agencies might use small electric aircraft. After a major storm, an officer flying over blocked roads could potentially assess damage and help emergency crews understand where assistance is needed. The same technology might eventually support searches for missing people, although Astro's usefulness still needs to be demonstrated during actual police operations.

There's another side worth considering. As police departments explore aerial technology, questions about privacy will become increasingly important. People may want to know when officers can fly above their property and whether aircraft will collect or record information. Those questions deserve attention alongside the aircraft's potential benefits. For now, Florida Polytechnic University has an opportunity to study a new approach to emergency response while working toward the necessary federal authorization.

I've been following Jetson's flying aircraft for several years, and seeing one enter a police department's fleet is an interesting development. When I first covered the Jetson ONE, the attraction was the idea of people being able to fly their own electric aircraft. Now we're seeing a possible use beyond recreation. I can understand why a police department would want this technology, especially in Florida, where storms can leave communities cut off from emergency services. But I'm also interested in what happens after the excitement wears off. Twenty minutes of flight time leaves little room for unexpected delays, and there's still the question of whether an officer flying overhead offers enough advantages over a drone to justify the expense. I'm encouraged that the university plans to study those questions before putting Astro into regular service. And I think communities should have a say in how police use these aircraft, particularly when it comes to privacy.

Would seeing police officers flying above your neighborhood make you feel safer, or would you worry about having another set of eyes watching from the sky? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

ChatGPT now lets you lock private chats with a PIN

Mon, 02 Nov 2026 08:26:43 -0400

Ever handed someone your phone or let them use your computer to show them something, then suddenly worried about what else they might see? Maybe you've been using ChatGPT to work through a personal issue or plan a surprise for someone. Your conversation history can reveal quite a bit.

Now, OpenAI is giving you a way to keep certain conversations out of sight. The company just introduced Locked Chats, a new feature that lets you protect individual ChatGPT conversations with a four-digit PIN. On supported devices, you can also use Face ID, Touch ID or your phone's unlock method.

That sounds reassuring, especially as more people turn to artificial intelligence for personal advice. However, there are a few privacy limitations worth understanding before you start locking everything down. Here's how the feature works and how to set it up.

Missed CyberGuy LIVE? Watch the replay and discover 5 ways to travel smarter and save money.

Watch the free replay and downloadable checklist now at CyberGuyLive.com.

FAKE CHATGPT BILLING EMAILS CAN STEAL YOUR LOGIN

OpenAI's new Locked Chats feature allows you to protect selected conversations without deleting them. Once you lock a chat, it moves into a separate area under Projects > Locked chats. The conversation disappears from your regular chat history, pinned chats and standard search results. Its title and contents stay behind your PIN until you choose to open them. You can even continue the conversation later without moving it back into your regular history.

Think about how useful that could be if you share a computer with your spouse or occasionally let someone use your phone. Perhaps you're researching an anniversary surprise and don't want the details popping up in your sidebar. Now, you have a way to keep that conversation separate.

There's one important detail if you already use ChatGPT Projects. Locking a conversation removes it from its original project. As a result, the conversation loses access to that project's instructions, files and memory. Even if you unlock it later, the conversation returns to your regular history rather than its previous project.

The feature is rolling out gradually to ChatGPT Free, Go, Plus, Pro, Business, Enterprise and Edu users. It works on the web, in the iPhone and Android apps and in the new ChatGPT desktop apps for Mac and Windows. OpenAI says ChatGPT for Healthcare does not support Locked Chats.

You can lock an existing conversation in a few steps. The process is similar whether you're using ChatGPT on your computer, iPhone, Samsung Galaxy or Google Pixel.

Note: If you don't see Lock chat, the feature may not have reached your account yet. OpenAI is releasing it gradually. Some conversation types also cannot be locked.

Your conversation will move into Locked chats. The PIN belongs to your OpenAI account, so you can use the same PIN across supported devices where you're signed in.

Note: If you don't see Lock chat, the feature may not have reached your account yet. OpenAI is releasing it gradually. Some conversation types also cannot be locked.

META AI LAUNCHES PRIVATE INCOGNITO CHAT

Typing a PIN every time you want to open a personal conversation can get tiresome. Fortunately, OpenAI supports biometric authentication on compatible iPhones and device authentication on supported Android phones.

You can now use supported biometric authentication to access locked conversations on that iPhone. Your four-digit account PIN remains available as a backup.

Samsung Galaxy and Google Pixel users follow the same steps inside the ChatGPT app. The available authentication method depends on your phone and its settings.

Once enabled, you can use your supported device unlock method to access protected conversations. Depending on your phone, that may include fingerprint recognition or another available authentication method.

This setting applies only to the device where you enable it. Turning on device authentication on your Galaxy or Pixel does not automatically enable it on another phone.

Once you've protected a chat, you'll probably want to return to it. Fortunately, OpenAI keeps your locked conversations in one dedicated location.

You can continue chatting as you normally would. Opening the conversation temporarily gives you access without permanently removing its protection. You can also start a brand-new conversation directly inside Locked chats. After opening that area with your PIN, simply enter a new message. It will remain in the protected section. However, there's a limitation worth knowing. OpenAI doesn't allow you to archive, pin, move or share a conversation while it's locked. You'll need to permanently unlock it before using those options. Anyone who can open a locked conversation can also copy its contents.

Yes, although the timing depends on your device. On iPhone, Samsung Galaxy and Google Pixel, OpenAI says access ends automatically after you've been away from a locked chat or the Locked chats area for one minute. The same one-minute rule applies when the app runs in the background.

On the web, refreshing the page or closing the tab ends access. The desktop and web versions also relock after you've been away from the authorized window. If you want to secure everything immediately, select Lock now.

There's another detail worth knowing. A conversation may remain visible in the browser tab immediately after you lock it. Similarly, another device that's already running ChatGPT might temporarily display an older conversation title until it refreshes. So, check your screen before handing over your device.

You may eventually decide that a conversation no longer needs extra protection. You can return it to your normal history without deleting its contents.

The conversation returns to your regular history and can eventually appear in ordinary search results again.

Here's where I want you to pay close attention. Locking a conversation can stop someone casually browsing your chat history. However, OpenAI makes clear that Locked Chats do not provide end-to-end encryption or create a separate encrypted vault. The company also says locking a chat does not change how long it retains your information. Your existing Improve the model for everyone setting remains unchanged, too.

Memory introduces another consideration. If ChatGPT remembered something before you locked a conversation, that information can still exist in regular Memory. Once the chat is locked, new information remembered from subsequent messages stays within the Locked Chats memory area. Other locked conversations can use that information, but regular chats do not receive those new memories automatically. Locked chats can also draw on existing regular Memory when it's enabled.

There's also a potential surprise involving shared links. If you previously shared a conversation through a link, locking it does not revoke that link. Anyone with the existing link may still access the content that was previously shared. You must delete the shared link separately to stop that access.

Files come with their own limitations. Documents and other files uploaded or created inside a locked conversation receive the same protection as the chat itself. However, files already stored elsewhere in ChatGPT's Space or brought in from connected services keep their existing access permissions. Locking a conversation won't automatically protect those separate files.

For workplace accounts, existing organizational retention and compliance policies still apply. OpenAI says Enterprise and Edu conversation logs can include locked chats through its compliance tools. Workspace administrators cannot unlock your chats or reset your PIN, but authorized compliance systems may still access applicable conversation data.

These are important limitations if you're discussing financial information or other highly personal subjects. I would still avoid uploading passwords, Social Security numbers or complete banking credentials to a general ChatGPT conversation.

If you're concerned about how OpenAI handles your conversations, there's another privacy setting you should review. Turning off Improve the model for everyone prevents your new conversations from being used to train OpenAI's models. These instructions apply to personal ChatGPT accounts. OpenAI says content from ChatGPT Business, Enterprise and Edu workspaces is not used to train its models by default.

Here's how to do it.

On the ChatGPT website

On iPhone, Samsung Galaxy and Google Pixel

Your new conversations will no longer be used for model training after you turn off this setting. They can still remain in your chat history, so you'll need Locked Chats or another option to keep them out of view. For additional privacy controls across other AI services, see my guide on how to opt out of AI data collection in popular apps.

OpenAI already offers a feature called Temporary Chat, which serves a different purpose. Temporary Chats don't appear in your regular history or create new memories. OpenAI also excludes them from model training while they remain temporary. However, the company may retain temporary conversations for up to 30 days for safety purposes. Depending on your settings, a Temporary Chat can also use existing personalization information.

Locked Chats make more sense when you want to save a conversation and return to it later without leaving it exposed in your normal history. You can keep adding messages, and the conversation stays behind your PIN.

So, if you're having a one-time discussion you don't need to save, Temporary Chat may be the better choice. If you're working through something personal over several days, Locked Chats gives you a way to maintain that conversation with additional access protection.

This is one detail I really don't want you to overlook. Resetting a forgotten PIN permanently deletes all your locked chats, along with memories stored only within those chats and files or other content protected only by the previous PIN. OpenAI says the deletion cannot be undone. Even its support team cannot recover that protected content. If you remember your current PIN and simply want to change it, you can do so without losing your conversations.

If you've forgotten your PIN, you can also reset it from Settings > Security and login > Account PIN. However, you'll need to verify your identity and confirm the permanent deletion of your protected chats and associated content before creating a replacement PIN.

One more thing: OpenAI doesn't allow every conversation to be locked. The exclusions include Temporary Chats, archived chats, group chats and conversations created from shared links. Chats involving scheduled tasks, meeting recordings or background tasks are also excluded. The same applies to conversations with responses saved as project sources. Some Health, Codex and Work conversations have additional restrictions. If the Lock chat option doesn't appear, your conversation may not qualify.

I like that OpenAI is finally giving people more control over which conversations appear when someone opens ChatGPT. As AI becomes a place where people work through personal decisions, there's a real need for some discretion. Being able to hand someone your phone without exposing an entire conversation history is a useful improvement. Still, I would treat Locked Chats as a convenience and access-control feature rather than a guarantee of confidentiality. The four-digit PIN helps keep curious eyes away, but your broader privacy depends on the information you share and the settings you've chosen. And that leaves me wondering whether OpenAI should eventually offer something stronger for conversations people consider deeply private.

Would you trust ChatGPT with your most personal conversations if they were protected by a PIN, or should OpenAI offer stronger privacy protections before you feel comfortable sharing? Let us know by writing to us at CyberGuy.com.

Fake party invite scam: Can you trust a friend's reply?

Sun, 01 Nov 2026 11:02:33 -0400

An invitation from a friend lands in your inbox. Something feels off, so you do the responsible thing. You email your friend to make sure the invitation is legitimate. A reply comes back confirming everything. You would probably feel comfortable clicking at that point, right?

That's what makes a recent email from John in Westlake, Ohio, so unsettling. He received a suspicious Evite and decided to investigate. However, the response he received raised even more questions. John has since confirmed with his friend that the emails were part of a scam. His experience reveals a potential weakness in how we verify suspicious emails, especially when someone else's inbox may be compromised.

Missed CyberGuy LIVE? Watch the replay and discover 5 ways to travel smarter and save money.

Watch the free replay + downloadable checklist now at CyberGuyLive.com.

FAKE CHATGPT BILLING EMAILS CAN STEAL YOUR LOGIN

John received what appeared to be a fraudulent Evite from a friend. After reading our previous warnings about fake Evite emails, he decided to email his friend directly rather than click the invitation. What happened next made him even more suspicious.

Here's what John wrote:

"I received what I thought was a fraudulent eVite from a friend. Thanks to your previous posts, I strongly suspected that this was a phishing attempt. So, I independently emailed my friend and asked if the eVite was legitimate. I got the response below."

Hi John

This is from me, and I sent it, Sorry for the confusion,

Thank you

"It appears that the scammers either set up an auto-response on the Gmail account or manually responded to my email. The punctuation was wrong, so I didn't consider the response legitimate."

John thought the reply sounded unlike his friend and wondered whether someone had gained access to the account. He later contacted his friend again and confirmed that the emails were a scam. John also shared the actual Evite-branded invitation, which advertised a "Dinner Gathering & Celebration" and included a "View Invitation" button. Its polished design resembled a legitimate event invitation, showing how easily someone could mistake a fraudulent message for the real thing.

WHY VERIFIED SOCIAL MEDIA ACCOUNTS CAN STILL LEAD YOU INTO A SCAM

Most people know they should be cautious about unexpected links. In fact, we've repeatedly encouraged readers to verify suspicious messages before taking action. That remains excellent advice. However, there's an additional concern when the email account you're contacting may already be under someone else's control.

The Federal Trade Commission warned in May 2026 about fraudulent invitations that imitate popular services such as Evite and Paperless Post. These messages may appear to come from someone you recognize. When you try to view the invitation, a fake website can ask for your email password or a verification code.

If criminals obtain access to that account, they may send more fraudulent invitations to the account owner's contacts. The messages can appear to originate from a legitimate email address, making them especially convincing. Now consider what happens when someone replies to one of those invitations asking whether it's real. If a criminal still controls the sender's inbox, that person could potentially intercept the question and send a reassuring answer. A recipient might then believe the invitation is safe because a familiar email address confirmed it.

John wondered whether someone had configured an automatic response inside his friend's Gmail account. Technically, that's possible. Gmail allows users to create email templates and filters that automatically respond to certain messages. Someone with unauthorized access could potentially misuse that feature or simply respond manually while impersonating the account owner.

Although John confirmed the emails were fraudulent, we still don't know how the reassuring reply was generated. There's no technical evidence yet showing whether someone accessed his friend's account, configured an automatic response or used another method to impersonate him. What John's experience does demonstrate is that a reassuring email reply can accompany a confirmed scam.

We reached out to Evite about John's experience and asked whether the company was aware of this type of scam. In a statement provided to CyberGuy, Evite said:

"We're not currently seeing a rise in phishing scams, however, staying aware is always important, which is why we're constantly monitoring and providing tools to help users spot the fakes at evite.com/blog/etiquette/how-to-spot-phishing-email-scam/ . The best way to tell the difference is that a scam is generic, but a real gathering today is highly specific. Real hosts are over-communicating, sharing everything from parking instructions and dress codes to very specific themes like 'Strawberry' or 'Western.' That level of detail is what makes a modern invite harder to fake and gives guests the confidence to say 'yes' without second-guessing.

Evite advice? Check the details. If it just says 'You're invited' with a link, be cautious. A real Evite host today is telling you where to park and what to wear."

Evite's advice is worth keeping in mind, although scammers can also create convincing invitations with specific event details. That's why it's important to take additional precautions before clicking an unexpected invitation.

A few changes to how you verify unexpected invitations can help prevent a suspicious email from becoming a much bigger problem.

If an invitation seems unusual, contact the sender using a phone number you already have. You can also reach out through another established communication channel, provided you have reason to trust that account. Avoid using phone numbers included in the suspicious invitation. A criminal could provide a fake contact number designed to make the story sound legitimate.

Be cautious if an invitation asks you to enter your email password or share a security code before revealing event details. A phishing website may use those requests to steal account access. If you expect an invitation from a particular service, open its official app or visit its website directly. Check whether the invitation appears in your account rather than following an unfamiliar link.

Pay attention if a familiar contact suddenly uses an unusual writing style or gives an answer that doesn't fit the conversation. Unexpected requests to click another link should make you even more cautious. However, don't rely entirely on spelling mistakes or punctuation. Criminals can write convincing messages, while legitimate emails may contain errors. The safest approach is to confirm the situation through another trusted method.

Fake invitations can sometimes lead to malicious downloads rather than stolen passwords. In certain attacks, criminals disguise remote access software as something you need to install to view an invitation. Strong antivirus software can help identify dangerous downloads and block known malicious websites on supported devices. Keep your operating system and security software updated so you receive the latest available protections. If you accidentally downloaded an invitation file, avoid opening it. Run a security scan using trusted software. If you entered login credentials on a suspicious website, change them through the legitimate service immediately. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

If you suspect someone has accessed your Gmail account, review its settings for changes you didn't make. An attacker may use forwarding or automated email rules to interfere with incoming messages.

On a computer, follow these steps:

If you discover unfamiliar settings, investigate them and remove unauthorized changes. You should also secure your Google account and review recent sign-in activity.

A strong, unique password helps protect your email. You should also enable two-factor authentication or use a passkey where supported. Passkeys provide stronger protection against phishing because they are tied to legitimate websites or apps. Visit your Google Account security settings at myaccount.google.com/security to review recent activity and connected devices. If you suspect unauthorized access, change your password using a trusted device and sign out unfamiliar sessions. A password manager can help you avoid reusing passwords across accounts. That way, one exposed password is less likely to compromise another service.

Scammers often use personal information found online to make fraudulent messages sound more convincing. Data brokers collect and sell details such as your email address, phone number and information about your family. A personal data removal service can help reduce that exposure by requesting that participating data brokers remove your information. Although no service can erase everything or prevent a friend's email account from being hacked, limiting what's available online may make it harder for criminals to personalize scams. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

When you encounter a fraudulent invitation, use your email provider's phishing-reporting tools. In Gmail, open the suspicious message, select the three-dot menu and choose Report phishing . You can also report scams to the Federal Trade Commission at ReportFraud.ftc.gov. If the message appears to come from a friend, contact that person using another trusted channel. They may need to secure their account and alert other people who received similar invitations.

If your friend confirms that someone accessed their account, avoid interacting with the invitation. Save the suspicious message as evidence and report it to your email provider. You may also want to check whether you received any follow-up messages containing unfamiliar links.

Encourage your friend to begin account recovery through their email provider's official website. They should review their account activity and remove unauthorized access. If the scammer sent invitations to other contacts, your friend should warn those people through a communication method they still control. For Gmail users, Google provides instructions for securing a hacked account. Acting quickly may help prevent additional messages from reaching trusted contacts.

John's email made me reconsider a piece of advice I often give. I've always encouraged people to contact someone they know when a suspicious message arrives. I still believe that's smart advice, but how you reach that person is important. If their email account has been compromised, you could end up communicating with the scammer instead. Personally, I'd rather pick up the phone and call a number I already trust. I'm glad John trusted his instincts and followed up with his friend. He received a reply saying the invitation was legitimate, yet he kept questioning it. That extra effort helped him confirm the scam. We can't assume every strangely worded email comes from a hacker, but we also shouldn't ignore something that feels wrong. Scammers count on us trusting familiar names and email addresses. John's experience shows why a little extra verification can be worth the effort.

Have you ever questioned a suspicious email, only to receive a reassuring reply that still didn't sound like the person you knew? Did you later discover their account had been hacked? I'd like to hear what happened so write to us at Cyberguy.com

Microsoft AI beats doctors in simulated diagnosis test

Sun, 01 Nov 2026 07:34:10 -0400

Ever leave a doctor's appointment with more questions than answers? Maybe you've gone through several tests, only to hear that your doctor still isn't sure what's causing your symptoms. That uncertainty can be exhausting, especially when you want answers. Now, Microsoft says its new artificial intelligence system could help doctors solve some of medicine's toughest diagnostic puzzles. And the early numbers are impressive.

In a study published on Oct. 22 in the journal Science, Microsoft's AI diagnostic system correctly identified 83% of complex medical cases, compared with 36% for generalist physicians who could consult reference materials. That's more than twice the accuracy under the study's testing conditions.

However, there's an important catch behind those numbers. The research took place in a simulation, and the doctors weren't specialists working together on difficult cases. Still, the findings raise a fascinating question about how artificial intelligence could change your next visit to the doctor.

Missed CyberGuy LIVE? Watch the replay and discover 5 ways to travel smarter and save money.

Watch the free replay + downloadable checklist now at CyberGuyLive.com.

AI MAY SPOT DEADLY HEART RISK IN A ROUTINE ECG

Microsoft calls its technology the MAI Diagnostic Orchestrator, or MAI-DxO. The system uses multiple AI agents that work together much like a panel of doctors discussing a difficult medical case. Instead of jumping to an immediate answer, the AI begins with limited information. It asks follow-up questions and considers which medical tests might help identify the problem. Then, its AI agents challenge one another's conclusions as new information becomes available.

Think about someone who has unexplained fatigue and several unusual lab results. A doctor might consider one possible explanation before ordering additional tests. Microsoft's system can examine multiple possibilities and reconsider its initial assessment as the evidence changes. That approach could prove especially useful when symptoms overlap across different diseases.

According to Microsoft's published findings, researchers evaluated the technology using 304 complex medical cases from The New England Journal of Medicine . These cases often involve unusual illnesses that challenge even experienced physicians. The results were striking. MAI-DxO correctly diagnosed approximately 83% of those cases. Generalist physicians working alone achieved 36% accuracy when they could use reference materials. Without those resources, their accuracy dropped to 22%. Researchers also tested the system using historical emergency department cases. There, the AI achieved approximately 80% accuracy, compared with 47% for the physician comparison group.

Before anyone starts canceling doctor appointments, there's something important to understand about this research. The physicians in the comparison were generalists, including primary care doctors and general internists. They evaluated cases individually, even when they had access to medical reference materials.

However, hospitals typically involve specialists when patients develop particularly difficult medical problems. Those specialists may work together and review additional evidence before reaching a diagnosis. Microsoft did not directly compare its system against teams of medical specialists.

There's another important detail. Microsoft's AI was evaluated across 304 complex cases, while physicians worked through a smaller set of 56 cases held out from the system's development process. That means the headline percentages don't represent two groups completing exactly the same number of cases.

That limits how broadly we can interpret the findings. The researchers also relied on existing medical cases rather than treating patients in real time. While those cases provide a useful challenge, actual medical care can be far more unpredictable.

Patients sometimes struggle to describe symptoms. Medical records may contain gaps, and physical examinations can reveal clues that never appear in a written case summary. The simulation also relied on an AI system to supply information from existing case reports. When certain details weren't available, it could generate plausible responses. That helped researchers create diagnostic conversations, although those interactions cannot fully reproduce the uncertainty doctors encounter with actual patients.

Furthermore, reaching the correct diagnosis represents only part of caring for someone. Doctors must determine the appropriate treatment and understand how individual circumstances affect medical decisions. The study's authors also work for Microsoft, making independent testing especially important before hospitals consider relying on the technology for patient care. For now, Microsoft's results show how well the technology performed under controlled testing conditions. Whether it can deliver similar benefits during everyday patient care remains an open question.

HIDDEN CLUES COULD HELP PREDICT A WOMAN’S BREAST CANCER RISK YEARS IN ADVANCE

You might be wondering how this technology compares with ChatGPT or other AI assistants that already answer medical questions. The underlying AI models play a major role in Microsoft's system. In fact, the researchers tested models developed by OpenAI, Google, Anthropic and other companies.

One finding deserves attention. OpenAI's GPT-5 correctly solved approximately 79% of the complex cases when researchers used a basic prompt without Microsoft's orchestration system. Adding MAI-DxO increased accuracy to approximately 83%. That's an improvement, although the underlying AI model already performed remarkably well.

With the newer GPT-5.5 model, the gains were larger on complex cases. Microsoft's orchestration system raised accuracy from approximately 72% to nearly 87% in that comparison. However, the additional system provided little improvement on emergency department cases using the strongest models. These results suggest that much of the diagnostic capability comes from powerful AI models themselves. Microsoft's approach can improve its performance further, depending on the model and medical problem.

Meanwhile, Microsoft CEO of AI Mustafa Suleyman has described the company's larger ambition as "medical superintelligence." The idea involves developing AI systems capable of eventually exceeding today's strongest medical teams in clinical reasoning and coordination. Microsoft is also collaborating with Mayo Clinic on AI technology that could eventually help clinicians anticipate how a patient's medical condition might develop. Those ambitions extend well beyond the capabilities demonstrated in the current study.

Anyone who has received a surprisingly expensive medical bill knows how quickly diagnostic testing can add up. Microsoft believes its technology could eventually help doctors make better decisions about which tests patients actually need.

During the study, researchers assigned estimated costs to diagnostic procedures. They then measured whether the AI could reach accurate conclusions while avoiding unnecessary testing. In one cost-conscious configuration, MAI-DxO achieved approximately 81% accuracy on complex cases while generating an estimated $2,241 in diagnostic costs per case. The physicians using reference materials averaged approximately $4,725 in estimated diagnostic costs.

However, some configurations designed to maximize AI accuracy generated higher testing costs. The savings depended partly on how researchers adjusted the system. It's important to understand what those dollar amounts represent. Researchers estimated the cost of diagnostic workups, including medical testing and standardized visit expenses. These figures do not represent actual patient bills or the cost of operating the AI. They're estimates based on the simulation, so researchers still need to determine whether the savings would hold up in real hospitals. Nevertheless, reducing unnecessary procedures while preserving diagnostic accuracy could offer significant benefits if future clinical trials confirm the results.

The next challenge involves moving beyond simulated medical cases. Microsoft has announced a partnership with Beth Israel Deaconess Medical Center in Boston to evaluate MAI-DxO in clinical environments. Under the planned research, consenting patients will continue receiving standard medical care. They will also interact with Microsoft's AI system as researchers compare its recommendations with physicians' independent assessments. Importantly, doctors will remain responsible for patient treatment.

The study should help researchers understand how well the AI performs when it encounters actual patients and the unpredictable circumstances of a busy hospital. Meanwhile, Microsoft faces competition from other technology companies pursuing similar goals. Google recently published a study in The Lancet involving its own conversational medical AI system, called AMIE. In that study, 98 patients interacted with Google's AI before urgent primary care appointments. Physicians monitored the conversations in real time, and none required a safety-related interruption under the study's predefined criteria.

Participating clinicians also reported that the AI-generated information often helped them prepare for appointments. Although the research was relatively small, it provided an early look at how conversational AI might work alongside doctors. Microsoft's upcoming clinical evaluation will offer another opportunity to examine whether these systems can perform reliably outside controlled simulations.

For now, Microsoft's AI diagnostic system remains a research technology. You cannot rely on it as a replacement for a medical appointment. However, these findings offer a possible preview of where health care could be headed. If AI systems continue improving, your doctor might eventually have access to a powerful digital assistant that can review difficult cases and suggest overlooked possibilities. That could be especially helpful for people who have spent months trying to understand unexplained symptoms.

AI might also help clinicians evaluate test results more efficiently. In the future, that could reduce unnecessary procedures and potentially shorten the time patients spend waiting for answers. Still, accuracy alone should never determine whether a hospital adopts AI for patient care. Doctors need to understand when these systems make mistakes. Patients also deserve clear information about how their medical data gets used and who reviews AI-generated recommendations.

We've previously reported on how more Americans are turning to AI for health advice. That growing interest makes careful use even more important. If you're already asking an AI chatbot about symptoms or medical test results, use its responses to prepare questions for your doctor. Avoid treating those responses as confirmed diagnoses. And before uploading medical records into any AI service, review how the company handles sensitive health information. Ultimately, the most useful role for this technology may be helping physicians reach better decisions while keeping patients involved in their care.

Want to put AI to work for your own health? Watch the free replay of my CyberGuy LIVE class, 5 Ways AI Can Help You Get Better Healthcare at cyberguy.com/cyberguylive/classes/, where I share practical ways to prepare for doctor visits and make sense of complicated medical information.

I find these results both exciting and a little unsettling. Anyone who has watched a loved one struggle through a difficult diagnosis knows how frustrating it can be to wait for answers. If AI can help doctors catch something they might otherwise miss, I'm all for it. But let's be careful about declaring AI better than doctors based on simulated cases. I want to see how this technology performs with actual patients before we put too much trust in it. What interests me most is the possibility of giving doctors another set of highly capable eyes. A second opinion can change everything, and AI could make that available much faster. Of course, protecting sensitive medical information needs to be part of the equation, too.

If an AI system disagreed with your doctor about a serious medical diagnosis, whose judgment would you trust? Would you want the AI involved in your care at all? Let us know by writing to us at CyberGuy.com

Identity thieves don’t need your password anymore; here are 6 new account takeover threats

Sat, 31 Oct 2026 11:19:22 -0400

You may think of a stolen password as the main way someone gets into your account. But online criminals have learned that they do not always need to steal the password itself. They may hijack an active login session, convince you to approve a sign-in, take control of your phone number or use malware to collect information from your device.

Passwords are still important. However, they are only one part of the security system protecting your identity. Here are six ways criminals may try to get around traditional password protection and the practical steps you can take to protect yourself.

Join our CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt "CyberGuy" Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

YOUR BANK MAY STOP TEXTING YOU SIX-DIGIT CODES

Join us today, Saturday, Oct. 31, at 11 a.m. ET/8 a.m. PT. Register for free now at CyberGuyLive.com. Missed this morning’s live class? Register at CyberGuyLive.com to watch the replay.

When you sign in to a website, the service often creates a session that tells it you have already proved who you are. Your browser or app may keep that session active so you do not have to enter your password every few minutes. Criminals can sometimes steal the digital tokens or cookies associated with these sessions. If the service accepts the stolen information, an attacker may gain access without entering your password or completing another verification step.

How to protect yourself: Review the devices and active sessions connected to your accounts. Sign out of anything you don't recognize and check for suspicious login activity. We've previously explained how to check for unfamiliar devices and remove them from your Apple, Google and Microsoft accounts.

If you suspect unauthorized access, change your password using a trusted device and revoke other sessions when the service allows it. Remember that removing a device from an account list does not always terminate an active login session.

Your phone number is often connected to email, banking, payment and social media accounts. Criminals may try to convince a mobile carrier to transfer your number to a SIM card or eSIM they control. If the transfer succeeds, they may receive calls and text messages intended for you, including certain account verification codes. A sudden loss of cellular service can be an early warning sign, especially when there is no known local outage. Other signs include an unexpected carrier notification about a device change or a password reset message you did not request.

How to protect yourself: Ask your carrier about an account security PIN, number transfer lock and port-out protection. These protections vary by carrier. For sensitive accounts, use a passkey, security key or authenticator app when available. Unlike text verification codes, authenticator app codes generally do not depend on your phone number. If text messages are your only available second authentication method, keep them enabled. They still provide more protection than relying on a password alone.

ARE BANK TEXT CODES ENOUGH TO PROTECT YOU?

Multifactor authentication, or MFA, adds another layer of protection to your accounts. However, criminals sometimes target the person receiving the security request. One tactic is MFA fatigue, also called push bombing. An attacker who can trigger authentication requests repeatedly sends approval notifications, hoping you eventually tap "Approve" to make them stop. Criminals may also impersonate technical support or a financial institution and ask you to read aloud a one-time security code.

How to protect yourself: Never approve a login you did not initiate or share a verification code with someone who unexpectedly contacts you. If repeated prompts appear, deny them and check the account through its official website or app. Change your password if you suspect it has been compromised. When available, choose phishing-resistant authentication, such as a passkey or security key. App-based approvals that require number matching can also offer additional protection against accidental approvals.

An infostealer is malicious software designed to collect information from a device. Depending on its capabilities, it may steal browser-stored passwords, session cookies, payment information or other sensitive data. These programs can arrive through fake software updates, pirated applications, suspicious email attachments, malicious advertisements or compromised browser extensions. Some malware operates quietly, which means you may not immediately notice anything unusual.

How to protect yourself: Keep your operating system, browser and security software updated. Avoid downloading software from unfamiliar websites and review browser extensions regularly. If you suspect malware has compromised a device, use a separate, trusted device to secure important accounts. Run a security scan with strong antivirus software and remove suspicious software. For a serious infection, professional assistance or reinstalling the operating system may be necessary. Avoid signing back into sensitive accounts until you are confident the device is secure.

Some criminals do not need to steal your password or infect your device. Instead, they may trick you into giving a connected application permission to access your information. For example, a fake productivity tool might ask to read your email, access your contacts or manage files in your cloud storage. You may encounter a legitimate-looking permission screen asking you to approve those requests. If you grant access to a malicious app, it may be able to retrieve information through the permissions you approved. In certain cases, that access can continue even after you change your account password.

This technique is sometimes called OAuth consent phishing. In a September 2026 warning, the FBI explained that criminals can trick people into granting malicious applications access to their accounts. That access can remain active even after a password change unless the victim revokes the application's permissions.

How to protect yourself: Review the third-party applications connected to your Google, Microsoft and other important accounts. Look closely at what each application can access. Remove permissions for apps you no longer use or do not recognize. Be especially careful with applications requesting access to email, contacts, cloud files or account management features.

Passkeys can significantly reduce the risk of traditional password phishing. They use cryptographic credentials associated with your device, security key or password manager. Unlike a password that you type into a website, a properly implemented passkey is tied to the legitimate website or service. That makes it much harder for a fake login page to steal the credential. However, passkeys do not eliminate every security risk. Criminals may still target an already authenticated session, an infected device, a malicious connected application or an account recovery process.

How to protect yourself: Use passkeys when your important accounts support them. Protect your devices with a strong screen lock and keep recovery information current. If a service offers backup recovery codes, store them securely so you can regain access if your primary device is lost or damaged.

Changing a compromised password is important, but it may not automatically remove every form of unauthorized access. Some services revoke existing sessions after a password change, while others require you to sign out of devices separately.

A criminal might also have established another route into your account, such as an app-specific password, an unauthorized connected application or a new recovery method. Your email deserves particular attention. Someone with access to your inbox could create forwarding rules that quietly send copies of your messages elsewhere.

Review security settings for unfamiliar recovery addresses, connected devices, forwarding rules and app permissions. Remove anything you did not authorize. Also, check whether your password was reused elsewhere. If it was, replace those passwords with unique credentials. A password manager can make this easier without requiring you to memorize every login.

If you suspect an account takeover, act quickly. Start with the account that controls access to your other accounts, usually your primary email.

Here's where to focus:

A credit freeze is free and can help prevent criminals from opening new credit accounts in your name. You must contact all three major credit bureaus — Equifax, Experian and TransUnion — to freeze your reports at each bureau. If you believe someone has stolen your identity, visit IdentityTheft.gov for a personalized recovery plan from the Federal Trade Commission.

Strong account security is essential, but identity misuse can happen outside the original account. A criminal might use exposed personal information to apply for credit, take over a mobile account or attempt financial fraud without triggering a traditional password alert. That's where an identity theft protection service can provide another layer of monitoring.

These services can monitor certain financial accounts, credit activity and exposed personal information for signs of suspicious activity. Some also provide identity restoration specialists who can help you navigate the recovery process if your identity is stolen. Features vary by provider and plan, and no service can prevent every form of identity theft.

For additional peace of mind, consider a service that offers monitoring, timely alerts and recovery assistance. See my picks for the best identity theft protection services at Cyberguy.com to compare your options and find the right coverage for your needs.

Once a month, review active sessions for your main email and financial accounts. Remove devices you no longer use and check whether your recovery information or connected app permissions have changed. Pay attention to unexpected login alerts, changes to your mobile account and new financial activity. A short monthly security check can help you spot suspicious changes before they become a larger problem.

FAKE CHROME UPDATE SCAM COULD INFECT YOUR COMPUTER

For years, I've told people to use strong passwords and turn on two-factor authentication. I still stand by that advice. But what concerns me now is how criminals can get into accounts without ever knowing the password. Think about someone quietly reading your email through a connected app you forgot about or using a stolen login session to access information you've worked hard to protect. You might change your password and assume everything is fine, while that access remains open.

That's why I recommend checking which devices and apps have access to your most important accounts. Start with email and your mobile carrier, because losing control of either can create problems with your financial accounts. And while identity theft monitoring services can help alert you to certain suspicious activity, they work best alongside strong account security. A few minutes reviewing your settings today could save you a great deal of trouble later.

Have you ever received a login approval or password-reset request you didn't initiate, and did you take action or ignore it? Let us know by writing to us at Cyberguy.com

Elon Musk's Starlink could be your next cellphone carrier

Sat, 31 Oct 2026 06:20:57 -0400

Ever look at your cellphone bill and wonder why you're paying so much when you still can't get a decent signal? Maybe calls drop inside your house or your phone loses service during a road trip. It's frustrating, especially when the big wireless companies keep promising better coverage.

Now, Elon Musk wants to give you another option. His company, SpaceX, is reportedly pursuing access to at least 80,000 cell sites across the United States. The goal is to turn Starlink into a major wireless carrier that could compete directly with Verizon, AT&T and T-Mobile. If Musk pulls this off, the way you choose your cellphone service could change.

Join our CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

AMAZON LEO SATELLITE INTERNET TAKES ON STARLINK

Join us today, Saturday, Oct. 31, at 11 a.m. ET / 8 a.m. PT. Register for free now at CyberGuyLive.com. Missed this morning’s live class? Register at CyberGuyLive.com to watch the replay.

SpaceX is reportedly negotiating with major cellular infrastructure companies to secure access to at least 80,000 sites nationwide. One company reportedly involved is Crown Castle, which owns and operates roughly 40,000 cell towers across the country. During an Oct. 21 earnings call, Crown Castle CEO Chris Hillabrant was asked about potential leasing discussions with SpaceX and other satellite providers. His response was revealing. "You can assume that we're talking to all parties," he said, although he declined to discuss specific customers. That's a significant development.

Cell towers provide the infrastructure that keeps our phones connected across the country. Wireless companies typically lease space on these towers rather than build every structure themselves. That approach helps them expand coverage without taking on the full cost of owning the infrastructure.

For perspective, the Wireless Infrastructure Association counted about 158,500 purpose-built cell towers nationwide in 2025. SpaceX's reported target of 80,000 cell sites would represent a substantial expansion, although cell sites and physical towers are not the same thing. A single tower can support equipment from multiple wireless networks, so the two figures are not directly comparable. Still, the reported discussions remain preliminary. SpaceX has not publicly confirmed agreements covering those 80,000 sites.

Here's something you might be wondering. If Starlink already has satellites orbiting Earth, why does SpaceX need thousands of cell towers? The answer comes down to how wireless coverage works. Satellites can provide connectivity in remote areas where traditional cell towers are scarce. However, signals from space can struggle to reach phones inside buildings or in places with an obstructed view of the sky.

That's where ground-based cellular networks come in. Traditional towers can provide stronger, more consistent service in areas where satellite connections face limitations. By combining both technologies, SpaceX hopes to create a network that keeps people connected across more locations.

There's another interesting piece to the strategy. SpaceX has also discussed adding small cellular base stations to equipment installed at Starlink customers' homes and businesses. Those stations could help provide mobile coverage without requiring the company to rely entirely on traditional cell towers.

However, there's a catch. Starlink customers install their equipment where they need home internet. Those locations may not line up with where a nationwide cellphone network needs additional coverage. That's why access to established cellular infrastructure could prove so valuable.

FCC CHAIRMAN CARR SAYS SPECTRUM AUCTION WILL MAKE WIRELESS FASTER, CHEAPER WHILE RAISING BILLIONS FOR TREASURY

SpaceX has already made several investments that support its wireless ambitions. On October 8, investment firm Grain Management announced an agreement to sell its nationwide portfolio of 800 MHz wireless spectrum to SpaceX. The deal remains subject to Federal Communications Commission approval.

If you're unfamiliar with spectrum, think of it as the radio frequencies that carry wireless signals between your phone and a network. Different frequencies have different strengths. Lower-frequency signals generally travel farther and penetrate buildings more effectively than higher-frequency signals. That could help Starlink Mobile deliver coverage in places where satellite connections alone might struggle.

SpaceX also received FCC authorization in October to deploy a new constellation of up to 15,000 direct-to-device satellites. These satellites are designed to communicate with compatible phones and support a broader range of mobile services. However, that authorization doesn't mean all the satellites are already operating.

Together, those developments help explain why Musk is getting serious about the wireless business. SpaceX is assembling the pieces needed to connect phones through satellites and ground-based networks. During SpaceX's October earnings call, Musk said the company would expand its terrestrial networks to provide broader connectivity wherever SpaceX and Starlink are permitted to operate. He also said satellite launches and spectrum acquisitions would help Starlink Mobile become a major U.S. wireless carrier.

The possibility has already caught Wall Street's attention. Following reports of SpaceX's cell tower negotiations, shares of major wireless companies fell on October 23. Meanwhile, cellular infrastructure companies saw their shares rise as investors anticipated potential business from SpaceX. But entering the wireless market won't come cheap.

Analysts at TD Cowen reportedly estimated that building a nationwide terrestrial network could cost more than $80 billion. The process could take years, even for a company with SpaceX's financial resources. And SpaceX would face established competitors with decades of experience. Verizon, AT&T and T-Mobile already operate extensive networks. They also have millions of customers and established retail operations.

Interestingly, SpaceX already works with T-Mobile through its T-Satellite with Starlink service. That partnership allows compatible phones to connect to satellites in certain areas without traditional cellular coverage. So, Musk's company currently helps support a wireless provider it could eventually compete against. That's an unusual position, but it also gives SpaceX experience delivering satellite connectivity to everyday phones. If Starlink Mobile becomes a standalone carrier, customers could eventually have another nationwide option beyond today's three dominant providers.

If you're already wondering when you can switch, there's an important detail to keep in mind. SpaceX has not announced a confirmed launch date for a fully independent nationwide cellphone service. The company expects to begin deploying its next-generation Starlink Mobile satellites in 2027.

However, building a terrestrial cellular network presents a separate challenge. SpaceX still needs access to suitable tower locations and the equipment required to operate them. The company also faces additional regulatory requirements. Its nationwide spectrum agreement with Grain Management, for example, still needs FCC approval.

Meanwhile, expanding coverage across the country will take considerable time. Even with thousands of satellites overhead, SpaceX would need a carefully planned ground network to deliver a reliable alternative to existing carriers. For now, Starlink's existing satellite partnerships should not be confused with the proposed nationwide cellphone service.

If you've been frustrated with your cellphone bill or unreliable coverage, another major wireless provider could eventually give you more options. More competition could mean better wireless deals. Verizon, AT&T and T-Mobile may face pressure to improve their plans if SpaceX introduces an appealing alternative. However, Starlink Mobile has not announced pricing for a standalone nationwide service. There's no guarantee it will cost less than what you're paying today.

Coverage could be the bigger selling point. By combining satellites with traditional cell towers, SpaceX could potentially reach places where existing wireless networks struggle. That could be especially appealing if you live in a rural community or frequently travel through areas with weak signals. However, actual performance will depend on where SpaceX installs its equipment and how well its satellite connections work.

The real test will come when SpaceX reveals its pricing and coverage plans. Can Starlink offer better service in places where other carriers struggle? And will it give people a compelling reason to switch? Those answers will determine whether Musk's wireless ambitions actually benefit cellphone customers.

GOV JEFF LANDRY: SPACEX BETS ON LOUISIANA AS AMERICA’S NEXT FRONTIER TAKES OFF IN THE SOUTH

I've been covering wireless technology long enough to know that big promises don't always translate into better cellphone service. We've heard plenty about expanding coverage and improving connectivity. Yet there are still places where you can barely make a call. That's why I find SpaceX's plans interesting. Combining satellites with traditional cellular infrastructure could eventually give people more options, particularly in areas where the big carriers have struggled.

At the same time, I'm curious about the bigger picture. Musk already has an enormous satellite network, and now he reportedly wants to build a major wireless business on the ground. That could introduce some welcome competition. However, I'd like to know what the pricing will look like and whether Starlink can provide reliable coverage where people actually use their phones. If it can deliver on those promises, the established carriers may have a serious reason to worry. And frankly, a little more competition in the cellphone business wouldn't hurt.

If Elon Musk offered you cellphone service through Starlink, would you trust his company enough to leave Verizon, AT&T or T-Mobile? Or would you rather stick with the wireless provider you already know? Let us know by writing to us at Cyberguy.com

Unvetted foreign workers at AI firms raise national security alarms, advocates warn

Fri, 30 Oct 2026 15:04:49 -0400

Tech advocacy groups are sounding the alarm, warning that the rapid evolution of artificial intelligence and a lack of federal oversight for foreign nationals working at AI firms pose a major national security risk.

Amy Kremer, chair of Humans First, a group focused on establishing democratic oversight, safety protocols, and local control over artificial intelligence, said AI technology has virtually no federal guardrails compared to other tech sectors.

"This is a national security threat. These companies hold and have access to a lot of sensitive information," Kremer told Fox News Digital. "You don't have to steal an entire AI model to get information. You can just find out what they're working on, who their partners are, and who their adversaries are. That is not the kind of thing that we need getting out."

MAGA MOM'S DIRE WARNING OVER TECH GUARDRAILS AS TRUMP PUTS PEDAL TO THE METAL ON RACE WITH CHINA

"If America wants to lead the world on AI, and we want America to have this AI advantage, then we have to put national security at the top," she added.

Kremer's concerns come as AI continues to expand, even as many Americans and lawmakers remain wary of the fast-moving industry.

WATCH: AI SAFETY SCARE SPARKS CAP HILL FIGHT OVER GUARDRAILS: 'CHINA'S GOING TO EAT OUR LUNCH'

In early October, an engineer at OpenAI, one of the world's most prominent AI companies, was arrested after allegedly planting a recording device inside a conference room at the AI giant's San Francisco office.

Abdulrahman Alfozan, 35, a Saudi Arabian citizen, allegedly researched how to construct a recording device and where to place it inside OpenAI, eventually concealing a customized audio recorder behind a television in an executive conference room in late September, according to the Justice Department.

BEYOND KILLER ROBOTS: CHINA'S REAL AI THREAT TO AMERICA IS ALREADY HERE, EXPERTS WARN

Searches of his home and electronic devices uncovered similar components and photographs that appeared to show reconnaissance of other locations inside OpenAI, including another conference room used for sensitive meetings, federal prosecutors said.

Alfozan, who was a lawful permanent resident in the United States, was terminated by OpenAI following his arrest.

FBI OVERHAULS TECH BACKBONE TO COUNTER AI THREATS FROM FOREIGN ADVERSARIES, REDUCE RESPONSE TIMES, PATEL SAYS

In January, a former Google software engineer was convicted of stealing thousands of pages of the company's trade secrets related to AI to benefit China.

Even the AI firms themselves have expressed concerns about the technology. In September, OpenAI and Anthropic warned that their advanced systems could pose a direct threat to humanity. The CEOs of both firms stated that their AI models should be regulated and rigorously tested.

TRUMP'S AI RACE WITH CHINA COULD BECOME THE BIGGEST MISTAKE OF OUR TIME

Despite calls for greater controls, in his September speech to the United Nations General Assembly in New York, President Donald Trump rebuffed calls for international regulation.

"The United States … totally rejects any attempt to construct a globalist scheme to control the artificial intelligence being spoken of so much now," Trump told various heads of state and their delegations. "Yet the very same people who said we’ll all be dead in 12 years because of global warming ... these are the same people that are now saying that AI is going to kill us all, that robots are going to attack us, that everything is going to be a total disaster."

MORNING GLORY: SPARE US THE AI APOCALYPSE RHETORIC. LET CONGRESS DECIDE WHAT COMES NEXT

Among the other mounting concerns are rogue agents, autonomous or semi-autonomous AI programs whose behavior diverges from their design intent or safety constraints.

In the spring, Treasury Secretary Scott Bessent and Federal Reserve Chair Jerome Powell held emergency briefings with major Wall Street bank CEOs to warn about severe cybersecurity risks posed by Anthropic’s Claude Mythos Preview AI model.

AI COULD GO ROGUE. WASHINGTON NEEDS ANSWERS TO THESE FIVE QUESTIONS ASAP

In July, OpenAI revealed that rogue AI agents hacked into the systems of tech startup Hugging Face.

Some elected officials have called for increased AI regulation.

"There is now a growing alarm about the future of humanity and creating technology that human beings cannot control," Sen. Bernie Sanders, I-Vt., told reporters in September. "And I'm happy to tell you that I think there is a growing sense of urgency upon members of Congress that this has to be done."

That same month, Sen. Rand Paul, R-Ky., blocked a bill that would require artificial intelligence companies to have a kill switch for rogue AI.

"I think it would be crazy to get on the floor one day and regulate an entire industry," Paul told reporters at the time.

In addition to the AI firms themselves, critics of the technology have raised concerns about how it could be exploited by America's adversaries and bad actors.

TRUMP INTEL CHIEF WARNS AI FIRMS ON HACKS, SAYS NEW DEPARTMENT IS THE 'COP ON THE BEAT'

A model created by Chinese firm Z. AI carried out several complex cyberattacks in controlled simulations and repeatedly ignored safety instructions in separate tests, according to a report by AI security research firm Irregular, Reuters reported.

In addition, U.S. intelligence agencies raised concerns regarding contact between Alice Huang, an executive at Singapore-based Megaspeed, and NVIDIA chief executive Jensen Huang, The New York Times reported. Alice Huang, no relation to Jensen Huang, was deemed by American officials to be a Chinese intelligence asset, according to the report.

"Megaspeed has been no different than many other regional cloud customers. Jensen’s interactions with Ms. Huang are not unusual or unexpected," a NVIDIA spokesperson told Fox News Digital. "Meetings with customers are part of a CEO's job; Jensen talks with thousands of customer executives every year."

"Our regional cloud customers receive ordinary business information — not sensitive NVIDIA trade secrets — and zero information relevant to national security," the statement continued. "We're confident that if the U.S. government believes that any person is a threat to American industry, it would let us know."

Kremer is calling for an investigation into whether Jensen Huang's conduct warrants federal review.

"Jensen Huang has questioned whether it matters who gets to advanced AI first. It matters to America," she said. "He should be barred from the White House, and Nvidia’s government contracts should end until he is no longer affiliated with the company. America’s national security must come before corporate profits."

Fox News Digital's Alex Miller contributed to this report.

Your next shirt could have a built-in touchscreen

Fri, 30 Oct 2026 14:30:56 -0400

How often do you reach for your phone just to check something quickly? Maybe you're walking the dog or carrying groceries and don't feel like digging through your pocket. Now, scientists are working on a way to put a touchscreen directly into the clothes you wear. Yes, your sleeve could eventually become a screen you can tap with your finger.

Researchers at the National University of Singapore (NUS) have developed what they describe as the world's first touchscreen woven directly into a garment. Their prototype uses specialized electronic fibers to display images, play videos and respond to touch. Even more surprising, the technology survived 50 machine-washing cycles while maintaining nearly the same performance. The breakthrough, recently published in the journal Nature, could change how we interact with wearable technology.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

WEARABLE PATCH VIBRATES WHEN DANGER IS NEARBY

Here's how it works. Each fiber contains tiny light-emitting diodes, or LEDs, along with an electronic layer that senses touch. When someone presses the fabric, the sensing layer identifies the location and activates the corresponding pixels. This allows the garment to respond much like a traditional touchscreen. The system can also recognize multiple touches, allowing more than one area of the display to respond at the same time.

To build the prototype, researchers threaded 54 specialized fibers into the forearm of a sleeve. Each fiber contains 96 LEDs, creating a 96-by-54-pixel display measuring approximately 6.6 by 4.1 inches. The researchers also developed a manufacturing technique that connects more than 5,000 microchips through over 20,000 electrical connections. Using this process, they created electronic fibers roughly one millimeter thick and 10 meters long.

That engineering allows the fabric to bend with the wearer's movements while keeping its digital display functional. Each fiber also has its own control channel, so a problem with one fiber doesn't automatically shut down the others. It brings us closer to clothing that can interact directly with electronic devices. The research team, led by Assistant Professor Tural Khudiyev at NUS's College of Design and Engineering, developed the technology to bring digital displays and touch controls directly into fabric.

The prototype already handles several functions you would normally associate with a smartphone. For example, it can display a photo gallery and run a calculator. It can also work as a digital compass and display body temperature readings from a sensor positioned under the arm. Video playback is possible, too. The screen refreshes at 30 frames per second with 8-bit color depth, although that drops to 25 frames per second when playing synchronized audio. Researchers also integrated a microphone and speaker into the garment through additional electronic fibers.

The sleeve can receive images over Bluetooth and respond to voice commands. It can even adjust its brightness automatically based on surrounding light. The interface also rotates its content when the wearer changes orientation. However, the prototype has only demonstrated specific wireless functions, including receiving images over Bluetooth. Researchers have not shown it replacing a smartphone screen or displaying all your phone's notifications. Of course, the 96-by-54-pixel resolution means you won't be watching your favorite movie in stunning detail. Still, the ability to watch moving images on something you can fold and wear is pretty remarkable.

One of the biggest challenges with electronic clothing has always been durability. After all, clothes get stretched and tossed into washing machines. Nobody wants to worry about destroying an expensive touchscreen every time they do laundry. That's why the researchers put their electronic fibers through extensive testing. According to NUS, the display's brightness and touch response remained nearly unchanged after 50 detergent washes in a typical washing machine. Independent reporting indicates the researchers placed the fibers in a laundry bag and used gentle wash cycles. The technology also maintained its performance after 1,000 bending cycles around a five-millimeter radius.

Those results are encouraging, but they don't guarantee that a finished consumer shirt containing all its electronics could survive years of everyday laundry. The testing took place under specific research conditions. The fabric remained breathable, too. Researchers found that its breathability was comparable to familiar clothing materials, including cotton and polyester. The team also reported that the display stayed within established safety limits for skin contact. These findings bring the researchers closer to making interactive clothing practical. However, there's still more testing to do before this technology could become something you'd wear every day.

CAN WEARABLES DETECT HEART PROBLEMS EARLY? DOCTOR BREAKS DOWN REAL DATA

We've already seen manufacturers experiment with flexible screens. Motorola, for example, previously demonstrated a bendable phone display that wraps around your wrist. The NUS research takes a different approach by building electronic functions directly into the fibers of clothing. That opens the door to clothing that could eventually display information without requiring someone to carry another screen. A jacket sleeve might show navigation instructions while you're walking through an unfamiliar city. A workout shirt could potentially display information from connected fitness sensors while you're exercising.

The researchers believe the same technology could eventually support more sophisticated interactions. Future versions may combine integrated sensors with artificial intelligence to provide information based on the wearer's activities or surroundings. Another interesting possibility involves manufacturing. NUS says thinner versions of these electronic fibers could potentially work with standard industrial knitting and weaving equipment. If researchers can make that happen, the technology might eventually fit into familiar clothing designs rather than requiring entirely new types of garments. The team is already working toward higher-resolution displays and more advanced sensing capabilities. However, those improvements remain future research goals.

Healthcare could become one of the most interesting uses for this technology. The current prototype already demonstrates body temperature sensing, and the researchers see opportunities to integrate additional physiological measurements into electronic textiles. According to Assistant Professor Khudiyev, "Healthcare is one particularly promising application." A future garment could potentially collect information from built-in sensors and display the results directly on the fabric. That might make certain health measurements easier to access without opening an app or looking at another device.

For older adults or people managing ongoing health concerns, clothing with integrated monitoring might eventually provide another way to stay informed. However, the current sleeve demonstrates temperature sensing rather than comprehensive medical monitoring. More advanced health features would require further development and clinical validation. The research team also wants to integrate on-device AI, which could eventually help interpret sensor readings or provide personalized feedback. For now, those capabilities remain under development.

As impressive as this technology looks, several questions remain. The display's current resolution is extremely limited compared with today's phones and smartwatches. Researchers will also need to address manufacturing costs and maintenance before they can reach a wider market. Perhaps the biggest practical obstacle is power. The current prototype still requires connections to an external battery and separate control electronics. That means the components needed to operate the display have yet to become fully integrated into the garment. Researchers will need to find a more convenient way to power and control the screen before touchscreen clothing becomes practical for everyday use.

There's another question worth considering: privacy. If clothing eventually monitors physiological information and communicates wirelessly with other devices, people will want clear control over what gets collected and shared. That becomes especially important when wearable technology can gather information throughout the day. For now, NUS has announced no commercial launch date or consumer price for the touchscreen garment. The researchers are continuing to improve the system, with the goal of making textile-based displays more capable and practical.

YOUR PHONE MAY REVEAL DOCTOR, CHURCH AND PHARMACY VISITS

You won't find touchscreen shirts hanging in stores anytime soon. However, this research suggests that the next generation of wearable technology could look very different from today's smartwatches. Instead of buying another gadget to strap onto your wrist, you might eventually interact with digital information through clothing you're already wearing. That could be particularly useful when you're exercising or have your hands occupied.

The potential convenience is easy to understand. You might someday glance at your sleeve for directions or check a health reading without digging through your pocket. But that experience will depend on whether researchers can make the technology affordable, comfortable and easy to power. The ability to wash the electronic fibers also makes the concept more promising for everyday use. After all, even the smartest shirt needs to feel good enough to wear.

I'll admit, the idea of tapping my shirt sleeve instead of constantly reaching for my phone is pretty cool. I can see how handy that might be when I'm out walking or trying to follow directions. And the fact that these electronic fibers survived 50 trips through the washing machine? That's impressive. We've seen plenty of wearable technology that looks great in a lab but never quite makes sense in everyday life. This one has me curious because researchers are actually thinking about how people wear and care for their clothes. Still, there's a long way to go before I'd buy a touchscreen shirt. Those external batteries and cables need to disappear first. And if our clothing eventually starts collecting health information, I want to know who's getting that data and what they're doing with it. I also have to wonder whether we really need another screen competing for our attention. I love seeing technology push into unexpected places, but if I'm going to wear a touchscreen, it better give me a good reason to use it.

Would you wear a shirt with a built-in touchscreen if it meant checking your phone less often, or have we reached the point where technology is taking over too much of what we wear? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Fox News AI Newsletter: Don't want AI on your phone? What to do about it

Fri, 30 Oct 2026 14:17:54 -0400

IN TODAY’S NEWSLETTER:

- How to get rid of unwanted AI on your phone

- Microsoft offers voluntary buyouts to 60,000 employees as tech giant reshapes its workforce

- Anthropic discloses breaches, security-related training pause in IPO filing

OPTING OUT: You pull out your phone to look something up on Google. Maybe you're researching a purchase or trying to find a restaurant. You expect a list of websites. Instead, Google serves up a lengthy artificial intelligence-generated answer before you even get to the search results. Sound familiar? I like AI when it helps me get something done. But sometimes I just want to search the internet without an AI summary appearing every time.

TAKING A HIKE: Microsoft on Monday announced a new voluntary buyout program that will cover about 60,000 eligible employees who can choose to leave the company with financial support and other career planning resources.

IPO BOMBSHELL: Artificial intelligence giant Anthropic disclosed that four of its AI models gained unauthorized access to external computer systems during security testing, while concerns over protecting its technology delayed training of a next-generation model for more than a month, according to a regulatory filing Monday.

WINDOW CLOSING: Microsoft researchers said in a study that a new artificial intelligence tool that can diagnose patients step by step, as a doctor would, was more than twice as accurate as general physicians at solving complex medical cases.

OPINION: The current narrative would have you believe that higher education is a dying institution. Experts consistently claim that a four-year degree is no longer worth the investment, warning that artificial intelligence (AI) is on the verge of rendering human labor obsolete.

OPINION: A century ago, when universities wanted to mold students into highly "literate" graduates, they exposed them to the greatest works of literature, assigned analytical essays and held classroom debates.

VOTER BACKLASH: Texas voter Mason McCallister discusses the growing backlash against secretive data center developments in rural communities. He explains data centers aren't good for communities "long-term" and calls for greater transparency from developers and officials. He emphasizes the importance of "transparency" when building.

BOT TRAINING: A San Francisco startup reportedly posted a job offering $20 an hour to walk robot dogs through city streets as it works to train AI to better navigate the real world.

BYTE THE DUST: Google parent Alphabet lost approximately $500 billion in market value Thursday after its shares plunged nearly 13% after disappointing quarterly earnings, marking the second-largest single-day market value loss in stock market history.

OPINION: With the midterm elections approaching, data centers have become an increasingly popular political target. Politicians are raising alarms about their impact on communities, with some calling for construction moratoriums or outright bans. There's been plenty of fearmongering.

But the more Americans learn about data centers, and the more communities experience their benefits firsthand, the stronger the case for continued development becomes.

FOLLOW FOX NEWS ON SOCIAL MEDIA

Facebook

Instagram

YouTube

SIGN UP FOR OUR OTHER NEWSLETTERS

DOWNLOAD OUR APPS

WATCH FOX NEWS ONLINE

Fox News Go

STREAM FOX NATION

Fox Nation

Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.

AI-powered cyberattacks fuel 'Black October' fears

Fri, 30 Oct 2026 10:20:43 -0400

Startup founder Colin Parsons woke up to roughly 50 billing notifications he never expected. He reported that his OpenAI and Anthropic accounts had racked up $449 in charges he didn't recognize. It was an expensive surprise that highlights how quickly stolen credentials can become a financial headache.

His experience comes as hackers increasingly use artificial intelligence to automate attacks at speeds that leave security teams scrambling. Meanwhile, researchers have uncovered dangerous weaknesses in software that helps power millions of websites.

Some cybersecurity professionals are calling this turbulent period "Black October." The name may sound dramatic, but the developments behind it deserve attention. And while many attacks target large organizations, the consequences can eventually reach your personal accounts. Here's what's happening, how AI-powered cyberattacks are changing online security and what you can do to protect yourself.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

BILL GATES SOUNDS ALARM ON AI-POWERED CYBERATTACKS, WARNS OF 'NEGATIVE SURPRISES' WITHIN A YEAR

October 2026 has delivered a troubling wave of cybersecurity developments. Hackers have gained access to more powerful tools, while researchers have uncovered serious weaknesses in widely used software. Security professionals are reportedly struggling to keep pace with increasingly automated attacks. Some have started calling the current wave "Black October."

The term describes a series of cybersecurity emergencies rather than a single coordinated hacking campaign. The biggest concern is speed. Traditionally, hackers needed significant time and technical expertise to investigate potential targets. They also had to develop attack methods and analyze the information they obtained. Now, AI tools can automate portions of that work. Some can operate continuously and pursue multiple potential targets at once. As a result, companies may have less time to respond when criminals discover a way into their systems.

One of the clearest examples comes from Microsoft. On Oct. 21, Microsoft Threat Intelligence revealed that a China-state-aligned hacking group called Storm-0940 had used an AI-powered penetration testing framework called ARTEX. The open-source tool can automate security testing tasks, including investigating networks and identifying potential weaknesses. In the hands of criminals, those capabilities can accelerate attempts to gain unauthorized access.

According to Microsoft, the group used ARTEX to target hundreds of organizations across multiple industries. Several attacks resulted in unauthorized privileged access to cloud systems. In multiple cases, attackers reached that level of access in less than three hours. Although many attempts failed, the successful intrusions demonstrate how quickly AI-assisted attacks can unfold.

Between Oct. 10 and 14, Microsoft recorded more than 151,000 failed login attempts in one campaign targeting 327 accounts across eight organizations. At its peak on Oct. 11, attackers generated approximately 2,900 failed login attempts per minute. The technique, known as password spraying, involves trying passwords against multiple accounts to identify a working login.

Importantly, Microsoft did not observe successful logins during that specific campaign. However, it documented unauthorized access and suspicious activity in other environments associated with the same threat group. Microsoft also connected Storm-0940 to a compromise involving ConnectWise, a company that provides software used by IT service providers. Attackers exploited access associated with ConnectWise cloud applications to attempt entry into customer environments. Some then carried out further activity through Microsoft cloud services, including changes that could help them maintain access.

Microsoft cautioned that suspicious access does not automatically mean customer information was stolen. Nevertheless, the activity reveals how AI can help attackers move quickly once they obtain usable credentials.

The risks become more personal when you look at what happened to Colin Parsons. Parsons reportedly woke up to roughly 50 notifications about charges involving OpenAI and Anthropic. He reported $281 in unexpected OpenAI usage and another $168 involving Anthropic. Both credentials were associated with OpenCode, an AI coding platform he used.

On Oct. 17, OpenCode disclosed a security incident involving its Console service. The company said unauthorized access to a legacy system may have exposed third-party AI provider keys stored by some users. The company reportedly notified affected customers and advised them to revoke their credentials.

OpenCode said the incident affected approximately 1.4% of its Console users who had connected external AI providers. The disclosure concerned credentials stored in Console, rather than keys stored locally in OpenCode's desktop or command-line applications. Other users also reported unexpected charges, although the amounts have not been independently verified. OpenCode associated its incident with a large-scale AI model distillation attack, but it has not publicly established exactly how the reported unauthorized usage occurred.

The concern is straightforward. If someone obtains a working API key, they may be able to use a paid AI service and generate charges against the account owner's billing arrangement. For people who depend on AI tools for work, that can become expensive before they realize anything has happened.

WINDOWS MALWARE USES GROK AI TO HELP STAY HIDDEN, RESEARCHERS SAY

While hackers are becoming more capable, AI-assisted security research is also uncovering dangerous weaknesses in software that supports the internet. On Oct. 21, developers released emergency fixes for two critical vulnerabilities in PHP, a programming language widely used to operate websites.

The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, are collectively known as PHP2Shell. Under certain conditions, the flaws could allow attackers to execute malicious code on vulnerable servers without first signing in. Successful exploitation could expose sensitive information or give criminals control over affected systems.

The potential impact is enormous because PHP powers roughly 70% of websites whose server-side programming language is known. However, that does not mean 70% of websites were hacked. It also doesn't establish that attackers could successfully compromise every website using PHP. The vulnerabilities affect PHP installations handling web requests, but successfully exploiting them can require complex technical conditions.

The situation prompted warnings from U.S. cybersecurity authorities. On Oct. 23, the FBI issued a public alert urging organizations to patch affected systems immediately. The Cybersecurity and Infrastructure Security Agency also called for urgent updates. The PHP project released fixes in versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Website administrators running older unsupported versions need to obtain appropriate vendor-supported fixes or migrate to a supported release.

Meanwhile, several government organizations in Europe temporarily took websites offline as a precaution. However, the situation became clearer as researchers investigated. On Oct. 23, the Netherlands' National Cyber Security Centre said exploiting the vulnerabilities appeared more complicated than initially feared. The agency lowered its assessment of the likelihood of widespread exploitation.

Also on Oct. 23, PHP disclosed a separate vulnerability, CVE-2026-115560, involving an unusual combination of server settings and application code. The project recommended a temporary configuration change while it prepares a fix through its regular release process. Website owners should continue following official PHP security guidance rather than assuming the emergency has completely passed.

Cybersecurity firm CrowdStrike also reported seeing attempted attacks, but said it had not observed successful exploitation of PHP2Shell in its investigations at that point. Other security researchers, including Amazon Threat Intelligence, observed suspicious exploitation attempts beginning before the patches became publicly available. Those attempts remain important even without proof that they successfully compromised real systems.

However, new evidence emerged over the following days. On Oct. 24, security researcher Adel Karimi documented successful PHP2Shell exploitation against specially configured test servers, known as honeypots. The attacks launched 35 command shells across three honeypots. Although those findings did not establish how many real-world websites had been compromised, they demonstrated that attackers could successfully exploit the vulnerability under certain conditions.

Then, on Oct. 26, CISA added both PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its Known Exploited Vulnerabilities catalog. The designation confirms that federal authorities recognize evidence of active exploitation. It also reinforces the urgency of installing security updates, even though the full extent of attacks against real-world systems remains unclear.

There's another side to this story that deserves attention. Artificial intelligence helped researchers investigate the PHP vulnerabilities before the October emergency. According to the PHP Foundation, developers had identified early signs of one underlying problem during a security investigation in 2024. However, the team struggled to develop a reliable solution. Additional research in 2026 exposed the seriousness of the issue.

The foundation worked with researchers and used AI-assisted security tools, including technology from Anthropic and OpenAI, to examine PHP's code. Researchers from security companies Calif and Wiz also contributed important findings. The PHP Foundation says these reports helped clarify the vulnerabilities' potential impact and accelerated the work needed to release fixes.

AI can therefore help defenders identify dangerous weaknesses before criminals exploit them. The challenge is ensuring security teams can investigate the findings and distribute fixes quickly enough. That challenge is becoming more urgent.

You may be wondering how any of this affects you if you're simply checking email or shopping online. The concern starts with the companies holding your information. When hackers compromise a business, they may gain access to stored customer information. Depending on the systems involved, that could include email addresses or passwords. Financial details may also be exposed. Criminals can use stolen information to launch convincing scams or attempt to take over existing accounts.

Meanwhile, AI makes it easier to produce personalized phishing messages. Attackers can incorporate leaked information into emails that appear to come from a company you recognize. Some criminals also use AI-generated voices to impersonate people and pressure their targets into making payments.

However, a security vulnerability affecting a website doesn't automatically mean your personal information has been exposed. The actual risk depends on whether attackers successfully gained access and what information they obtained. That's why it helps to focus on the steps you can control.

HACKERS HIDE DANGEROUS FAKE AI DOWNLOADS BEHIND GOOGLE ADS

You can't personally fix security problems affecting large companies. However, you can strengthen your accounts and reduce the potential damage if criminals obtain your information. Here are seven precautions I recommend taking now.

Start with your primary email account. Criminals who gain access to it may be able to reset passwords for other services you use. Create a strong, unique password for every account. A reputable password manager can help you generate and store those passwords. Next, enable multifactor authentication wherever it's available. Passkeys and hardware security keys offer especially strong protection against phishing. Authenticator apps are another useful option. Avoid relying on passwords alone.

Your phone may already have tools that can identify passwords exposed in known data breaches. On an iPhone, open the Passwords app and review its Security section. Android users who save passwords through Google can review warnings in Google Password Manager. If a password has been exposed, change it directly through the company's official website or app. Also update any other accounts using that same password. Our article explains how to find compromised passwords on iPhone and Android. Remember, a compromised-password warning does not necessarily mean someone has accessed your account. However, it gives you a chance to replace a vulnerable login.

Enable transaction notifications through your bank and credit card providers. Also review recent sign-ins on your email accounts and other important services. Watch for unfamiliar devices or changes to your recovery information. If you spot unauthorized activity, contact the provider through its official website or app. Change affected credentials and revoke unfamiliar sessions where possible. Don't wait for several suspicious charges before investigating.

Many people connect third-party apps to their Google or Microsoft accounts without thinking about the permissions they're granting. Over time, those connections can accumulate. Some applications may retain access even after you've stopped using them. Open your account's security settings and review connected applications. Remove access you no longer need or recognize. However, if a service you use has announced a security incident, follow its specific recovery instructions. Simply disconnecting an app may not revoke credentials that attackers already obtained.

Strong antivirus software can help detect malicious downloads and block dangerous websites. However, antivirus protection cannot prevent every account takeover or stop a company from experiencing a data breach. That's why monitoring your financial information is also important. Consider placing a free credit freeze with Equifax, Experian and TransUnion to help prevent criminals from opening new credit accounts in your name. Keep in mind that a freeze won't protect accounts you already have. If you use AI services that require API keys, review your usage regularly. Revoke credentials that may have been exposed and set billing alerts or limits where the provider supports them. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

Data brokers collect and sell personal information, including phone numbers and home addresses. Criminals can use those details to make AI-generated scams more convincing. A personal data removal service can help remove your information from people-search sites and data broker databases, making it harder for scammers to find. However, it can't erase information from past breaches or prevent cyberattacks. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Enable automatic security updates on your phone and computer. Keep your browser current, too. Updates frequently fix vulnerabilities that criminals may try to exploit.

AI-generated phishing messages can look remarkably convincing. They may contain personal information that makes them appear legitimate. Be cautious if someone unexpectedly claims your account has been compromised or demands immediate payment. Instead of clicking a link, open the company's official app or visit its website directly. Never share a verification code with someone who contacts you unexpectedly. Criminals often create pressure because they want you to act before checking the details.

What concerns me most about this wave of AI-powered cyberattacks is the speed. Microsoft documented attackers gaining privileged access in less than three hours. That's a frighteningly short window for companies to react. At the same time, AI is helping security researchers uncover weaknesses before criminals exploit them. But here's what worries me. We trust companies with enormous amounts of personal information, yet we're often left dealing with the fallout when their security fails. I believe those companies need to be held more accountable. Until then, protecting our accounts and staying alert to suspicious activity remains our best defense.

If AI allows hackers to attack thousands of accounts in minutes, should companies face tougher penalties when they fail to protect our personal information? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Millions of students caught in California data breach

Thu, 29 Oct 2026 16:30:34 -0400

You send your child to school expecting teachers to protect their education. You probably don't think much about what happens to their personal information after they take a standardized test. But a massive data breach in California is raising some uncomfortable questions about who has access to student records and how safely that information is stored.

Hackers accessed and copied sensitive records belonging to millions of current and former California public school students. The stolen information includes home addresses, birth dates and even details about disabilities. And here's something families need to know. You could live thousands of miles from California today and still be caught up in this breach if you or your child previously attended a public school there.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register for free now at CyberGuyLive.com.

ORACLE HEALTH DATA BREACH EXPOSES NEARLY 20 MILLION PATIENTS

The breach involves Educational Testing Service (ETS), a nonprofit organization that works with the California Department of Education. ETS helps administer statewide student assessments and maintains information connected to those tests. According to state officials, someone gained unauthorized access to an ETS-operated secure file transfer site. Investigators determined that the attacker used a compromised login credential to enter the system. The intruder then copied files containing student information at various times between May 22 and Sept. 18, 2026.

ETS discovered the suspicious activity on Sept. 25. The company disabled the affected account and took the file transfer site offline. It also brought in outside cybersecurity specialists to investigate. The company says it has since built a replacement system with stronger security controls. So far, ETS reports finding no evidence that the stolen information has been made publicly available. However, investigators have confirmed that someone accessed and copied the records.

The California student data breach involved far more than test scores. Depending on the student, the compromised files may contain information that could help someone identify a child or learn personal details about their family circumstances.

The exposed records may include:

Some records also identified whether a student qualified for programs serving children experiencing homelessness or other educational needs. Fortunately, officials say the stolen files did not contain Social Security numbers, financial account details, driver's license numbers, passwords or parent and guardian personal information.

However, there is still plenty to be concerned about. Someone who knows a child's name, school and address could potentially use that information to create a convincing message that appears to come from a teacher or school administrator. Disability information also raises additional privacy concerns because those details are particularly personal.

This is where the story gets especially troubling. Although the breach involves California's public school system, the people whose records were stolen may now live anywhere in the United States. According to the California Department of Education, the compromised information includes records covering all students enrolled during the previous three school years. However, the affected population extends beyond those students.

The state also identifies a group of former students who left California public schools as far back as 2006 and whose transfers to another school were never confirmed with the department. That creates a situation many families may never have considered. Say your child attended elementary school in Los Angeles before your family relocated to Texas. Perhaps you graduated from a California public school years ago and now live in Florida. Your old student information could still be among the compromised records if it falls within the affected groups.

Former students who are now adults may also be eligible for the free identity-protection services being offered. Importantly, this does not mean every student attending school outside California has been affected. In a statement to CyberGuy, ETS confirmed that no other ETS customers were affected by the incident. The concern for families elsewhere comes from their past connection to California's public schools. California has roughly 5.7 million public school students, according to reporting on the breach. Since the compromised files span multiple school years, millions of people are potentially involved. Officials have not yet released a final count of unique affected individuals.

The California Department of Education and the State Board of Education are coordinating with cybersecurity specialists and other state agencies. The California Cybersecurity Integration Center is assisting with the technical investigation. Meanwhile, state officials are reviewing ETS's compliance with applicable data security requirements and its contractual obligations.

In its statement to CyberGuy, ETS said, "We have implemented additional safeguards, including enhanced monitoring, strengthened access controls, and further third-party review of our security practices." ETS says it continues monitoring for signs that the stolen information has surfaced publicly. For families, the unresolved question is what happens to the copied information next. Even without evidence of a public leak, sensitive student records in unauthorized hands create a privacy risk that deserves continued attention.

A SCAMMER HAS YOUR NAME, PHONE NUMBER AND ADDRESS. WHAT CAN THEY ACTUALLY DO?

ETS began notifying affected students and families on October 16, 2026. The state expects notifications to continue through early November. Letters and emails will explain the incident and identify the types of information involved. They will also include instructions for accessing complimentary identity-protection services. However, here's an important warning. Not receiving a notification does not necessarily mean your information is safe. Some former students may have outdated contact information on file.

Families who are concerned should visit the official California ETS incident webpage. It contains frequently asked questions and links to breach notifications available in 27 languages. You can also call the incident assistance line at 833-931-8488, Monday through Friday, from 6 a.m. to 6 p.m. Pacific Time.

ETS is offering affected current and former students 24 months of free identity theft protection. Parents or legal guardians can enroll eligible children under 18, while adults, including former students, can enroll themselves. The services are designed to help monitor for potential identity theft and provide assistance if someone misuses their personal information.

The enrollment deadline is March 19, 2027. Eligible minors who turn 18 before March 19, 2029 may also qualify for adult coverage using the activation code provided in their notification. Enrollment is free, and no credit card is required. Identity restoration assistance is also available to eligible individuals for 24 months from their notification date, even without enrolling in monitoring services. For complete eligibility details and enrollment instructions, visit the California Department of Education's official incident webpage at at cde.ca.gov/nr/in/ets-incident.asp.

Even without stolen passwords or financial account numbers, student records deserve serious attention. Here are practical steps I recommend taking if your family may be affected.

Scammers frequently use real data breaches as an excuse to send fraudulent emails. A message claiming to come from ETS or Experian could direct you to a fake enrollment website. Instead of clicking an unexpected link, open your browser and visit the official California Department of Education incident page. Follow the verified instructions from there.

Eligible families should take advantage of the 24 months of free identity-protection services being offered following this breach. Follow the enrollment instructions in your official notification and keep a copy for your records. No credit card is required.

For additional protection, consider an identity theft protection service which offers identity monitoring, alerts about suspicious activity and access to restoration specialists if identity theft occurs. Some services also offer paid family plans that can cover children, making it an option for parents concerned about protecting their family's personal information over the long term. Coverage and benefits vary by plan. See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.

One of the strongest steps you can take against certain forms of identity theft is placing a security freeze on a child's credit file. The Federal Trade Commission says parents and legal guardians can request a free credit freeze for children under 16. Teenagers ages 16 and 17 can request their own freezes. Contact Equifax, Experian and TransUnion separately. Each bureau has its own process for handling minors. A freeze can make it harder for criminals to open new credit accounts using a child's identity. However, it cannot prevent every form of fraud.

Pay closer attention to unexpected emails or text messages claiming to involve school records. A scammer with access to personal details could make a fraudulent communication seem unusually credible. For example, someone might claim that your child's testing account requires immediate verification. Before responding, contact the school using a phone number you already trust. Avoid sharing personal information through unexpected links or attachments. Consider using strong antivirus software on your family's devices. It can help detect malicious links, suspicious downloads and malware hidden in fake school notifications. While it cannot recover stolen student information, it adds another layer of protection against scammers who may try to exploit the breach. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

Scammers can use information found online to build a more detailed profile of you or your family. That's why I recommend considering a personal data removal service. These services can help remove personal information from data broker websites that collect and sell details such as names, addresses and phone numbers. While these services cannot retrieve information stolen in this breach, they can help reduce how much additional information is publicly available. If you're concerned about your child's information, check whether the service offers protection for minors before signing up. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Adults who may have been affected can review their credit reports for unfamiliar accounts or suspicious activity. Visit AnnualCreditReport.com to obtain free reports from the three major credit bureaus. Parents should also watch for unexpected bills or collection notices addressed to their children. Those can be warning signs that someone has misused a minor's identity. If you discover evidence of identity theft, report it through IdentityTheft.gov . The FTC provides a recovery plan to help you address fraudulent accounts and document the problem.

You can also contact your child's school district to better understand how it handles student records. Ask what information outside contractors receive and how long they retain it. Schools may have legal obligations to maintain certain records. Still, parents can ask about retention policies and security safeguards. This conversation is worthwhile regardless of where your family lives.

I've covered plenty of data breaches over the years, but this one bothers me because we're talking about children who had no choice about handing over their information. They went to school, took required tests and trusted the adults and organizations handling their records. Now, some of those details have ended up in the wrong hands. What I find especially troubling is how far back some of these records could go. Think about someone who left California years ago and has no reason to believe their old student information is still sitting on a testing company's system. That person could be living on the opposite side of the country and suddenly have to worry about a breach involving records from childhood. I appreciate that ETS is offering free identity protection, but I'd like to see schools and testing companies explain more clearly how long they keep sensitive student information and why. Parents deserve answers before a breach happens.

Should schools and outside testing companies be allowed to keep sensitive student records for years after a child leaves, or should families have more control over when that information gets deleted? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Apple confirms some iPhone Duo screen problems after launch

Thu, 29 Oct 2026 11:56:28 -0400

Apple's first foldable iPhone has barely reached customers, and some owners are already dealing with cracked screens. The iPhone Duo launched on Oct. 23 with a starting price of $1,999. Within hours, complaints began appearing online from people who said their new phones developed cracks along the folding display.

Even more concerning, several reports describe damage appearing in nearly the same location. Some owners say their phones made unusual noises before the screens failed. Others noticed bright white lines spreading across the display. Now Apple has acknowledged the issue and says affected customers can request replacements. However, the company has yet to explain exactly what's causing the failures.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register for free now at CyberGuyLive.com.

SAMSUNG GALAXY Z FOLD8 LINEUP ADDS THREE CHOICES

Apple spent years developing its first folding iPhone. The device opens to reveal a 7.6-inch display, giving people a much larger screen without carrying a separate tablet. When closed, it looks like a compact smartphone with a 5.4-inch outer display. The design generated enormous excitement when Apple introduced it in September. However, that excitement took an unexpected turn shortly after the first phones reached customers.

Multiple iPhone Duo owners have reported cracks developing along the center of the inner display. In several cases, a bright line of damaged pixels extended from the fold toward the right side of the screen. Some owners have shared photos of the damage on Reddit, along with accounts of how quickly their new phones failed.

One owner, u/leftyhyzer16, said the screen cracked before setup was complete, after opening and closing the phone only a few times. Another owner, u/Midnight_Slump, reported a failure within six hours and received a replacement from Apple. Reddit moderators also checked additional photos and Apple paperwork provided by the owner. They confirmed the damaged phone and its replacement were genuine. Meanwhile, u/chimchambam said the display failed after just three hours. That owner reported being turned away by an Apple Store before ultimately returning the phone through Verizon. All three owners described problems appearing after very little use. Their experiences don't tell us how widespread the issue is, but they help explain why these early screen failures are getting so much attention.

On Oct. 26, Apple acknowledged reports about the damaged displays. In a statement provided to news outlets, the company said: "We are aware of an issue impacting the inner display on a small number of iPhone Duo units." Apple has instructed affected owners to contact AppleCare for a replacement. That's encouraging news for anyone whose new phone has already failed, especially considering its $1,999 starting price.

However, Apple hasn't disclosed exactly how many devices are affected or identified what's causing the screens to crack. We also don't know whether the problem involves a manufacturing defect affecting certain phones or something in the overall design. We reached out to Apple for additional comment but did not receive a response before our deadline.

Here's what caught my attention. Several of the damaged screens appear to crack near the hinge, right where the phone folds. That's a pretty troubling place for something to go wrong on a $2,000 folding phone. So what's happening inside? The repair experts at iFixit took the iPhone Duo apart and used CT scans to get a closer look at its hinge. They spotted something that could help explain the damage. A small support bar may not move far enough out of the way when the phone folds. If the display presses against that bar, it could put enough pressure on the screen to cause a crack.

Now, I want to be clear. This is still a theory. iFixit hasn't confirmed that the support bar caused the reported damage, and Apple hasn't explained what's going wrong. But it does raise questions about how well the hinge and flexible screen work together, especially when people are already reporting similar cracks just days after buying the phone.

IOS 27 IS HERE: 10 IPHONE FEATURES YOU’LL WANT TO TRY NOW

Here's another detail that caught my attention. Although iFixit found that the iPhone Duo was more repairable than other foldable phones it had tested, replacing its inner display remains complicated. The company gave the device a provisional repairability score of 5 out of 10. More importantly, it reported that an out-of-warranty inner-screen repair costs $999. That's roughly half the starting price of the phone.

Fortunately, Apple says customers affected by this particular display issue should contact AppleCare for a replacement. An AppleCare+ subscription is not required to request help for the acknowledged defect. However, accidental damage and unrelated screen repairs may fall under different coverage terms. You can learn more in our guide to checking your Apple warranty and what it covers.

If you recently purchased an iPhone Duo, pay attention to how the hinge feels when you open and close the device. A sudden increase in resistance or an unfamiliar popping sound deserves attention. If you notice something unusual, avoid forcing the phone open or closed. Don't repeatedly fold it to see whether the problem happens again. If your screen develops cracks or bright lines, here are some steps worth taking.

Ask about replacement availability. Some affected customers have received immediate exchanges at Apple Stores. However, replacement inventory may vary. Contact Apple before making a special trip and confirm the next steps for your particular device.

The concerns go beyond cracked screens. My colleague Chris was excited to switch from his Samsung Galaxy Fold to Apple’s new iPhone Duo. But after trying it, he was so disappointed that he decided to return it to Best Buy and get an iPhone 18 Pro instead.

He found the interface buggy and cumbersome, missed having Face ID and felt the cameras fell short of his expectations. He also preferred the display quality of other phones. At nearly $2,000, he simply couldn’t justify keeping it, saying, "I think the craftsmanship is phenomenal. I love the heft and the solid nature of the device, but because I’m coming from a foldable, there were so many glaring missteps that Apple made along the way, and at first they were little, but little things add up to the point where you genuinely question whether this truly was ready for prime time."

Now, Chris’s phone didn’t crack. His complaints are about the overall experience. But when someone who already enjoys using a foldable phone decides Apple’s version isn’t worth keeping, that gets my attention. I still think the Duo has some impressive features, but between these early screen problems and Chris’s experience, I’d want to try one in person before spending that kind of money.

I've been looking forward to seeing what Apple could do with a foldable iPhone, and I still think the Duo is an impressive piece of technology. But I have to admit, these early screen failures would make me nervous about spending nearly $2,000 on one. I give Apple credit for acknowledging the problem quickly and offering replacements. That's the right response. What I want to know now is why these screens are failing and whether Apple can prevent the same thing from happening to replacement devices. Then there's my colleague Chris, who already knows his way around a Samsung foldable and still found Apple's version disappointing enough to return it. That tells me Apple has some convincing to do beyond fixing the screen issue. At this price, I want a phone that feels like an upgrade, not one that makes me question what I'm giving up. For now, I'd be inclined to wait rather than rush out and buy one.

If you spent nearly $2,000 on Apple's newest iPhone and the screen cracked within days, would a free replacement restore your confidence, or would you demand your money back? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Newsletter

50,000 airline miles stolen from a travel expert

Wed, 28 Oct 2026 14:30:26 -0400

If you're anything like me, you've probably spent years collecting airline miles, dreaming about the trip you'll eventually take. Maybe it's a business class seat to Europe or that vacation you've been putting off. You keep earning points and watching the balance grow. But what happens when you finally check your account and discover someone else has already spent them?

That's exactly what happened to Katy Nastro, a travel expert with Flighty, a flight-tracking app that provides real-time updates on delays, cancellations and gate changes. During our conversation on "The CyberGuy Report" podcast, Katy shared how more than 50,000 American Airlines miles vanished from her account. Someone had redeemed them for a flight without her permission.

What surprised me was that Katy knows the travel industry inside and out. Yet she still found herself dealing with a problem that could happen to anyone with a frequent flyer account. Her experience offers a warning, especially as holiday travel approaches.

9 WARNING SIGNS OF IDENTITY THEFT YOU SHOULD NEVER IGNORE

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, Oct. 31, at 11 AM ET/8 AM PT. Register free now at CyberGuyLive.com.

Katy had just landed in New York and was riding home in an Uber. Like many frequent travelers, she opened her American Airlines app to check how many miles she'd earned from her latest trip. Instead, she noticed a substantial drop in her balance. At first, she figured the app had made a mistake. She remembered redeeming about 10,000 miles recently, but the balance was off by roughly 50,000. So she refreshed the app. The missing miles were still missing. That's when she called American Airlines.

The airline told her that someone had redeemed the miles for a ticket in another person's name. Katy had been saving for a trip to Asia. Unfortunately, those miles were now associated with a flight she knew nothing about.

"I really had this just stomach drop moment," Katy told me.

She had spent years earning those rewards, including through long flights to Australia. Suddenly, someone else had benefited from all that travel.

"I naively never thought this could happen to me because I work in the industry," she admitted.

I found that particularly revealing. Katy had previously warned people about loyalty account theft. Even with that experience, she never expected to become a victim herself.

You might assume the airline could simply reverse an unauthorized redemption. After all, the ticket was booked in someone else's name. Unfortunately, Katy discovered that getting her miles back required additional work. American Airlines instructed her to submit a formal fraud complaint by email. She also had to file a police report and provide documentation before the airline would restore her miles.

"I had to have the police report filed with them before anything was credited," Katy explained.

She eventually recovered her miles, but the process didn't end there. Katy also had to create a new email address and establish a replacement American Airlines AAdvantage account. Thankfully, the airline transferred her existing status along with her restored rewards. What caught my attention was the police report requirement. Katy had to involve local law enforcement even though the theft happened entirely online. She understood why the airline might want official documentation, but she questioned whether the process needed to be so cumbersome.

There's another concern for travelers. Airline loyalty points generally don't carry the same protections as money stolen through an unauthorized credit card purchase. In fact, American Airlines' current AAdvantage terms say the airline has no general obligation to restore miles withdrawn without authorization.

The company may review requests submitted within three months of the unauthorized withdrawal, but reimbursement remains discretionary. That makes discovering suspicious activity quickly especially important. Also, keep in mind that each loyalty program has its own fraud procedures. A police report may be requested, but the requirement isn't universal.

I asked Katy something that had been bothering me. Who was actually flying around using her miles? She had no idea. The airline identified a redemption involving someone else's name, but Katy didn't know who was behind it or where the traveler was headed. Loyalty programs often allow members to book tickets for other people. Some also permit mileage transfers or gifts. Those legitimate features can create opportunities for criminals who gain unauthorized access to an account.

For example, someone who controls your account could redeem miles for a ticket under another person's name. Depending on the program, the points might also be transferred or exchanged for other rewards. However, Katy never learned exactly how someone accessed her account. During our conversation, she acknowledged that password reuse may have played a role.

"I think I fell into the trap of using the same password for everything," she said.

That's an easy habit to fall into. If criminals obtain a password from one compromised service, they may try using it to access other accounts. And here's something worth remembering. A loyalty balance may look like a collection of numbers on your screen, but those numbers can pay for expensive flights.

Katy shared another piece of advice that might surprise anyone who's been patiently saving miles for years. She believes travelers should think twice about holding on to their rewards indefinitely.

"I would highly suggest that you should not be waiting on those miles," she told me.

Her concern comes down to depreciation. Airlines can change their award pricing, which means a flight that once required 50,000 miles might eventually require considerably more. I compared holding on to miles to buying a new car and watching its value drop after driving off the lot. Katy agreed. In her view, people often wait too long for that perfect first-class redemption. She recommends considering redemptions within a year instead of endlessly saving for a future trip.

Of course, you still want to check whether an award flight offers reasonable value. Spending 80,000 miles on an inexpensive economy ticket could be a poor deal. However, if you need to travel during a busy holiday period, using miles for an economy seat may make sense.

Award tickets can also offer more flexibility than certain restrictive cash fares. Just check the airline's cancellation and redeposit rules before booking. We've shared more strategies in our article, Are airline miles still worth it?

And if you're looking to earn more rewards for your next trip, check out my picks for the best airline credit cards of 2026 at CyberGuy.com to see which programs might work best for you.

YOUR CREDIT CAN LOOK NORMAL WHILE SOMEONE STEALS YOUR IDENTITY

Watch out for fake airline alerts and customer service scams

During our conversation, I told Katy about something I've been seeing more frequently. I receive emails that look like legitimate airline notifications, claiming miles were redeemed from my account. Some are convincing enough that I've nearly clicked them myself. That's a particularly sneaky approach because many airlines send real notifications when members redeem rewards. Criminals can imitate those messages to create panic and lure people toward fake login pages.

Katy warned that scammers also create fake airline support accounts on social media. Someone looking for help with a delayed flight or missing miles might contact what appears to be an official account. The conversation can then move to a private message or even WhatsApp, where the criminal asks for personal information. Katy's warning was clear. Avoid sharing sensitive account information through social media conversations. If you receive a suspicious redemption notice, open the airline's official app yourself. Check your account activity directly rather than following links in the message.

Before your next trip, take a few minutes to secure the loyalty accounts you've spent years building. These steps can help you spot unauthorized activity sooner and make your accounts harder to compromise.

Open your airline and hotel loyalty apps at least once a month. Review recent redemptions and compare your current balance with what you expected. Katy said she sometimes went several months without checking her account. That made it harder to know when the unauthorized redemption occurred. Setting a recurring calendar reminder can help you catch unusual activity sooner. Also, enable account activity and redemption alerts if your loyalty program offers them. That way, you may find out about suspicious transactions before you notice missing miles.

Never reuse your airline password on another website. A password manager can generate strong, unique passwords and store them securely. Also, protect the email account connected to your loyalty program. Someone who gains access to that inbox may be able to reset your rewards password.

Look for two-factor authentication (2FA), passkeys or other login verification options offered by your airline or hotel program. These protections vary by provider, so check your account's security settings. Also, review any unfamiliar changes to your contact information and remove devices or sessions you no longer recognize when the service allows it.

If an email or text claims someone used your points, resist clicking its links. Instead, open the official airline app or type the website address into your browser. Legitimate-looking logos and familiar formatting offer no guarantee that a message is genuine.

Also, be skeptical of anyone claiming to represent airline support through an unsolicited social media message. Use strong antivirus software to help detect malicious links, block dangerous websites and protect against malware designed to steal your passwords. While antivirus software can't stop every phishing scam, it provides an additional layer of protection if you accidentally click something suspicious.

Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

FAKE BOOKING.COM TRAVEL CREDIT SCAM TARGETS TRAVELERS

Contact your loyalty program through its verified customer service channels as soon as you notice an unauthorized redemption. Ask the airline to secure your account and investigate the transaction. Save your account statements and any correspondence. If the airline requests a police report, follow its instructions and keep a copy. Don't delay because some programs impose deadlines on fraud claims.

Katy suggested using a dedicated email address for loyalty programs. That can make account notifications easier to track and reduce exposure if an unrelated service suffers a breach. Another option is to use an email alias, which helps keep your primary address private. It lets you create unlimited email aliases, helping you organize travel accounts while reducing spam and unwanted exposure. You can also follow my guide on how to create and use email aliases.

For recommendations on private and secure email providers that offer alias addresses, visit CyberGuy.com.

Your personal information may already be circulating on data broker websites, making it easier for scammers to target you with convincing airline phishing emails or impersonation attempts. Consider using a personal data removal service. It helps remove your personal information from hundreds of data broker and people search sites and continues submitting removal requests when your details reappear. While no service can erase everything or directly prevent someone from stealing your airline miles, reducing your online exposure can make it harder for scammers to gather personal details and tailor their attacks.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Be careful about sharing photos of boarding passes, luggage tags or travel confirmations online. These documents can contain booking reference numbers, frequent flyer details or barcodes that expose information about your trip. Criminals may use those details to access reservations or impersonate travelers. Avoid posting travel documents on social media, and securely dispose of printed boarding passes after your trip.

You can use an AI assistant like ChatGPT with scheduled tasks to monitor airline loyalty programs for changes that could reduce the value of your miles. Set up a daily alert to check for announced changes to redemption rates, award pricing or loyalty program rules. You can even ask it to track news about American Airlines AAdvantage or other programs you use.

That way, you may hear about upcoming changes while there's still time to redeem your miles at current rates. Keep in mind that airlines don't always announce devaluations in advance, so AI can't predict every change. For step-by-step guidance, check out my article on 8 seriously annoying tasks you can hand off to an AI agent.

I keep thinking about Katy sitting in the back of that Uber, casually checking her mileage balance and discovering that 50,000 hard-earned miles had disappeared. I've collected airline miles for years, and I know how much planning goes into using them. The thought of some stranger enjoying a trip on my points would make me furious. What concerns me even more is that Katy works in the travel industry and still couldn't explain exactly how someone got into her account.

That tells me we should give our loyalty accounts the same attention we give our financial accounts. Check your balances, use unique passwords and pay attention to unusual activity. And while I love saving miles for a great trip, Katy makes a convincing argument for enjoying those rewards while they still offer good value.

I encourage you to listen to The CyberGuy Report podcast at cyberguy.com/podcast/ to hear my full conversation with Katy Nastro. Her experience might change how you think about the miles you've been collecting. And if you want more ways to make those rewards go further, visit CyberGuyLive.com to sign up for my free upcoming webinar: 5 Ways to Travel Smarter and Save Money on Oct. 31 at 11 AM ET/8 AM PT.

If someone stole 50,000 airline miles from your account, do you think the airline should be legally required to give them back, or should that responsibility fall on you? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

How to get rid of unwanted AI on your phone

Wed, 28 Oct 2026 09:12:06 -0400

You pull out your phone to look something up on Google. Maybe you're researching a purchase or trying to find a restaurant. You expect a list of websites. Instead, Google serves up a lengthy artificial intelligence-generated answer before you even get to the search results. Sound familiar? I like AI when it helps me get something done. But sometimes I just want to search the internet without an AI summary appearing every time.

Fortunately, there are ways around it. One involves adding a few characters to your search. Another uses a built-in Google filter. And if you've had enough of Siri suggestions on your iPhone or AI features popping up on your Samsung Galaxy or Google Pixel, there are settings worth changing there, too.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

HOW TO SEARCH ANYTHING ON IPHONE, GALAXY AND PIXEL

Google calls those automatically generated summaries AI Overviews. They appear above traditional search results when Google's systems decide an AI-generated answer might be helpful. Sometimes they save time. However, they can also get in the way when you'd rather read information directly from a website. Unfortunately, Google confirms that AI Overviews cannot be permanently turned off through a standard Search setting. However, you have a few ways to avoid them.

This trick takes only seconds and is worth trying on an iPhone, iPad, Samsung Galaxy or Google Pixel.

Here's how.

For example, instead of searching for: best walking shoes

Try: best walking shoes -AI

Adding -AI can keep an AI Overview from appearing. However, this is an unofficial workaround, and Google doesn't guarantee that it will work every time. There's another catch. Google uses the minus sign to exclude terms from search results. Adding -AI could also remove some relevant pages containing that term. If the trick doesn't work, Google's next option is more dependable.

Google has a built-in filter that shows traditional web links without AI Overviews.

Here's how to find it.

Google will display text-based links without its AI Overview. The downside is that you generally need to select the Web filter again when starting another search. Still, it's a useful way to get straight to websites without an AI-generated answer taking up the top of the screen.

One important note: Turning off an AI Overviews experiment in Google Search Labs won't necessarily remove AI Overviews from regular Google searches.

If you're really tired of AI showing up in searches, there's another option worth knowing about. DuckDuckGo offers a dedicated search experience called DuckDuckGo No-AI. You can access it at noai.duckduckgo.com. According to DuckDuckGo, this version removes its AI-assisted answers and AI feature suggestions. It also filters AI-generated images from image searches. The company acknowledges that AI-image filtering may not catch everything. You can use the website directly without changing your phone's default search engine.

If you want to use a different search engine more regularly, Apple makes switching easy.

These instructions apply to iOS 27 and iPadOS 27.

Keep in mind that choosing regular DuckDuckGo as your default doesn't automatically activate its separate No-AI experience. You can visit the No-AI website whenever you want to use it.

MALICIOUS BROWSER EXTENSIONS CAN HIJACK AI ASSISTANTS

Now let's talk about another feature that can get annoying. Ever swipe down on your iPhone's Home Screen to search for something and immediately see a collection of suggested apps? Those suggestions come from Siri, which can recommend apps based on your activity. Maybe you appreciate the shortcuts. Or maybe you would rather see a clean search screen until you start typing. Apple lets you turn those suggestions off.

Your iPhone should stop showing those suggested apps before you begin searching. While you're there, you can also disable Show in App Library if you don't want suggestions appearing there. You can turn off Show When Sharing if you'd rather not see suggested contacts or other Siri recommendations when sharing content. These controls change where Siri suggestions appear. They don't disable Siri itself.

Apple's more conversational Siri AI is available in beta on supported iPhones running iOS 27.

If you enabled it and would rather return to the previous Siri experience, Apple provides that option.

If you don't want to use Siri at all, leave it turned off.

Important: Siri AI requires an Apple Intelligence-compatible iPhone, including the iPhone 15 Pro, iPhone 15 Pro Max and iPhone 16 models or later. Availability also depends on language and region. Older iPhones won't have the same Siri AI options.

There's another AI feature that may bother some iPhone owners. Apple Intelligence can summarize notifications, messages and emails. While that may sound convenient, AI summaries can leave out details or misunderstand what someone wrote. If you'd rather read the original text, you can disable those features.

Turn off AI notification summaries

Disable AI summaries in Messages

You can also open Settings, tap Apps, select Mail and turn off Summarize Message Previews.

These options are available on compatible devices running iOS 27. Disabling them won't affect your ability to receive regular messages or notifications.

Samsung has been adding AI tools to its Galaxy phones, including features that help with calls or photos. Some can be useful. However, you may have no interest in having AI analyze information or suggest actions throughout your day. Fortunately, Samsung provides individual controls for many Galaxy AI features.

Samsung notes that some AI features are built into the operating system and cannot be disabled. Also, available controls vary depending on your Galaxy model and software version. Samsung recommends restarting your device after disabling Galaxy AI features to ensure the changes take effect.

Samsung's Now brief can show personalized information about your day, including upcoming events and other recommendations. If you don't want those briefings appearing on your Lock screen, try this.

You can also open Settings, tap Galaxy AI and select Now brief to adjust the information included in your briefings. On supported devices, you can disable Show Now brief while phone is locked. Keep in mind that removing Now brief from the Lock screen doesn't necessarily remove the feature from your Galaxy phone.

If you're concerned about information being sent to the cloud for AI processing, Samsung offers another option.

This tells supported Samsung Galaxy AI features to process data locally instead of using cloud processing. However, some AI features require an internet connection and may become unavailable. Also, this control applies to Samsung's supported Galaxy AI features. It doesn't prevent every app on your phone from connecting to its own cloud services.

Circle to Search lets you search for something displayed on your screen. However, you might accidentally activate it while navigating your phone.

You can switch it off.

Google Pixel phones have their own AI features designed to anticipate what you might need. Depending on your device, these can include Magic Cue or Google's newer Proactive Assistance. Both can provide suggestions using information from supported apps, depending on your settings and permissions. However, you may prefer to keep those suggestions out of your conversations.

On supported Pixel 10 models, Magic Cue can display helpful information while you're using your phone. For example, it might surface flight details during a conversation.

Here's how to adjust it.

Magic Cue is available only on supported Pixel models and in supported regions.

Google introduced a newer feature called Proactive Assistance on Pixel 11 devices in supported markets, including the United States. When enabled, it can use screen information and notifications to provide suggestions. It may also use information from connected apps and location data.

If you'd rather skip those suggestions, Google gives you a direct switch.

You can also tap Connected apps to decide which apps the feature can access. Proactive Assistance is opt-in, so you won't necessarily see suggestions unless you've enabled it.

Circle to Search is also available on supported Pixel phones. If you find yourself activating it accidentally, you can turn it off.

Google also lists the feature under System on supported Pixel devices.

On supported Pixel phones, the Pixel Screenshots app can generate summaries and help you search through saved screenshots. If you don't want those AI features processing screenshot content, Google provides an option to disable them.

If you also want to delete previously generated AI information, select Delete all AI summaries and metadata. That last option removes the generated summaries and metadata associated with the feature. Only select it if you're comfortable deleting that information.

ANTI-SCAM SETTINGS ON IPHONE, PIXEL AND GALAXY YOU SHOULD CHECK

Finally, there's Gemini, Google's AI assistant. On many Android phones, Gemini can launch when you say "Hey Google" or press and hold the power button. If you're tired of activating it accidentally, there are several ways to stop that behavior.

Turn off Hey Google in Gemini

This prevents Gemini from responding to the wake phrase. You can still open the app manually if you want to use it.

On Google Pixel and other supported Android phones:

On Samsung Galaxy phones, search Settings for Side button to find the equivalent shortcut control.

If you'd rather stop using Gemini as your phone's main assistant, Google provides another option.

You can also switch back to Google Assistant through the Gemini app on supported devices. Removing Gemini as the default assistant won't necessarily uninstall the Gemini app or erase any previous Gemini activity.

There isn't one universal switch that removes every AI feature from an iPhone or Android device. Some functions are built directly into the software. Others come from individual apps or online services.

However, you can make a noticeable difference by disabling the features you never use. And remember, turning off an AI assistant won't automatically remove AI Overviews from Google Search. Those require separate controls. If you're concerned about how AI services collect information, we've also covered how to opt out of AI data collection in popular apps.

I use AI regularly, and I appreciate what it can do. But I also understand why people get annoyed when it starts showing up everywhere. Sometimes I want to Google something and read what an actual person wrote. I don't need an AI summary making that decision for me. That's why I like having Google's Web filter available. And discovering DuckDuckGo's No-AI search option gives people another choice. I also think it's worth taking a few minutes to look at the AI settings on your phone. You may discover features running that you never use. Turning them off can make your phone feel more like your own again. I want AI available when I need it, but I don't want companies deciding that I need it all the time.

Are Apple, Google and Samsung giving us useful AI features, or are they pushing the technology so aggressively that we're losing control of our own phones? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Is that campaign merch store official? Here's how to tell

Tue, 27 Oct 2026 15:00:11 -0400

You're scrolling online when you spot a campaign T-shirt supporting your favorite candidate. The website looks professional, the merchandise looks legitimate and the address includes the candidate's name. You might even see the word "official" at the top of the page. So, you assume your purchase supports the campaign. But what if the candidate has nothing to do with that store?

With the Nov. 3 midterm elections approaching, new research shared with CyberGuy reveals a troubling discovery in Texas. Researchers at cybersecurity company Attaxion identified 626 unofficial election-related domains, including 30 online merchandise stores presenting themselves as official campaign shops.

Attaxion says it could not verify an official campaign connection for any of the 30 stores. Even more surprising, researchers found that nearly all appeared to come from just two sellers offering merchandise for competing Republicans and Democrats. The findings arrive as the FBI warns about election-related scams involving fake merchandise, fraudulent donations and websites designed to steal personal information. And while this investigation focuses on Texas, the warning signs apply to elections and online shopping across the country.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

DON'T LET FAKE ELECTION WEBSITES FOOL YOU BEFORE 2026 MIDTERMS

Texas voters are already heading to the polls. Early voting for the Nov. 3 general election began Oct. 19 and continues through Oct. 30. Meanwhile, researchers are finding that candidates' names have become valuable online real estate. Attaxion, a cybersecurity company that helps organizations identify vulnerable websites and other online threats, examined domains connected to the state's U.S. Senate race, governor's race and six competitive congressional districts. The investigation also included websites resembling election offices and voter information pages.

Researchers initially identified 704 domains. After excluding 25 official sites and another 53 domains connected to campaigns or election offices, 626 unofficial addresses remained. Of those, 553 had DNS records when checked. That means the domains had some internet configuration, although it does not establish that each hosted an active website. The Senate race accounted for 323 unofficial domains. Another 75 referenced House candidates, while 70 used gubernatorial candidates' names. The remaining domains referenced election offices or general election-related terms.

Importantly, an unofficial domain is not automatically a scam. Some may belong to supporters, critics or independent businesses. Others may be registered without hosting an active website. However, the researchers identified a smaller group that deserves closer attention.

Of the 626 unofficial domains, Attaxion identified 30 online stores that presented themselves as official merchandise sellers for Texas political candidates. The stores promoted products associated with Republican U.S. Senate candidate Ken Paxton and Democratic opponent James Talarico. Others used the names of Republican Gov. Greg Abbott and his Democratic challenger, Gina Hinojosa.

Researchers also identified stores featuring congressional candidates. Alexandre François, research contributor at Attaxion, worked on the investigation and shared the findings with CyberGuy. "Two things stood out. The first is how little the politics seem to matter to the people selling," François told CyberGuy.

He explained that nearly all the stores appeared to come from the same two sellers, despite promoting candidates from opposing parties. In Texas' 23rd Congressional District, researchers found stores supporting the Republican and Democratic nominees that appeared to share an operator. That raises an obvious question. If a business is selling merchandise for competing candidates, is it really connected to either campaign? According to the investigation, none of the 30 stores could be verified as campaign-operated.

Attaxion traced most of the merchandise websites to two seller identities: ShirtGoat and madetoprints. ShirtGoat appeared to operate 12 stores and was likely connected to two more. Meanwhile, madetoprints was associated with another 15. The researchers found that both sellers used similar website templates while swapping out candidates' names and merchandise. Some sites also borrowed slogans that appeared on official campaign products.

For example, when Talarico's campaign responded to a political nickname with an "I'm a Talafreako" shirt, similar products appeared in three unofficial stores. "It suggests that the motive is most likely commercial rather than political," François explained. "Someone with a political agenda would be unlikely to sell merchandise for both sides of the same race."

Researchers also noticed that several domains were registered on the same day. Some stores reused identical policies with only the candidate's name changed. A few terms-of-service pages even contained apparent chatbot responses left behind during the creation process. That suggests some operators may be creating these stores quickly and repeatedly. However, the researchers could not establish the legal identities of the people controlling all the websites.

One of the biggest challenges is how convincing the stores can appear. A website might feature professional product photos and familiar campaign slogans. It may also offer a functional shopping cart with a normal-looking checkout. Those features can create confidence before someone even thinks to check who operates the business. François says that assumption can be risky. "The first thing to know is that appearance is no longer a reliable guide. With AI, anyone can quickly build a polished store with well-written text, so the old signs of poor design and clumsy language rarely apply, and neither does the word ‘official.’"

Attaxion found that none of the 30 unofficial stores included the campaign-related "Paid for by" disclosure the researchers expected to see. However, independent businesses selling political merchandise are not automatically required to display campaign finance disclaimers. The missing disclosure is one warning sign, not proof of fraud or a legal violation. The stores also failed to provide a verifiable company identity and business address. Some listed a seller name or customer service email address. However, those details did not establish an official relationship with a candidate.

To investigate the websites, Attaxion compared them against verified campaign information from the Federal Election Commission and Texas Ethics Commission. Researchers also examined registration records and revisited the stores on Oct. 20 to check their contact pages, policies and checkout processes. None of those checks established a connection to the campaigns.

119,000 FAKE SHOPS COULD STEAL YOUR CREDIT CARD DETAILS

The researchers uncovered another unusual example involving an expired election website. The domain elpasoelections.com sounds like it could belong to an election office in El Paso, Texas. However, it previously served El Paso County in Colorado. That county used the address for election information for years before allowing its registration to lapse in February 2026. A domain buyer acquired the address in May.

When researchers examined the website, it displayed an online casino promoting itself to Australian users. The investigation identified a new registrant organization associated with Hong Kong, although that record does not independently establish who operates the casino.

François highlighted the discovery as an example of how a once-legitimate web address can change hands. "It is a good reminder that a familiar-looking address does not tell you who holds it today."

The example extends well beyond politics. An expired website previously used by a government office, nonprofit or business can eventually lead somewhere completely unrelated. For accurate Texas election information, the state's official website is VoteTexas.gov. For voting information elsewhere in the country, you can start with Vote.gov.

The Texas findings follow an Oct. 15 warning from the FBI's Internet Crime Complaint Center. The agency warned that criminals exploit political campaigns to target people across the United States. Some scammers impersonate candidates to solicit fraudulent contributions. Others advertise political merchandise that customers never receive.

The FBI also warned about fraudulent voter-registration messages that direct people to websites designed to collect personal information. Artificial intelligence can make these schemes harder to recognize. Criminals can generate convincing written messages and realistic voices that appear to come from legitimate organizations. However, there's an important limitation to the Texas investigation.

"At this stage we do not know. We did not place test orders, and our research does not include payment records or customer complaints, so we have no evidence either way," François told CyberGuy.

The researchers also did not investigate whether the operators promoted their stores through Google ads, social media or political text messages. They did examine observed DNS traffic and found that some unofficial domains had received lookups. However, those records cannot establish how someone discovered a website or whether they completed a purchase. The findings raise concerns about misleading campaign connections without proving that all the stores committed fraud.

These precautions apply to political merchandise stores and fundraising pages nationwide. They can also help you recognize ordinary shopping scams and websites that impersonate trusted organizations.

Before buying political merchandise or making a donation, find the candidate's established campaign website. Look for the merchandise or contribution page linked directly from that website. For federal candidates, you can also use the Federal Election Commission's database to verify campaign committees and find their reported information. If you're shopping from an unfamiliar retailer, visit its official website independently rather than following a promotional link. This approach also works when someone claims to represent a bank, charity or government agency.

Scammers and unauthorized sellers can register web addresses that closely resemble legitimate ones. Look for misspellings or added words that make an unfamiliar address appear trustworthy. Don't assume a website belongs to an organization simply because the address contains its name or the word "official." You can also use a WHOIS lookup to investigate when a domain was registered. A newly created website deserves closer attention, especially when it claims to represent an established organization. However, domain age alone cannot establish whether a website is legitimate. And remember, HTTPS encryption protects information while it travels between your browser and a website. It does not prove that the site's operator is trustworthy.

WHY VERIFIED SOCIAL MEDIA ACCOUNTS CAN STILL LEAD YOU INTO A SCAM

Before contributing to a political campaign, confirm the organization receiving the payment. Federal political committee websites generally must include a disclaimer identifying who paid for the communication. When applicable, the disclosure also identifies the campaign or committee that authorized it. Look for a "Paid for by" statement and compare the information with official campaign records. Many political campaigns use fundraising platforms such as ActBlue or WinRed. Others use different payment systems. The key is reaching the contribution page through the campaign's verified website. Independent businesses may legally sell political merchandise without supporting a campaign. However, they should not mislead you about who receives your money. A missing or suspicious disclosure deserves attention, but a disclaimer alone does not guarantee legitimacy.

Take a closer look at any online store you've never used before. Search for the company name along with terms such as "reviews," "complaints" or "scam." Read its return and refund policies. Look for a legitimate way to reach customer support. The Better Business Bureau at bbb.org/ can be another place to check for complaints, although the absence of complaints does not prove a company is trustworthy. If you cannot establish who operates a website, consider buying elsewhere.

A scammer may send a message claiming that your voter registration needs attention. Another might pressure you to contribute immediately or purchase merchandise before an offer disappears. The same tactics appear in fake bank alerts and fraudulent delivery notifications. Avoid clicking payment or account-verification links in unsolicited messages. Instead, open the organization's established website yourself. For election-related messages, check information through Vote.gov or your state election office. Be especially cautious about messages asking for passwords, Social Security numbers or payment details.

When shopping online, paying with a credit card generally gives you stronger protections if an order never arrives or a charge is incorrect. Avoid unfamiliar sellers that insist on payment through gift cards, cryptocurrency or wire transfers. Those methods can make recovering your money difficult. Keep your purchase confirmation and review your statements after paying. Also, check whether a political contribution involves recurring payments before submitting it. The FTC's online shopping guide explains how to research sellers and protect yourself when making purchases.

A suspicious shopping site may ask you to create an account before checking out. Never reuse a password from your email, banking or other important accounts. Use a password manager to create unique passwords and enable two-factor authentication (2FA) when available. Strong antivirus software can also help detect malicious downloads and block some dangerous websites. However, it cannot verify whether a political merchandise store is actually affiliated with a campaign. Be selective about the information you share, especially when you cannot verify who operates the website. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

If you've purchased merchandise or sent money through a questionable website, act promptly when something appears wrong.

If you entered sensitive identity information into a suspicious website, visit IdentityTheft.gov for personalized recovery guidance.

What stands out to me about this investigation is that the people behind these stores appear willing to sell merchandise for candidates on both sides of the same race. That raises serious questions about what shoppers are being led to believe. I have no problem with an independent business selling political merchandise. But I do have a problem when a website gives people the impression they're supporting an official campaign without making clear who's actually taking their money. And here's something else worth remembering. The FBI is already warning about election scams involving merchandise that never arrives and fake donation requests. Meanwhile, AI makes it easier than ever to create a convincing website. I wouldn't judge a store by its design or the word "official" in its address. I'd go straight to the organization I want to support and use the links it provides. The same advice applies when you're shopping online or responding to an unexpected request for money. A few extra moments of checking can make a difference.

Have you ever purchased something from a website you thought was official, only to discover later that it wasn't connected to the company or organization you wanted to support? Should websites that falsely claim official affiliations face tougher consequences? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

GM wants drivers to take their eyes off the road by 2028

Tue, 27 Oct 2026 11:44:44 -0400

Would you feel comfortable watching a movie while your car cruises down the highway at 70 mph? General Motors is betting that someday you will. The automaker plans to introduce technology in 2028 that could let drivers take their hands off the steering wheel and their eyes off the road. That means you could potentially answer emails, watch a show or attend a virtual meeting while your vehicle handles the driving.

The technology is expected to debut in the Cadillac Escalade IQ electric SUV. However, GM still has plenty to prove before drivers can safely look away from traffic. The company is testing how people react when a vehicle suddenly needs their attention. That research could help GM determine how much warning drivers need before safely taking control.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

IKEA TURNS TO DRIVERLESS SEMIS WITH NOBODY IN THE CAB

GM already offers Super Cruise, a hands-free driving system available on more than 20 models across Cadillac, Chevrolet, GMC and Buick. It can manage steering, acceleration and braking on compatible roads under certain conditions. However, drivers must continue watching the road and remain ready to take control.

The next version of Super Cruise would remove that constant attention requirement when the eyes-off feature is active. GM plans to introduce it on compatible highways before eventually expanding to other roads. The system will use lidar, radar and cameras to monitor its surroundings. Turquoise lights on the dashboard and exterior mirrors will signal when eyes-off driving is available and active. GM says the technology could arrive as early as 2028. However, the launch depends on further development, safety testing and other requirements. Availability will also depend on state laws.

GM's ambitions are also growing. On Oct. 21, the company announced plans to bring autonomous highway driving to its full-size SUVs and light-duty pickup trucks, including gas-powered vehicles. Those vehicles represent some of GM's biggest sellers. However, the automaker has not announced when the technology will reach those additional models.

Before asking drivers to trust a vehicle with their safety, GM wants to understand what happens when people stop concentrating on driving. At its Global Technical Center in Warren, Michigan, hundreds of volunteers have climbed into real GM vehicles, including the Cadillac Lyriq. However, instead of driving onto an actual highway, they enter an immersive simulator that recreates different road conditions. Researchers can introduce sudden traffic changes, construction zones and hazardous situations.

Meanwhile, sensors monitor drivers' eye movements, heart rates and stress responses. The tests help GM understand how people behave when the technology encounters something unexpected. GM also tests its automated driving technology on closed courses and public roads with trained safety drivers. According to the company, its simulation tools can reproduce the equivalent of 100 years of driving in a single day. That gives engineers opportunities to study dangerous situations without exposing everyday drivers to those risks.

Here's something I didn't expect to see in automotive safety research. GM is asking some participants to play Candy Crush while researchers study their reactions. The game creates an engaging distraction. Players become focused on improving their scores, which gives researchers a way to measure what happens when they must suddenly shift their attention back to driving. According to reporting by The Associated Press, Maureen August, a senior manager at GM Research & Development, explained that the game helps researchers draw participants into an activity before interrupting them.

That interruption is especially important. Consider how long it takes to understand what's happening around you after you've been concentrating on your phone. Now consider making that adjustment while sitting behind the wheel of a moving SUV. At 70 mph, a vehicle travels roughly 103 feet every second. Even a five-second delay means it covers more than 500 feet. That's a lot of highway to travel while someone figures out why the car needs help.

WHAT HAPPENS IF THE WAYMO COMPUTER FAILS?

This may be the biggest question surrounding GM's plans. What happens when an automated vehicle encounters a situation it cannot safely handle? Perhaps there's debris blocking the highway. Maybe road markings disappear during construction. An unexpected maneuver by another driver could also create a dangerous situation.

GM's engineers are studying how much warning drivers need before taking control. Researchers also examine whether people understand the system's alerts and feel comfortable trusting the technology. However, an eyes-off system must be designed around the possibility that someone cannot respond immediately. That's why the vehicle's ability to handle unexpected conditions and safely manage a failed takeover becomes especially important. GM has not yet publicly detailed every situation its planned system will handle or exactly how it will respond when a driver fails to take over.

Several automakers already offer systems that reduce the work involved in highway driving. However, their capabilities vary considerably. Ford's BlueCruise allows hands-free driving on compatible roads, but drivers must continue paying attention. Tesla's Full Self-Driving (Supervised) can handle many driving tasks, although it still requires active human supervision.

Mercedes-Benz previously introduced its DRIVE PILOT system, which allowed conditional eyes-off driving in limited situations. However, the automaker has since pulled back from that technology in the U.S. as it develops its next generation of automated driving systems. GM's larger ambition is to make eyes-off driving available at highway speeds across a broader network of compatible roads. The company hopes to expand the capability to additional models after the Escalade IQ.

There's a financial incentive behind the push toward automated driving. Automakers increasingly offer advanced features through paid software subscriptions. GM already charges for continued Super Cruise access after the included service period expires. According to the company's August 2026 update, equipped vehicles include three years of service, followed by plans starting at $39.99 per month.

GM has not announced pricing for its future eyes-off technology. Some industry analysts believe drivers will be more willing to pay for technology that frees up their time behind the wheel. Still, there's a practical question for buyers. If you're already paying a premium for a luxury SUV, how much more would you be willing to spend each month to use its most advanced driving features?

WAYMO RECALLS ROBOTAXIS OVER CONSTRUCTION-ZONE RISK

If you're considering a vehicle with advanced driving technology, pay attention to what the manufacturer actually promises. Today's hands-free systems generally require you to keep watching the road. GM's planned eyes-off feature would allow you to look away only when the system is properly engaged under compatible conditions. Before paying for that capability, you'll want to know where it works and how the vehicle handles emergencies. It's also worth asking what happens if the system requests your attention while you're distracted.

Also, don't overlook the ongoing cost. Subscription fees could make a vehicle more expensive to own than its original purchase price suggests. And remember, GM's planned system remains under development. Until a manufacturer explicitly authorizes eyes-off operation under the appropriate conditions, keep watching the road and follow the system's instructions.

I love the idea of a less stressful drive, especially on those long stretches of highway where you're staring at the same traffic for miles. But handing over control is one thing. Taking my eyes off the road while traveling at highway speed is another. GM's research is encouraging because the company is studying how people actually behave when they're distracted. Still, I want to know what happens when the car encounters something it wasn't expecting. And if automakers plan to charge us every month for this technology, they'd better be able to show that it's safe and dependable. I'd be curious to try it, but I'd want a lot more evidence before settling in to watch a movie.

Would you trust your car enough to watch a movie while it drives at 70 mph, or would you always want to keep an eye on the road? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Data brokers don't just collect facts. They guess about you

Mon, 26 Oct 2026 16:00:09 -0400

They know where you live. They may know your phone number, your relatives' names and roughly what your house is worth. By now, most people have at least a vague sense that data brokers collect personal information. What many don't realize is what happens next.

Data brokers also analyze that information. They use algorithms, compare records from different sources and sort people into categories that predict their interests, circumstances and behavior. Those predictions can involve your health, finances, religious beliefs and potential vulnerabilities.

WHY CAREFUL PEOPLE STILL END UP ON DATA BROKER SITES

Some may be wrong. Others could reveal sensitive details you never intended to share. And depending on the company and the type of information involved, those profiles may be sold or shared with businesses you have never heard of. Here's a closer look at the labels data brokers assign to you, how they come up with them and what you can do to protect your personal information.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

Data brokers do far more than maintain databases of addresses and phone numbers. Some build detailed profiles designed to help advertisers identify specific audiences. The Federal Trade Commission documented this practice years ago. Its investigation found that brokers combined information from multiple sources to infer sensitive characteristics, including income, religion, political views and health conditions.

Acxiom, a major data company, developed a segmentation system called PersonicX that grouped households into lifestyle categories. One documented historical category was called "Rural Everlasting." According to the FTC, it described older adults with relatively low income and educational attainment. Other categories included "Urban Scramble" and "Mobile Mixers."

These were classifications built from data, not personal descriptions written by the people involved. The FTC also documented how companies used location information to create even more specific advertising audiences. For example, InMarket offered audience categories such as "Christian church goers," "parents of preschoolers," and "wealthy and not healthy." The FTC subsequently restricted InMarket's use and sale of sensitive location data.

Then there was Oracle's BlueKai advertising business, which helped advertisers use extensive consumer data for targeting. Oracle shut down its advertising products in September 2024. Still, its history illustrates how sophisticated this industry became. The important point is that a label doesn't have to be accurate to influence how a company views you.

Want to see how much of your personal information may already be exposed? Get a free scan to find out what data brokers may have on you at CyberGuy.com.

Some of these classifications sound harmless. Others are surprisingly personal. Here are examples of the information brokers have historically inferred or used to create consumer segments.

Data broker research and enforcement cases have documented categories involving:

A major concern is that these classifications can originate outside the medical system. HIPAA protects health information handled by covered healthcare organizations and their business associates. However, health-related information independently gathered or inferred by other businesses may fall outside HIPAA's protections.

For example, searching for information about diabetes doesn't mean you have diabetes. You could be researching the condition for a family member. Yet advertising systems may still use that activity as one of several signals when building a profile. Other federal and state privacy laws may apply, but they don't necessarily provide the same protections as HIPAA.

AMAZON ABOUT YOU MAY KNOW YOU A LITTLE TOO WELL

Data companies have also offered categories based on estimated income, spending behavior and financial circumstances. These can include people classified as affluent, price-sensitive or likely to respond to certain financial offers. One particularly troubling example comes from the Justice Department's case against Epsilon Data Management. According to federal prosecutors, Epsilon used sophisticated modeling to identify consumers likely to respond to solicitations. The company sold information about more than 30 million Americans to operators of fraudulent schemes, including fake sweepstakes promotions. Epsilon agreed to pay $150 million as part of its deferred prosecution agreement. This is a documented example of consumer data being used to help fraudsters identify potential victims.

Data brokers have also inferred people's religious interests and political leanings. These predictions may draw on information such as location patterns, purchases, public records and other available data. For example, the FTC documented the use of a "Christian church goers" advertising segment. A person visiting a church doesn't necessarily belong to that faith. Similarly, someone researching a political candidate doesn't automatically support that candidate. Nevertheless, profiling systems can use these signals to group people into audiences.

Another category focuses on what may be happening in your personal life. Data companies have developed segments involving parents with young children, empty nesters and households at different stages of life. These classifications can help businesses decide what products or services to advertise. However, they can also reveal potential pressure points. Someone approaching retirement may receive different financial offers than a young parent. A household believed to be managing health expenses may attract another type of marketing. And when those assumptions are wrong, the resulting profile may still influence what someone sees.

Consider what you've done online recently. Maybe you searched for joint pain relief. Perhaps you compared retirement plans or looked up treatment options for a relative. Individually, these activities might reveal very little. However, companies can combine information from websites, apps, purchase histories, public records and commercial databases.

Then predictive models look for patterns. For example, a company may consider your age range, estimated income and browsing activity when deciding whether you fit a particular advertising category. These classifications are often called modeled attributes or inferences. They represent predictions rather than verified personal facts. And here's the problem: a company buying access to an audience segment may use the prediction without knowing how accurately it describes each person.

Basic information helps a scammer contact you. More detailed personal information can help make the approach believable. For example, someone who knows your name and address could send a convincing-looking financial notice. Now suppose that same person also has information suggesting you're approaching retirement or researching medical expenses. A criminal could use those clues to tailor a fraudulent Medicare offer, investment pitch or fake medical service.

This doesn't mean every scammer buys sophisticated consumer profiles. However, the Justice Department's case against Epsilon Data Management shows how targeted consumer information can end up in the hands of fraudsters. The company sold consumer data to operators of fraudulent schemes, helping them identify people more likely to respond.

Meanwhile, the FBI reported that Americans age 60 and older lost approximately $7.7 billion to internet crime in 2025, up from $4.9 billion in 2024. While those losses weren't all connected to data brokers, the documented sale of targeted consumer lists shows how personal information can help criminals identify potential victims and make their scams more convincing.

Finding every profile attached to your name can be difficult. Unlike a credit report, there isn't one centralized system where you can review all the marketing predictions companies have generated about you. However, some state privacy laws give residents rights to access, correct or delete personal information, including certain inferences.

California provides one important example. Under the California Consumer Privacy Act, eligible residents can request information held by covered businesses, subject to legal exceptions. California also launched its Delete Request and Opt-out Platform, known as DROP at privacy.ca.gov/DROP/, in January 2026.

It allows eligible California residents to submit one deletion request covering registered data brokers. Those companies began processing requests in August 2026. Matching records, including inferences, generally must be deleted unless an exception applies. Other states have different privacy protections, so your options depend on where you live.

IS YOUR PERSONAL DATA CHANGING WHAT YOU PAY ONLINE?

You may not be able to eliminate every prediction about yourself. However, you can take practical steps to reduce how much personal information remains available.

Here's where to start:

Reducing publicly accessible personal information can make it harder for unfamiliar businesses and scammers to build detailed profiles. However, removal services cannot guarantee that every existing inference will disappear or prevent companies from collecting new information.

I've warned you before about data brokers collecting your personal information, but I find the predictions they make about us even more troubling. Think about it. You could search for a medical condition on behalf of someone you love and end up in a category suggesting you have that condition yourself. Someone buying access to that profile may have no idea the assumption is wrong. And when personal information gets into the wrong hands, it can help scammers make their pitches sound much more convincing. What concerns me is how little most of us know about the profiles being built around our names. You may never see every label a company assigns to you, but you can start reducing the information available to build those profiles. I recommend checking what appears when you search for yourself and taking advantage of the privacy protections available in your state. A reputable data removal service can also help by automatically sending removal requests to data brokers and continuing to check when your information reappears. You won't disappear from the internet, but you can make it harder for strangers to assemble a detailed profile of your life.

What would concern you more, a data broker accurately predicting something deeply personal about you or selling a completely false prediction as if it were fact? Let us know by writing to us at CyberGuy.com

Sign up for my FREE CyberGuy Newsletter

Elon Musk vows to give every US child SpaceX stock

Mon, 26 Oct 2026 12:12:29 -0400

You probably don't expect Elon Musk to show up in your child's investment portfolio. But that's exactly what could happen next year. The billionaire behind SpaceX has made a remarkable promise. He says he'll give one share of his space company to every kid in America.

We're talking about a potential giveaway worth more than $10 billion. Free SpaceX stock for kids sounds appealing, especially when you're thinking about your child's financial future. But before you start looking for a way to sign up, there are some pretty important details Musk has yet to explain.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

NEW BOOK ON ELON MUSK EXAMINES THE BILLIONAIRE’S MIND, MOTIVATION AND MAKING LIFE MULTI-PLANETARY

Musk recently announced on X that he plans to give one of his SpaceX shares to every kid in America in 2027. "Next year, I will give one of my SpaceX shares to every kid in America. This will be the first of many," Musk wrote.

That's a sweeping commitment. SpaceX, which went public in June 2026, operates the Starlink satellite internet network and develops rockets for commercial spaceflight. Now Musk wants millions of American children to own a tiny piece of the company. The promise has already attracted attention because of its enormous potential cost. However, Musk hasn't provided a detailed plan explaining how the shares would reach families or which children would qualify.

For perspective, SpaceX shares closed at $147.49 on Oct. 23. There are just over 72 million Americans under age 18. Using that closing price, giving every one of them a share would cost approximately $10.6 billion. For a family with two eligible children, that could mean roughly $295 worth of SpaceX stock based on the Oct. 23 valuation. Of course, that amount could change considerably by 2027. Stock prices rise and fall, and owning a single share offers no guarantee of future profits. Still, there's something intriguing about the idea of a child becoming an investor before graduating from high school. If SpaceX continues to grow, that share could become more valuable over time. On the other hand, families could also watch its value decline.

The timing is especially interesting. Just one day before Musk made his announcement, artificial intelligence company Anthropic revealed a major philanthropic commitment of its own. The company behind Claude AI announced plans to commit 5% of its shares to a new Anthropic Public Benefit Fund, subject to stockholder approval. The fund could support nonprofit organizations or provide direct financial assistance to certain populations, including workers affected by AI-driven economic changes. The company also described a structure that could increase its contribution as its valuation grows, subject to future board decisions.

Musk responded to Anthropic's announcement by recommending that companies give shares directly to the public. He then followed up with his own pledge involving SpaceX. This exchange raises an interesting question about the enormous wealth accumulating around AI. As technology companies become increasingly valuable, executives are facing greater scrutiny over how that wealth should benefit the public.

SEN DAVE MCCORMICK: TRUMP ACCOUNTS GIVE ALL AMERICANS A STAKE IN PROSPERITY

Under the Trump Accounts program, the Treasury Department began automatically enrolling eligible children in tax-advantaged investment accounts on Oct. 1. Parents or guardians must still claim and activate those accounts before managing them. A separate federal pilot program provides a one-time $1,000 contribution for qualifying U.S. citizen children born between Jan. 1, 2025 and Dec. 31, 2028. Families must make an election to receive that contribution.

SpaceX President and Chief Operating Officer Gwynne Shotwell and her husband, Robert Shotwell, previously pledged to donate one SpaceX share to the Trump Account of each of more than 2 million children. Their contribution targets children ages 11 to 17 in areas with lower-than-average household incomes, with additional emphasis on communities near their home in central Texas.

New Treasury regulations that took effect Sept. 30 also allow qualifying donations of publicly traded company shares into Trump Accounts. Under those rules, donated shares generally must be held for five years or until the account's special growth period ends, whichever comes first. Musk's proposal could potentially use this system, but he has not publicly explained the exact distribution process. That's an important unanswered question because Trump Accounts have established eligibility requirements and investment rules. Musk's announcement appears to cover a much broader population of children, although he has yet to define exactly who qualifies.

A pledge this large naturally comes with logistical challenges. For starters, Musk hasn't clarified whether every child under 18 would qualify or whether the giveaway would be limited to U.S. citizens. It is also unclear how children would receive their shares.

If the giveaway uses Trump Accounts, families would need to understand how eligibility and account requirements apply. If Musk chooses another distribution method, parents may need some type of custodial account to hold stock for a minor. But Musk has not identified a specific process for families to claim his promised shares.

There are also financial questions. Would families face any tax consequences? Could children sell their shares immediately, or would restrictions apply? And when during 2027 would the transfers happen? For now, there's no confirmed application process for Musk's nationwide pledge. Parents should be cautious of anyone claiming otherwise.

UKRAINE'S STARLINK RESTORED AS ELON MUSK CLAIMS KYIV VIOLATED TERMS OF SERVICE 'TO KILL PEOPLE'

If you have children or grandchildren, this is certainly a development worth following. A free share of SpaceX could introduce young people to investing and give them a financial interest in a company developing space technology. But I'd encourage parents to be patient. Musk has not announced an official enrollment process for his proposed giveaway. That means you should be especially suspicious of websites or social media messages claiming you can already register your children for free SpaceX stock.

We have previously reported on scams using Elon Musk's name to promote questionable products. A high-profile stock giveaway could provide another opportunity for impersonators to target families. Avoid sharing your child's Social Security number, financial information or other sensitive details with anyone promoting an unverified giveaway. For legitimate information about Trump Accounts, visit the IRS website at irs.gov/trumpaccounts directly. That official program already has an established enrollment process, but signing up for a Trump Account does not guarantee your child will receive a share from Musk's pledge. If SpaceX eventually announces a formal process, review the eligibility requirements and any account restrictions before participating.

I've seen Elon Musk make some pretty ambitious promises over the years, but offering a piece of SpaceX to every child in America is certainly an attention-grabber. What interests me most is the idea of giving young people an ownership stake in a company helping shape the future of space exploration. There could be real financial value in that over time. Still, I want to see the details before getting too excited. A promise involving billions of dollars and millions of children deserves a clear explanation of how it will work. I also find the timing fascinating. With Anthropic making its own massive commitment to public benefit, we're beginning to see tech billionaires debate who should share in the wealth their companies create. I'll be watching to see whether Musk follows through and how much of that wealth actually reaches American families.

Would you trust Elon Musk to give your child a financial head start, or do you think billionaires should do more than promise shares on social media? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Giant robotic claws will grab dead satellites in space

Sun, 25 Oct 2026 08:54:07 -0400

Space is getting crowded, and I'm not talking about astronauts. Thousands of pieces of junk are circling Earth at incredible speeds. Some are dead satellites. Others are leftover rocket parts or fragments from past collisions. Any one of them could cause serious trouble if it hits a working spacecraft.

Now Britain has a pretty wild solution. It's developing a robotic spacecraft with giant claws that can grab dead satellites and move them toward a fiery end in Earth's atmosphere. Think of a garbage truck in orbit, except this one has to track down its trash while both objects are traveling thousands of miles per hour.

The UK is putting roughly $81 million behind the project. And if everything goes according to plan, the mission could change how we deal with the growing mess above our heads.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

WILL A FOUR-ARMED ROBOT REPLACE ASTRONAUTS IN SPACE?

The UK Space Agency has selected aerospace company ClearSpace UK to develop a spacecraft specifically designed to remove dead satellites from orbit. The contract is valued at approximately $81 million. The project is part of Britain's Active Debris Removal mission, known as UK ADR. The spacecraft is targeted for launch in 2029 from SaxaVord Spaceport in Scotland's Shetland Islands.

Its first job will be to remove two defunct UK-registered satellites from low Earth orbit. The government wants both satellites removed by 2032. If successful, the mission would demonstrate that one spacecraft can capture and dispose of multiple dead satellites without being sacrificed after its first cleanup. That could make future operations far more practical, especially as the number of satellites in orbit continues to grow.

Catching a satellite sounds straightforward until you consider what's happening in orbit. Objects in low Earth orbit typically travel at roughly 17,000 mph or faster. Some dead satellites may also tumble, making them difficult to approach safely. That's where ClearSpace's robotic technology comes in. The spacecraft will use a specialized capture system to approach and secure an inactive satellite. First, it must carefully coordinate its movements with the target. Then its robotic capture mechanism will take hold of the object.

Once the satellite is secured, the spacecraft will move it into a lower orbit and release it. Atmospheric drag will eventually pull the abandoned satellite down, causing it to reenter Earth's atmosphere, where it is expected to burn up. The cleanup spacecraft itself is being designed for potential refueling and reuse. That means it could remain in orbit for future work instead of ending its mission after disposing of one satellite. Of course, engineers still have to prove the technology can handle these demanding operations safely.

You might assume there's plenty of room in space for a few broken satellites. Unfortunately, some of the orbital regions where satellites operate are becoming increasingly crowded. According to the European Space Agency's space debris statistics, updated October 14, 2026, approximately 47,140 objects are regularly tracked in Earth's orbit. That figure includes functioning satellites, inactive spacecraft, rocket bodies and debris.

And those are only the objects large enough to track reliably. ESA estimates that millions of smaller pieces also surround Earth. The danger comes from their enormous speeds. A piece of debris measuring just one centimeter can carry enough energy to disable a spacecraft. ESA has also warned that an impact of that size could penetrate the protective shielding of the International Space Station.

Now consider what happens when two large objects collide. They can break apart and produce many additional fragments, each capable of damaging something else. Scientists call this potential chain reaction the Kessler syndrome. If enough collisions occur, certain orbital regions could become extremely hazardous for future missions. ESA's 2026 Space Environment Report warns that active debris removal will be necessary to prevent long-term debris growth driven by collisions.

TRUMP TO TRANSFORM SPACEFLIGHT FROM SPECTACLE TO STATUS QUO TARGETING 3 LAUNCHES PER DAY

The danger extends beyond expensive satellites. Astronauts aboard the International Space Station face risks from debris traveling through orbit. In November 2021, crew members took shelter inside their spacecraft after a Russian anti-satellite weapons test created a dangerous cloud of debris. NASA confirmed that astronauts and cosmonauts closed hatches and sheltered inside docked Dragon and Soyuz spacecraft while teams evaluated the threat.

Fortunately, the station and crew remained safe. The incident demonstrated how quickly debris from a satellite breakup can disrupt operations in orbit. A serious impact could damage critical systems or puncture a spacecraft's pressurized structure. That's why space agencies continuously monitor debris and sometimes adjust spacecraft orbits to avoid potential collisions. Removing larger abandoned satellites could help prevent future collisions that create even more fragments.

Here's another concern that deserves attention. Some space debris eventually returns to Earth, and certain components can survive the intense heat of atmospheric reentry. Most smaller debris burns up. However, larger objects and components made from heat-resistant materials can sometimes reach the ground. As rocket launches increase, researchers are paying closer attention to this danger.

Space environmentalist Ewan Wright, from the University of British Columbia, told Space.com that approximately 124 rocket stages reentered Earth's atmosphere uncontrolled in 2024. He estimated that if that annual level continued for a decade, there would be a 33% probability of at least one person somewhere in the world being killed by falling rocket debris. That estimate describes a cumulative global risk from rocket stages, rather than the danger posed by Britain's two satellite-removal targets.

ESA also reports that the risk of casualties from uncontrolled reentries has increased in recent years, although the overall probability remains low compared with many everyday risks. The takeaway here is that removing debris from orbit requires careful planning. Operators must consider what happens when that material eventually returns to Earth.

Britain's mission could have implications well beyond the two satellites it plans to remove. For years, many satellites were designed primarily to complete their missions and then be retired. Some remain in orbit long after they stop functioning. Now companies are developing spacecraft capable of approaching other satellites and performing tasks that once seemed incredibly difficult.

ClearSpace's mission could help prove that robotic spacecraft can safely capture objects that were never designed for servicing. Its planned refueling capability is particularly interesting. Instead of launching a new cleanup vehicle for every job, operators could eventually service an existing spacecraft and send it after more debris.

That could open the door to a new commercial industry. Satellite operators might eventually pay specialized companies to remove aging equipment or extend the useful lives of working spacecraft. However, the UK mission remains in development. Its long-term commercial potential will depend on whether the technology performs as expected.

You probably don't spend much time thinking about abandoned satellites while checking the weather or following GPS directions. But the technology operating above Earth plays an enormous role in everyday life. Satellites support communication networks, provide navigation signals and deliver information used for weather forecasting. They also help scientists monitor changes on Earth and support emergency response operations.

GPS satellites operate in medium Earth orbit, much higher than the low Earth orbit debris targeted by Britain's mission. Still, the broader effort to keep orbital regions safer helps protect the infrastructure that supports satellite-based services. A collision that disables an important spacecraft could disrupt operations and force companies or government agencies to rely on backup systems. Replacing a damaged satellite can also be expensive.

Britain's robotic cleanup mission won't eliminate the space junk problem overnight. But successfully removing two abandoned satellites could help establish a practical way to deal with dangerous objects already in orbit. And with thousands of additional satellites being launched, finding a reliable way to retire them safely could become increasingly important.

I have to admit, the idea of a spacecraft chasing down dead satellites with giant robotic claws sounds like something Hollywood dreamed up. But I find the technology fascinating, especially when you consider how much we depend on satellites without giving them a second thought. What really caught my attention is the possibility of reusing the cleanup spacecraft. That could make removing space junk a routine service rather than an occasional experiment. Still, I wonder whether we're moving fast enough. With companies launching more satellites every year, cleaning up two abandoned spacecraft feels like a small start. I'd like to see satellite operators take greater responsibility for what they leave behind. After all, we wouldn't tolerate companies abandoning broken equipment on our highways. Why should Earth's orbit be any different?

Should companies launching satellites into space be required to pay for removing them when they stop working, or should governments take responsibility for cleaning up the growing mess? Let us know by writing to us at Cyberguy.com

Fake Social Security statement email hides a scam

Sun, 25 Oct 2026 08:35:25 -0400

There's something about an email from Social Security that makes you pay attention. After all, we're talking about your retirement benefits and years of earnings. So when a message lands in your inbox saying your statement is ready, clicking to take a look might seem perfectly reasonable. That's exactly what scammers are counting on.

Take a look at this email below that recently landed in an inbox. It looks professional, carries the Social Security Administration (SSA) logo and includes a button to view a statement. However, a closer inspection reveals something the sender probably hoped you wouldn't notice. The message came from an email address with no apparent connection to the federal government.

Even more concerning, the Social Security Administration's Office of the Inspector General warned in February 2026 about a significant increase in fraudulent emails using this same type of trick. Here's how to spot the warning signs in this email and protect yourself before scammers get their hands on your personal information.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

FAKE CHATGPT BILLING EMAILS CAN STEAL YOUR LOGIN

The message arrives with the subject line "Statement Support Was Posted to Your Account Details Report." The sender appears as "Social Security Administrator," which immediately gives the impression of an official government communication. Inside, the email announces, "Your statement is ready." It goes on to say your 2025 Social Security statement is available and invites you to review your earnings record and benefit estimates online.

There's even a neatly formatted box showing the year as 2025 and the status as "Ready." Below that sits a prominent blue "View statement" button. The message also displays what looks like the official Social Security website address. For someone quickly checking email before work or while getting through a crowded inbox, this could easily pass as a routine government notification.

Here's where the message falls apart. Although the sender's display name says "Social Security Administrator," expanding the sender information reveals an address using the domain loradmiadministraciones.com . That's a major red flag. The address has no apparent relationship to Social Security, and the sender's domain does not end in .gov. Scammers can customize their display names to impersonate government agencies or other trusted organizations.

According to the Social Security Administration, most legitimate SSA emails come from government email addresses. However, the agency does use some authorized outside services, including certain communications from echosign.com and approved marketing firms. That means you should examine the complete sender address and verify any unexpected request independently. Even a familiar-looking sender address can be spoofed.

FAKE PATIENT PORTAL SCAM CAN STEAL YOUR LOGIN AND INFECT YOUR PC

The email encourages the recipient to click "View statement" to access what appears to be a routine financial document. That button is a central concern. A phishing link can redirect you to a fraudulent website designed to steal account credentials or sensitive personal information. Some malicious links can also lead to malware downloads.

We haven't verified the destination behind the button in this particular email. However, the suspicious sender address and resemblance to known SSA phishing campaigns make the message unsafe to trust. The SSA's inspector general has specifically warned about fake statement notifications containing dangerous links. Those links could expose personal information or compromise devices.

One interesting thing about this example is how little pressure it puts on the reader. There's no demand for immediate payment or warning that benefits will disappear within 24 hours. Instead, the message offers something people might genuinely want to see: their Social Security statement.

It also uses the generic greeting "Dear Beneficiary," despite appearing in an inbox associated with a named recipient. That lack of personalization provides another reason to investigate, although generic greetings alone cannot prove an email is fraudulent. The professional appearance does much of the work. The SSA logo and government-style formatting create an impression of credibility. Yet none of those visual elements establishes who actually sent the email.

Yes, and that's what makes this scam particularly convincing. According to the SSA's official guidance, people with a personal my Social Security account generally receive an annual email reminder approximately three months before their birthday. The agency also sends certain notifications about new messages and notices. Scammers take advantage of these legitimate communications by creating messages that resemble official SSA reminders.

Before opening a statement or following instructions in an unexpected email, take a few seconds to investigate the message.

On a computer, click the sender's name or expand the message details to reveal the full email address. On an iPhone or Android phone, tap the sender's name or address to view additional information. The exact method depends on your email app. Look closely at the domain. Watch for unfamiliar company names, extra characters or addresses unrelated to Social Security.

On a computer, hover your mouse over a button or link without clicking. Your browser or email app may display its actual destination. On a phone, some email apps let you touch and hold a link to preview its address. Be careful because certain apps may open or begin loading a preview. When in doubt, skip this step and visit the official SSA website yourself. Remember that a website beginning with HTTPS can still be fraudulent. Encryption alone does not prove that a website belongs to the government.

The most reliable approach is to open a new browser window and visit ssa.gov yourself. You can also contact Social Security at 1-800-772-1213 using the number published on its official website. Avoid using contact details provided in a suspicious email.

You can check your earnings record and estimated retirement benefits without clicking an emailed statement link.

If you don't already have an account, follow the official registration instructions. Creating an account can also help you monitor your Social Security information for unexpected activity.

A convincing email can catch anyone off guard, especially when it concerns retirement benefits or personal financial information. These practical steps can help protect your identity and accounts.

Even when an email looks authentic, use the SSA website independently to access your information. Avoid downloading unsolicited statement attachments or documents that claim to come from the agency.

Use a unique password for your Login.gov or ID.me account and keep multifactor authentication enabled. Also protect the email account associated with your Social Security profile because criminals may target it to reset other passwords.

Strong antivirus software can help identify dangerous websites and block known malware downloads. Keep your operating system, browser and security software updated to protect against newly discovered threats. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

Never provide your Social Security number or financial account information through an unexpected email link. If someone claims to represent Social Security and requests sensitive details, contact the agency through its official website.

Review your earnings history periodically through your personal SSA account. Look for unfamiliar earnings or changes to account details. If you notice something suspicious, contact Social Security directly for assistance.

Scammers can collect personal details from people-search websites and data brokers to make their messages more convincing. Consider removing your information from these websites or using a reputable data removal service to handle supported requests. Although this won't stop every phishing attempt, it can limit some of the personal details criminals find online. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

The SSA Office of the Inspector General accepts reports of Social Security impersonation scams at oig.ssa.gov/report/ . Save the suspicious sender address and relevant screenshots. You can also report the message through your email provider's built-in phishing-reporting feature. Once you've preserved the information needed for a report, delete the email.

Your next steps depend on what happened after you clicked. Here's how to respond.

Close the suspicious website immediately. Avoid interacting with additional prompts or downloading files. If the site attempted a download, check your device's Downloads folder without opening the file. Simply visiting a phishing page does not automatically mean your information was stolen. However, keep your browser and operating system updated, and run a security scan with strong antivirus software if you notice anything unusual.

Change the affected password immediately through the legitimate website, preferably using a trusted device. If you reused the password anywhere else, change it on those accounts too. A reputable password manager can help you create strong, unique passwords for each account and alert you to passwords that may have been exposed in a data breach. Next, review account activity and recovery settings. Check for unfamiliar sign-ins or unauthorized changes. Contact Login.gov, ID.me or the affected service through its official support channels if you believe someone accessed your account.

Visit IdentityTheft.gov for a personalized recovery plan. Consider placing a free credit freeze with Equifax, Experian and TransUnion. This can help prevent criminals from opening new credit accounts using your information. You should also review your credit reports and monitor financial accounts for unauthorized activity.

Avoid opening the downloaded file if you haven't already. If you ran it, disconnect the affected device from the internet and perform a scan with strong antivirus software. If you suspect malware installed successfully, use a separate trusted device to change sensitive passwords. Consider getting professional assistance before signing back into financial accounts on the affected computer.

Contact your bank or financial institution immediately. Explain what happened and ask about securing your accounts or disputing unauthorized transactions. You should also report the incident to the FBI's Internet Crime Complaint Center at ic3.gov/ and the Federal Trade Commission at reportfraud.ftc.gov/ . The SSA's inspector general recommends these reporting channels for victims of Social Security impersonation scams. If you experienced financial loss, consider filing a report with local law enforcement.

What concerns me about this particular scam is how routine the email feels. There are no dramatic threats or wild promises. It simply tells you that your Social Security statement is available, something millions of Americans have a legitimate reason to check. And the design is convincing enough that someone could click before thinking twice. I've said it before, and I'll keep saying it: A polished email doesn't tell you anything about who's really behind it. In this example, checking the sender's actual address exposed a serious warning sign immediately. My advice is simple. When an email involves your Social Security information, go directly to the government website and check for yourself. A few extra seconds of caution could save you from a much bigger headache.

Have you ever received an official-looking government email that turned out to be a scam? What gave it away, or did you almost fall for it? Let us know by writing to us at Cyberguy.com

Your credit can look normal while someone steals your identity

Sat, 24 Oct 2026 12:54:34 -0400

You check your credit score, see nothing unusual and assume your identity is safe. But what if someone has already stolen your personal information, and your credit report shows absolutely nothing? That's entirely possible.

Credit monitoring can help detect certain types of identity theft, particularly fraud involving new credit accounts. However, criminals can also target your existing bank accounts, retirement savings, government benefits and phone number without triggering a traditional credit alert. As a result, a clean credit report can give you a false sense of security. Here's what credit monitoring can catch, what it might miss and how to better protect yourself.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, Oct. 31, at 11 AM ET/8 AM PT. Register for free now at CyberGuyLive.com.

IDENTITY THEFT PROTECTION IS CHANGING: WHAT TO LOOK FOR

Credit monitoring tracks changes to your credit file. Depending on the service, it can alert you to suspicious activity involving your credit history.

Common alerts include:

These alerts can help you discover new account fraud before the damage grows. However, credit monitoring depends on information that lenders and other companies report to credit bureaus. Therefore, it cannot reliably detect identity theft that occurs entirely outside the credit reporting system.

Criminals have several ways to misuse your information, steal money or make you more vulnerable to fraud without triggering a traditional credit monitoring alert. Here are six situations worth watching for.

A criminal gains access to your existing checking account, savings account, retirement account or payment app. Because the account already exists, the takeover may never appear on your credit report. Instead, you might first discover the theft through an unfamiliar transaction or a notification from your financial institution.

Someone uses your Social Security number to file a fraudulent tax return or claim government benefits. You may receive an IRS notice about a tax return you never filed. Alternatively, you could discover unemployment benefits claimed in your name. Neither situation necessarily changes your credit score.

A thief uses your health insurance information to receive medical care, prescriptions or equipment. You might then receive bills for services you never used. Even worse, someone else's medical information could end up in your records. Traditional credit monitoring generally will not detect the misuse itself, although unpaid debts could eventually create other financial complications.

Criminals may convince your mobile carrier to transfer your phone number to a SIM card or device they control. Once they have your number, they may intercept certain verification codes and attempt to access your accounts. A sudden loss of cellular service could be an early warning sign, especially if you did not request a change.

A scammer tricks you into authorizing a wire transfer, sending money through a payment app or purchasing gift cards. Because you initiated the payment, even under false pretenses, traditional credit monitoring may have no indication that anything happened. Your financial institution might have separate fraud detection systems, but those protections vary.

Your name, phone number, address and other personal details may appear on people search websites or data broker databases. Criminals can use that information to create convincing phishing messages or impersonation scams. Although the exposure itself does not necessarily mean someone has stolen your identity, it can make you a more attractive target. The Federal Trade Commission identifies unauthorized bank withdrawals, unfamiliar medical bills and fraudulent tax filings among the warning signs of identity theft.

SOMEONE COULD HAVE OPENED AN ACCOUNT IN YOUR NAME. CHECK NOW

A credit score provides a snapshot of your creditworthiness based on information in your credit file. It does not show every account you own or every place someone might use your personal information. For example, someone could access your retirement account while your credit score remains unchanged.

Similarly, criminals might use your phone number to get into an existing account without ever applying for credit. That's why it's important to review your actual credit reports rather than relying on your score alone. Even then, you'll need to check your other accounts separately.

Fortunately, you can look for suspicious activity without paying for an expensive monitoring service. Start with these six habits.

Check your bank statements, investment accounts, retirement accounts and payment apps for unfamiliar transactions. Also, enable transaction and security alerts whenever your financial institutions offer them.

Pay attention to IRS notices about returns you did not file or income from employers you don't recognize. You can also review your federal tax account through the official IRS website at irs.gov. You can also request a free six-digit Identity Protection PIN (IP PIN) from the IRS. This helps prevent someone else from filing a fraudulent federal tax return using your Social Security number. The IRS issues a new IP PIN each year.

Review your earnings history periodically to see whether it matches your actual employment. You can access your information through your my Social Security account at ssa.gov/myaccount. Unexpected earnings may require further investigation.

Look for unfamiliar medical appointments, prescriptions, procedures or insurance claims. If something looks suspicious, contact your health insurance company or medical provider directly.

Ask your carrier about account PINs, port-out protection and SIM swap safeguards. Additionally, consider using an authenticator app or security key instead of text-message verification when available.

Search for your name, phone number and address to identify information exposed through people-search websites. You can request removal from individual sites or consider a reputable data removal service.

Pro tip: Choose one day each month to review your accounts and important records. You can combine it with a bill payment routine to make the habit easier to maintain.

Credit monitoring remains useful, but it cannot catch every type of identity theft. Some identity theft protection services offer broader monitoring that can help identify suspicious activity involving financial accounts, personal information and online accounts. However, the features and level of protection depend on the provider and plan you choose.

Before signing up, compare the features, coverage limits and costs. Pay attention to which financial accounts qualify for monitoring and whether the service offers restoration assistance if identity theft occurs. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com

Remember: No identity theft protection service can prevent every scam or detect every instance of fraud. These services work best alongside strong passwords, multifactor authentication, account alerts and regular reviews of your financial statements.

If you suspect someone is using your information, act quickly. You do not need to wait for a credit monitoring alert.

You can also review your credit reports at AnnualCreditReport.com. The FTC confirms that free weekly online reports are available from the three nationwide credit bureaus.

I always encourage people to keep an eye on their credit, but I wouldn't rely on a credit score to tell me whether my identity is safe. Someone could be accessing an existing financial account or misusing personal information without causing any immediate change to that score. That's why I recommend checking financial statements, turning on account alerts and taking advantage of additional safeguards when they're available. Identity theft protection services can provide another layer of monitoring, but you still need to pay attention to activity in your accounts.

When was the last time you checked your bank accounts, medical statements or phone account for signs of identity theft rather than relying on your credit score? Let us know in the comments below. Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Newsletter

Pennsylvania law requires delivery robots to yield to pedestrians, yet protester still faced arrest

Sat, 24 Oct 2026 06:46:22 -0400

Most people see a food delivery robot rolling down the sidewalk and simply walk around it. But one Philadelphia woman decided she wasn't moving.

She stood directly in front of an Uber Eats delivery robot, refusing to let it continue. Police eventually arrived, and the 78-year-old retired professor ended up in handcuffs.

Her protest has now sparked a much bigger conversation about robots taking over human jobs and how much space these machines should get on our sidewalks. And there's a surprising detail about Pennsylvania law that makes this whole situation even more interesting.

WORKERS ERUPT OVER DC PLAN TO BRING ROBOTAXIS TO CITY STREETS: ‘THIS IS BULLS---’

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

Join us Saturday, Oct. 31, at 11 AM ET/8 AM PT. Register for free now at CyberGuyLive.com.

On Oct. 14, Carolyn Marvin, a retired University of Pennsylvania professor, was leaving a flu shot appointment in Center City Philadelphia when she spotted an Uber Eats delivery robot. Instead of stepping aside, she positioned herself in front of the machine near Reading Terminal Market on Filbert Street. Police reportedly responded after witnesses reported a disturbance. Officers said Marvin repeatedly refused instructions to move out of the robot's path. They eventually arrested her and issued her a disorderly conduct citation.

The encounter was captured on video and quickly attracted attention online. However, Marvin wasn't surprised by the attention. She had been deliberately blocking delivery robots for months, turning what might look like a strange sidewalk encounter into her own form of public protest.

In an interview with PhillyVoice, Marvin explained that she believes corporations are using autonomous machines to displace human delivery workers. She argued that her actions fall under her First Amendment right to protest. Marvin was taken to police headquarters and later released.

She said she plans to fight the citation in court and continue blocking delivery robots when she has the opportunity. She also encouraged others who oppose the machines to join her protests.

Marvin's frustration goes beyond having robots share the sidewalk. She sees them as a direct threat to people who earn their living delivering food. Every order completed by a robot represents work that potentially could have gone to a human courier. That concern comes as more delivery companies experiment with automation to reduce operating costs.

Unlike a human courier, a robot doesn't collect tips or earn money for each delivery. Companies hope automation will eventually reduce operating costs, although the machines still require maintenance and monitoring.

However, whether Philadelphia's robot program has actually eliminated delivery jobs remains unclear. Uber has previously said its robots are intended to complement human delivery workers rather than replace them. Still, it's easy to understand why people who depend on delivery income might question how that arrangement will work as fleets expand.

Marvin also sees her protests as an opportunity to engage other pedestrians. She says people regularly stop to ask why she's blocking the machines. Those conversations are part of what motivates her to continue, even after her arrest.

You might assume that Marvin's arrest means delivery robots have the right of way on Philadelphia sidewalks. But Pennsylvania law offers a rather different answer.

The state's vehicle code classifies personal delivery devices as pedestrians and generally requires them to follow pedestrian traffic rules. However, the robots must yield the right-of-way or safely navigate around pedestrians and cyclists in pedestrian areas. That's an important detail. A delivery robot does not automatically have priority over someone walking down the sidewalk.

Of course, requiring robots to yield does not necessarily give people the legal right to deliberately obstruct deliveries. Police say Marvin refused repeated instructions to move after officers responded to a disturbance. Her disorderly conduct charge does not establish that robots have priority over pedestrians or settle whether her particular protest was legally protected.

Pennsylvania law requires operators to notify municipalities at least 30 days before beginning delivery robot operations. Municipal officials can also prohibit the machines in areas where, after consulting the operator, they determine the robots would pose a hazard. That leaves an interesting question about how cities should handle future confrontations between pedestrians and commercial robots.

FOOD DELIVERY FAVORITE FORCED TO FORK OVER MILLIONS AFTER DOJ ALLEGED DISCRIMINATION AGAINST AMERICAN WORKERS

Despite the controversy, companies continue investing in autonomous delivery because the technology offers some practical advantages. Uber Eats partnered with robotics company Avride to operate small, four-wheeled delivery machines that transport food over relatively short distances. The robots use cameras and sensors to navigate city streets. According to Avride, they travel at speeds of up to 5 mph and can carry up to 55 pounds of food or other goods.

The service launched in Philadelphia in March 2026. These robots can complete short deliveries without sending another car through traffic or requiring a courier to find parking. For customers, the convenience is obvious. Your food arrives inside a secure compartment that you unlock through the Uber Eats app. In Philadelphia, customers can reportedly opt out of robot delivery. However, availability and delivery options depend on the order and service area.

And the rollout is expanding. On Oct. 21, Avride announced an expansion of robot delivery in Philadelphia involving Wonder's Rittenhouse location and additional restaurants on the Grubhub platform. Robot delivery is now available from 25 Wonder restaurant concepts at the Rittenhouse location, with nine additional restaurants on Grubhub also participating. The company has not said whether the expansion will require more robots on Philadelphia sidewalks or whether its existing fleet will handle the additional orders.

Philadelphia's confrontation comes amid growing frustration with autonomous machines operating in public spaces. In September, we reported on a robot traffic jam in Chicago, where at least a dozen Coco delivery robots clustered along a sidewalk. The company blamed a deployment error and said it corrected the problem.

The incident raised concerns about pedestrian accessibility, particularly for people who use wheelchairs or mobility aids. A blocked sidewalk can create a serious obstacle for someone who cannot easily move into the street or squeeze past a machine.

Philadelphia has experienced its own robot mishaps. In April, a woman reported that an Uber Eats delivery robot bumped into her from behind near 15th and Locust streets. Li Gordon-Washington reportedly suffered a scratch and later struggled to determine which agency should handle her complaint. Avride acknowledged that its robot made minor contact with her while completing a turn.

These incidents help explain why some residents are losing patience. While the machines may be designed to navigate around people, they still have to handle unpredictable human behavior and crowded public spaces.

Delivery robots may soon become a familiar part of your neighborhood, especially if you live near busy restaurants or shopping districts. You could find yourself sharing sidewalk space with machines carrying someone else's dinner. That raises practical questions about safety and accessibility, along with concerns about jobs.

If you encounter a robot blocking a curb ramp or creating a hazard, keep your distance and report the problem to the operator or local authorities. In Pennsylvania, delivery robots must display operator identification and contact information. Documenting the location and the robot's identification number can help officials investigate a complaint.

There's also an opportunity for residents to get involved before delivery robot programs expand. Local governments can evaluate where these machines operate and whether particular routes create safety hazards. Paying attention to those decisions gives communities a chance to have a say in how their sidewalks are used.

For people whose livelihoods depend on deliveries, the questions run deeper. They deserve clear information about how companies plan to use automation and what that could mean for future work opportunities.

I've covered plenty of robots that can do impressive things, and I can appreciate the technology behind these delivery machines. But I never expected to see a 78-year-old retired professor arrested after refusing to let one deliver somebody's lunch. What really caught my attention was Pennsylvania's law requiring robots to yield to pedestrians. That makes the confrontation even more thought-provoking.

I understand why police would respond when a public dispute escalates, and I certainly wouldn't encourage anyone to interfere with a delivery. At the same time, I understand Marvin's frustration. We're watching companies introduce machines that can perform work people have traditionally been paid to do, and we still don't have clear answers about how many jobs could eventually disappear.

I think companies introducing this technology need to be much more transparent about its impact on workers. And when they want to operate on public sidewalks, residents deserve a genuine say in how that happens. I hope this incident encourages a serious conversation about those issues before another confrontation ends with someone in handcuffs.

If delivery robots make food delivery more convenient but eventually cost human workers their jobs, should cities still allow them to operate on public sidewalks? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Newsletter