Technology News Articles on Fox News

Delivery robots swarm Chicago sidewalk in viral video

Sat, 19 Sep 2026 06:48:30 -0400

You expect traffic jams on Chicago streets. You probably do not expect one on the sidewalk caused by a bunch of food delivery robots. That is exactly what runner Becca Ostien encountered near Lincoln Park. At least a dozen Coco delivery robots had gathered along North Clark Street, leaving her to navigate what looked like a miniature robot traffic jam.

The strange scene quickly spread online. Yet behind the viral video sits a bigger question about the growing number of delivery robots rolling through American cities. What happens when the technology designed to make deliveries easier starts getting in your way?

NEW! 🩺 Free CyberGuy LIVE class: Get Better Healthcare With AI Saturday, Sept. 26, at 11 a.m. ET / 8 a.m. PT

Kurt "CyberGuy" Knutsson will show you five practical ways AI can help you organize your health history, remember important appointment details, understand complicated medical information, research prescriptions and prepare smarter questions for your doctor. No technical experience is needed.

Save your free spot at CyberGuyLive.com.

UBER EATS DRONE DELIVERY COULD SOON REACH YOUR HOME

Ostien regularly travels through the area near Lincoln Park. During a recent morning outing, she came across a group of Coco robots clustered together on the sidewalk. Some appeared to be trying to maneuver out of the group. Others remained stationary.

Ostien described the robots as "swarming" and said someone without agile feet would have had trouble getting through. Video of the encounter shows roughly a dozen robots packed into a narrow stretch of sidewalk. Their lights flashed as they moved around one another with nowhere obvious to go.

That may look funny for a few seconds on social media. For someone who depends on a clear pedestrian route, the situation can become far more serious. One commenter described the scene as "an actual nightmare" for a disabled person. Other reactions raised concerns about people using wheelchairs or walkers trying to get through.

Coco Robotics acknowledged the problem and apologized. In a statement to CyberGuy, Coco said a "sidewalk deployment error" caused several robots to reroute at the same time as they left their station to begin their daily routes.

"That's not how our robots are designed to operate, and we understand the disruption it caused," Coco told CyberGuy. The company said its team identified and corrected the problem quickly, clearing the robots and returning them to normal operation within minutes.

"We've since solved the routing behavior that led to this and added safeguards to prevent it from recurring," the company said. Coco called the situation rare and said it has completed tens of thousands of trips during its two years operating in Chicago.

The company also estimates those deliveries have saved consumers roughly $500,000, created skilled fleet-maintenance jobs and reduced vehicle traffic.

ROBOT DOG COULD DELIVER YOUR NEXT PACKAGE AND AN AD

The Lincoln Park pileup did not happen in a vacuum. Delivery robots have been operating in Chicago through a pilot program, and the rollout has already faced resistance from some residents.

Petitions have called for the city to pause the program. There have also been documented crashes involving delivery robots and bus shelters.

Those incidents help explain why another viral robot problem can quickly trigger frustration. The technology offers an obvious convenience. A small autonomous machine can handle short food deliveries through a neighborhood.

However, city sidewalks already have plenty of competition for limited space. Adding autonomous machines raises questions about how much room they should get and what happens when their navigation systems fail.

The bigger issue is pedestrian access. Public sidewalks need to work for people with very different mobility needs. A cluster of robots can narrow or block the path for someone using a wheelchair or another mobility device. A blind pedestrian may have difficulty navigating an unexpected obstruction. Parents pushing strollers can face the same problem.

For someone who cannot safely step around a robot or leave the sidewalk, a temporary blockage can become a serious obstacle. Coco says it is also working on accessibility through a partnership with BlindSquare, a GPS app for people who are blind or partially sighted.

The partnership operates in Chicago and other cities. According to Coco, its robots log sidewalk hazards such as fallen e-scooters and broken curb cuts. That data flows into BlindSquare, which provides spoken alerts in 26 languages about hazards roughly 10 meters ahead.

Coco says BlindSquare users can also report when an obstacle has been cleared, allowing the company to update its routing maps in real time.

"Robots built to navigate the pedestrian environment have a responsibility to improve it for everyone who shares that space," Coco told CyberGuy. The partnership adds important context to the accessibility concerns surrounding delivery robots.

However, the Chicago incident also underscores the challenge: The robots themselves cannot become another obstacle on the sidewalk. That makes preventing deployment and routing failures especially important as these fleets expand.

Delivery robots are becoming more common in public spaces. We have already seen companies push these machines from college campuses toward grocery delivery and busy city neighborhoods. That means more people could soon encounter autonomous robots during an ordinary walk.

For consumers, convenience remains the appeal. You order lunch, and a robot brings it down the sidewalk. But cities also have to decide how these machines fit into crowded pedestrian spaces. A successful system has to account for people who cannot simply step around a stalled robot or squeeze through a narrow gap. One strange Chicago morning gives us a pretty good preview of the challenge.

WHAT HAPPENS IF THE WAYMO COMPUTER FAILS?

Delivery robots could become a normal part of getting food and packages around crowded cities. I can see why companies are investing in them. They could make some short deliveries quicker and keep another car off the road.

Coco's response adds important context. The company says this was a rare routing problem, that it has fixed the behavior behind it and that new safeguards are in place. I also find the BlindSquare partnership interesting because Coco's robots are already moving through the same sidewalks where accessibility hazards can create real problems.

Using those robots to identify obstacles could be genuinely useful. But the Chicago pileup also shows why reliability has to come first. A robot that warns someone about a blocked sidewalk cannot become the thing blocking that sidewalk. As more of these machines appear in cities, companies will have to prove that their safeguards work when something unexpected happens. People should not have to compete with delivery machines for a safe route down the sidewalk.

Would Coco's response and its work with BlindSquare make you more comfortable having delivery robots in your neighborhood, or do you still think they should stay off sidewalks? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report

Can tech really get you off your phone and into real life?

Fri, 18 Sep 2026 08:58:31 -0400

How many times have you picked up your phone to check one thing and found yourself still scrolling 30 minutes later? I know I've done it.

Our phones make it incredibly easy to stay connected. Yet something interesting seems to be happening at the same time. Many people are looking for more reasons to put those phones down and spend time with other people in the real world.

Run clubs are growing. Local gatherings are drawing attention. Phone-free events are popping up. People seem hungry for experiences that feel a little less like another feed.

That raises an interesting question: Could the same technology that keeps pulling us online also help get us back into real life? That idea is behind NewTree Social, an early-stage community events app from 29-year-old founder Maddy O'Connor. She wants people to use their phones to discover something happening nearby, make a plan and then go experience it. And the timing may be right.

RESTAURANTS BAN DINERS' PHONES DURING MEALS AS NO-SCROLL TREND GROWS: PUT IT AWAY OR ELSE

NEW! 🩺 Free CyberGuy LIVE class: Get Better Healthcare With AI Saturday, September 26 at 11 a.m. ET / 8 a.m. PT

Save your free spot at CyberGuyLive.com.

There is some real data behind this shift. Eventbrite's 2026 Social Study surveyed people ages 18 to 35 in the U.S. and U.K. It found that 79% planned to attend more events in 2026. Among Gen Z respondents, 46% said they were limiting screen time and 74% said in-person experiences were more important than digital ones.

Now, keep in mind that this research comes from Eventbrite, a company whose business revolves around live events. Still, those numbers line up with something we are seeing play out in the real world.

Eventbrite says phone-free experiences listed on its platform grew 567% globally between 2024 and 2025. Attendance at those events rose 121%. The company based those numbers on events that used "phone-free" terminology in their title or description.

For people who have spent years with a smartphone within arm's reach, intentionally putting it away feels significant. It also creates an unusual opening for technology. Instead of asking how an app can keep you scrolling longer, what if the goal becomes helping you find something worth closing the app for?

That is where O'Connor comes in. She told CyberGuy that the idea for NewTree grew partly from her own experience living in Washington, D.C., without an established group of friends. Her experience changed depending on where she lived and whether she could find places where meeting new people felt natural.

At the same time, she was watching interest grow around run clubs, wellness events, social clubs and other in-person experiences. So she started building around that behavior.

NewTree is designed to help people discover local activities and meet others through something they already want to do. I think that part is important.

Walking into a room of strangers solely because you are supposed to meet people can feel awkward. Walking into a fitness class, community event or gathering you already find interesting gives you a reason to be there before you ever introduce yourself. For someone who recently moved or simply wants to expand a social circle, that could make taking the first step a little easier.

Open NewTree and the basic experience should feel familiar. There is a feed. You browse events nearby. You can RSVP and get reminders about something you want to attend.

But the idea behind that feed is a little different. O'Connor comes from a graphic design background and told CyberGuy that she deliberately wanted NewTree to feel more like a social platform than a traditional events directory.

The app currently focuses on community, fitness and wellness events around Tampa, St. Pete and Clearwater. Apple describes it as an app for discovering local events, RSVPing and meeting new people.

Hosts can add photos and videos to event listings. Users can browse what is happening around them and RSVP from their phones. O'Connor also wants reviews to play a bigger role in what people discover. She says reviews of a host's events can affect how those events perform in the feed instead of simply sitting on a profile.

There is something almost funny about the concept. You open another social-style app because you want to spend less of your social life inside apps. But maybe that is exactly the point.

EXPERTS REVEAL WHY 'NONNAMAXXING' TREND MAY IMPROVE MENTAL, PHYSICAL HEALTH

NewTree is entering a crowded space. Meetup, Eventbrite and Facebook already help people discover events nearby, and both Meetup and Eventbrite offer personalized recommendations.

So what is NewTree trying to do differently? O'Connor says she wants the experience to feel more like a social platform built specifically around getting people together in person. She also says reviews can influence how a host's events perform in the feed, so better-reviewed experiences can potentially receive greater visibility. During NewTree's early pilot, O'Connor is personally reviewing and approving hosts before their events can appear publicly.

None of those ideas completely reinvents event discovery. The bet is that putting them together in a more curated, community-focused experience will give people another useful way to find things to do and meet people nearby. Whether that gives people enough reason to add NewTree to the apps they already use is one of the biggest things the company still has to prove.

Here is what I would be watching. Does NewTree help people make plans they actually follow through on? Getting someone to download an app is one thing. Getting them to put on shoes, leave home and show up somewhere is much harder.

The idea works if you spend a few minutes browsing NewTree, find something interesting and eventually put the phone back in your pocket because you have somewhere to go.

It becomes a lot less interesting if people simply scroll through another feed filled with things they might someday do. O'Connor is very open about just how early NewTree is.

She told CyberGuy that NewTree is pre-traction and pre-revenue. Tampa Bay is the starting point because she wants to prove that people will use the platform in one market before trying to expand throughout Florida and eventually nationwide. So there is a long way to go. But the behavior NewTree is betting on already appears to be taking shape.

Of course, using an app to find events where you may meet strangers brings some very real safety questions. O'Connor says she has taken a hands-on approach during NewTree's MVP stage. She told CyberGuy that she personally reviews and approves hosts before their events can appear on the platform. Users can report content or other users and block people. Hosts can also remove or report attendees.

NewTree's current support page says business profiles are reviewed before they can post. However, there is an important limitation. A verified badge means NewTree says it has confirmed that the business is who it claims to be. It does not mean NewTree is endorsing or guaranteeing a specific event.

NewTree's terms go further. They say events are generally operated independently by outside hosts and that NewTree does not ordinarily perform criminal background checks or identity verification on users, attendees, hosts or organizers.

So I would still do some homework before showing up at an unfamiliar event. Look up the organizer independently. Check the venue. If you are uncomfortable going alone, bring someone you trust. Technology can help you find people. It cannot remove all of the risks that come with meeting people you do not know.

Privacy deserves a close look too. O'Connor told CyberGuy that NewTree collects basic account information, including your name, email, date of birth and location. She says the app can use a saved profile location or, with your permission, your device location.

She also said the information is stored through NewTree's Supabase database, with database-level access controls designed to limit who can access different information. When someone RSVPs to a free event, O'Connor says the host receives the attendee's name, email and location information so they can manage and communicate with attendees.

1 IN 6 ADULTS PLAGUED BY LONELINESS AS RESEARCHERS REVEAL LASTING IMPACT OF COVID PANDEMIC

Another detail could cause some confusion. Apple currently gives NewTree a 13+ age rating. NewTree itself says you must be at least 18 years old to create an account or use the platform.

O'Connor told CyberGuy that Apple's 13+ label reflects its content-based App Store rating rather than the minimum age NewTree allows on the platform. So, despite what you may see on the App Store listing, NewTree says the service itself is for adults 18 and older.

Right now, Apple lists NewTree as an iPhone app. O'Connor told CyberGuy that Android support is planned but not available yet.

The business model is still taking shape too. O'Connor says she is leaning toward keeping the app free for users while eventually offering optional premium tools for businesses and hosts. Exactly what those paid features would include has not been decided.

So I would look at NewTree for what it is today: a very early app built around a much larger change in the way some people are thinking about technology.

Most of us could probably use a few more reasons to put the phone down and do something in the real world. Our phones have become where we communicate, work, watch videos and fill just about every empty moment.

Sometimes the screen starts taking the place of the experiences it was supposed to help us find. Maybe the better approach is expecting more from the technology we already use.

If an app helps you discover a local event, try something you would never have considered or meet someone you otherwise never would have crossed paths with, the phone becomes the starting point. Then it can get out of the way.

I like that idea. Use the technology to find something worth doing. Then look up from the screen and go do it.

What stands out to me here is how good technology has become at keeping us looking down. Notifications pull us back in. Feeds always have something else waiting. Before you know it, another chunk of your day has disappeared into a screen. Now we are seeing signs that many people want something different. They still want technology, but they also want more opportunities to be around people in the real world. NewTree has a lot to prove. But I like the problem O'Connor is trying to solve. Your phone already knows how to keep you home and entertained for hours. Maybe the next really useful social app will be the one that gives you a good reason to leave.

Would you use an app designed to get you off your phone and out meeting people, or does downloading another social app defeat the whole purpose? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report

119,000 fake shops could steal your credit card details

Fri, 18 Sep 2026 07:37:38 -0400

You find a product you want for 65% off. The site looks polished, the branding feels familiar, and the deal seems hard to pass up. That could be exactly the trap.

Cybersecurity company Nebty has linked about 119,000 domains to a fake shopping operation called DoppelCart. The sites impersonate legitimate businesses and can steal payment details at checkout, including one-time bank verification codes.

BleepingComputer reports that more than 105,000 DoppelCart shops were active in Nebty's latest scans, while Nebty says the majority of the cluster remains online. So, before you jump on a huge discount from a store you do not recognize, take a closer look at who is really behind the checkout page.

FAKE RENTAL LISTING SCAMS CAN COST YOU THOUSANDS

NEW! 🩺 Free CyberGuy LIVE class: Get Better Healthcare With AI Saturday, September 26 at 11 a.m. ET / 8 a.m. PT

Save your free spot at CyberGuyLive.com.

Nebty discovered DoppelCart while investigating fake shops that targeted several of its customers. Researchers noticed that stores impersonating different companies shared technical characteristics. They began following those connections through publicly available website scans.

The investigation eventually grew to roughly 119,000 associated domains. Nebty says that, to its knowledge, DoppelCart represents the largest publicly documented fake-shop cluster when measured by associated domains.

The company also makes an important point about attribution. Shared infrastructure does not prove that one person or organization controls every DoppelCart store.

Even so, the technical overlap is striking. Nebty CEO Benedikt Scheungraber told BleepingComputer that 96% of the confirmed shops shared identical build files and resolved to 27 commerce backends.

Most of the domains connected to DoppelCart use the .shop top-level domain. Nebty's September 2026 data included 118,787 distinct .shop domains linked to the cluster out of 4,361,908 .shop domains in the company's snapshot. That's 2.72%, or roughly one out of every 37 domains in that particular data set.

However, that number needs some context. Nebty says the snapshot represents domains listed in the .shop DNS zone. It does not tell us how many legitimate or fraudulent stores were operating at the same moment.

For comparison, researchers previously documented BogusBazaar, a fake-shop operation involving more than 75,000 domains. Nebty cautions that observation periods and counting methods differ between investigations, so the numbers are not perfectly comparable.

We reached out to GMO Registry, which operates the .shop domain, for comment but did not hear back before our deadline.

The days when every scam website looked like somebody threw it together in five minutes are long gone. DoppelCart sites can copy product catalogs from real companies along with descriptions, branding and other material.

In some cases, researchers found fake stores loading assets directly from the legitimate company's servers. That creates a real problem for shoppers.

You may recognize the brand. The products look right. Nothing on the page immediately screams scam because much of the material came from the real business in the first place.

Scheungraber says DoppelCart shops mimic 44,182 different brands, with a median of two clones for each brand.

Some brands received much more attention. Researchers found more than 30 shops apiece targeting companies including SodaStream, Velasca, CurrentBody, Daniel Wellington, Dreame, Horze, MOVA and SPARK PAWS.

This is where the scam can catch you. Most of us shop around before spending money online. Finding the same product at a dramatically lower price can feel like a great deal. DoppelCart stores take advantage of that reaction.

Researchers found fake shops advertising discounts as high as 65%. Of course, a steep discount does not automatically mean you're looking at a scam. Real stores run clearance sales every day.

Still, if you've never heard of the retailer and its price beats everyone else by a mile, spend another minute checking who you're buying from. CyberGuy has a full guide on the warning signs worth checking before buying from an unfamiliar website: Tips to help you tell if an online store is real or a scam.

'THE ODYSSEY' STREAMING SCAM COULD STEAL YOUR BANK INFO

The real danger starts when you decide to check out. Nebty tested several checkout pages tied to the DoppelCart cluster and found code collecting:

According to the researchers, those fields can be transmitted through WebSockets to command-and-control infrastructure in real time. So, an attacker may receive the information while you're still sitting on the checkout page.

The technique has similarities to web skimming, where malicious code captures payment information as a shopper types it into an online checkout page. We've previously broken down how that kind of attack works and why shoppers may see no obvious warning: Web skimming attacks target major payment networks.

This is the part I find especially concerning. Many of us have been trained to see a verification code from our bank as an extra layer of protection. DoppelCart can potentially turn that security step against you.

Nebty found that the checkout code can relay the one-time confirmation code issued by a victim's bank. Attackers may then try to use the code to get past protections surrounding a fraudulent transaction.

So, don't automatically enter a bank code simply because a checkout page asks for it. Read the bank's message carefully. Look at the merchant and transaction details if they're included.

If something does not match the purchase you're making, stop the transaction and contact your bank through its official app or the number printed on your card.

DoppelCart creates another headache after the purchase. Some fake shops display the real company's legitimate customer support address.

Now imagine you place an order and nothing arrives. You find the support information on the site and contact the business demanding to know where your purchase went.

The company you're calling may have no idea what you're talking about because you never bought anything from it. Nebty says legitimate businesses have received complaints from shoppers over orders those businesses never processed.

The scammer gets the payment information. Meanwhile, the legitimate company gets the angry customer and has to explain that somebody copied its store.

Nebty says it tried to contact the main hosting provider associated with DoppelCart sites but received no response. Want to see whether a brand or website appears in the DoppelCart investigation? Search Nebty's DoppelCart database at investigations.nebty-id.com/doppelcart.

APPLE PAY TEXT SCAM THREATENS $8,250 LOSS IN 35 MINUTES

A professional-looking site no longer gives you enough information to decide whether a retailer deserves your trust. Instead, slow down when you're shopping somewhere unfamiliar.

Look at the domain in your browser before entering payment information. A fake site may use a recognizable company name inside a completely different domain. If you're trying to buy directly from a well-known brand, find its official website independently. Also, don't let the padlock or HTTPS fool you. HTTPS tells you a website encrypts the connection. It does not prove the seller behind the site is legitimate. Scammers can encrypt websites too.

A 65% discount can make you want to buy before the deal disappears. That's when I would slow down. Check the product on the company's official website or compare it with a retailer you already know. If the price difference looks unusually large, investigate the seller.

Search the store's name before buying. Look beyond reviews displayed on the website itself. Search for independent complaints or reports that connect the domain to scams. Then check the company's contact information. A cloned website can look impressive while having very little legitimate history behind it.

The Federal Trade Commission recommends paying by credit card when possible for online purchases because credit cards provide protections when a transaction goes wrong. Some issuers also let you use virtual card numbers for online purchases. Availability varies by issuer. A virtual number can keep your primary card number away from the merchant and may let you shut down the virtual number if something goes wrong.

Don't treat a one-time verification code as a routine box to fill in. Read the message your bank sends. If the merchant or transaction looks unfamiliar, do not enter the code. Contact your card issuer through a trusted channel instead.

Check whether your bank or card issuer lets you receive notifications when purchases hit your account. Alerts can help you spot an unfamiliar transaction quickly. Do not ignore a small charge simply because the amount looks harmless. Any transaction you don't recognize deserves a closer look.

Strong antivirus software can help warn you about known malicious websites and dangerous links. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

However, no program catches every newly created fake shopping site. That means your own judgment still plays an important role when a store you've never heard of suddenly offers the deal of the year.

Act quickly if you think you purchased from a DoppelCart site or another fake retailer. The FTC recommends contacting the financial institution you used to make the payment as soon as possible.

Use the number on the back of your card, your bank's official app or its official website. Tell the issuer that you entered your card information on a suspected fraudulent website. Ask whether the card should be locked or replaced with a new number. If you also entered a one-time verification code from your bank, tell them that too.

Review your recent transactions and continue watching the account. If you paid the fake retailer, tell your issuer that you believe the transaction involved a scam. Also report any other charges you do not recognize. The FTC recommends asking the card issuer or bank whether it can reverse the fraudulent transaction and return your money.

If the fake store asked you to create an account and you reused a password from somewhere else, change that password on the other accounts. Give important accounts unique passwords. A password manager can help generate and store strong passwords without forcing you to remember every one.

Remember what DoppelCart checkout pages can collect. The people behind the operation may have your contact information along with payment details. Be suspicious of unexpected bank warnings, delivery messages or refund offers connected to the purchase. Scammers sometimes target people who already lost money and then pose as someone who can help recover it. Go directly to your bank or the company's official website rather than clicking a link in an unexpected message.

If you downloaded a file, installed software or gave the suspicious site additional access to your device, update your security software and run a scan with strong antivirus software. If all you did was type card information into the fake checkout, focus first on protecting the payment account and watching for fraudulent transactions.

Report suspected fraud to the Federal Trade Commission at ReportFraud.ftc.gov. Reports can help authorities identify fraud patterns and investigate scam operations.

What bothers me most about DoppelCart is how convincing these fake stores can look. You may recognize the products and the branding because scammers copied them from a real business. For me, that changes how I look at a bargain from a store I don't know. If the price seems unusually low, I want to know exactly who I'm buying from before I enter my card information. Take a minute to check the web address and search for the retailer on your own. That small pause could save you from having to replace your card or deal with fraudulent charges later.

Have you ever landed on an online store that looked completely legitimate but something made you suspicious, and what tipped you off? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report

How hurricane charity scams target you before storms hit

Thu, 17 Sep 2026 14:30:06 -0400

A hurricane-season scammer can start the day with coffee and a spreadsheet. That spreadsheet may hold names, ages, addresses, phone numbers and family details. A scammer might buy that information, pull it from people-search sites or piece it together from public sources.

That means hurricane charity scams can start before a storm even hits. By the time a hurricane dominates the news, a fraudster may already know who could respond to a donation pitch.

September is National Preparedness Month, and this year's theme is "Americans Stand Ready." While FEMA urges you to make an emergency plan and build a kit, scammers are looking for ways to turn a disaster into a payday.

NEW! Join our upcoming CyberGuy LIVE class: Get Better Healthcare With AI In this free live online class, Kurt "CyberGuy" Knutsson will show you five practical ways AI can help you take a more active role in your healthcare. You’ll learn how to organize your health history, remember important appointment details, understand complicated medical information, research prescriptions and prepare questions for your next doctor’s visit. No technical experience is needed.

19 EMERGENCY ITEMS TO BUY BEFORE YOU ACTUALLY NEED THEM — STARTING AT $7

Charity scammers do not have to wait for a disaster to start looking for targets. Data brokers and marketers have spent years collecting information about where people live, what they buy and how they respond to solicitations.

One Justice Department case shows how dangerous that kind of targeting can become. Epsilon Data Management used transactional data and a database covering 100 million U.S. households to identify "responsive buyers." Prosecutors said two executives, Robert Reger and David Lytle, spent about a decade knowingly selling targeted lists to fraudsters.

One client used those lists to defraud more than 218,000 people out of over $23.7 million. More than 12,000 victims got hit more than 20 times. A judge sentenced Reger to 10 years in prison and Lytle to four years. Epsilon also paid $150 million in penalties and victim compensation, with $122 million returned to more than 200,000 victims.

The Epsilon prosecution focused on mass-mailing fraud rather than hurricane charity scams. Still, it shows how personal data and behavioral signals can help fraudsters choose targets before a pitch lands.

Separate FBI data shows the cost of charity fraud. The FBI's Internet Crime Complaint Center recorded 662 charity complaints and $7,907,609 in reported losses in 2025.

A scammer does not need a history of bad donations to target you. Fraudsters can reach people through purchased lists, public records, robocalls and other marketing channels.

James Trankle ran three fake charities, including the "Disabled and Paralyzed Veterans Fund," the "National Breast Cancer Awareness Fund" and the "Children's Leukemia of America Fund." He mailed solicitations to thousands of people and collected more than 1,600 personal checks. Then he used donor banking information to create counterfeit checks. Many victims were older adults. A judge sentenced him to five years in prison.

Travis Peterson ran a six-year scheme using millions of robocalls and other outreach to solicit donations for sham veterans' charities. Prosecutors said he often targeted senior citizens. A judge sentenced him to 41 months in prison and ordered him to pay $541,032.10 in restitution.

These cases show why an unexpected charity pitch deserves a closer look, especially when the caller already knows personal details about you.

MINNESOTA NONPROFIT ACCUSED OF SIPHONING $6.5M TO FUND VEGAS TRIPS, LUXURY CARS, PRIVATE LIQUOR STORE

Natural disasters create urgency and confusion while bringing out people's desire to help. Scammers know that. After Hurricane Helene, FEMA warned that thieves may try to use stolen names, addresses and Social Security numbers to apply for assistance in other people's names. FEMA also warned residents to be alert for impostors posing as inspectors or disaster workers.

The FTC has warned that scammers quickly exploit weather emergencies with fake charities and copycat organizations. Some imitate real charity names or create websites that appear tied to a disaster.

Meanwhile, the Atlantic hurricane season runs through November 30, and NOAA identifies September 10 as the climatological peak. That puts National Preparedness Month right in the middle of the busiest part of the season. If you want to see how much personal information may be exposed online, a free scan can help you find some of the data that appears on broker and people-search sites. Get a free scan to find out if your personal information is already out on the web: Cyberguy.com/FreeScan

You can still be generous. The key is slowing down long enough to verify who wants your money and taking a few steps to protect yourself before you donate.

Look it up on Charity Navigator, BBB Wise Giving Alliance at Give.org, CharityWatch or the IRS Tax Exempt Organization Search. Avoid links in unexpected texts or emails. Instead, go directly to the charity's official website.

The FTC warns that scammers may insist on cash, gift cards, wire transfers, payment apps or cryptocurrency. If you donate, a credit card or check gives you more protection and a clearer paper trail.

A demand to donate immediately should make you stop and verify the organization before sending money. Legitimate charities will give you time to research them and decide whether you want to give.

Scammers may use names that sound like established charities or web addresses that differ by only a few characters. Before donating, check the spelling of the charity's name and make sure you are on its official website.

5) Do not trust donation links in texts, emails or social media posts

A donation request can look convincing even when it comes from a compromised account or impersonates a real charity. Do not assume a fundraiser is legitimate because a friend shared it. Go directly to the charity's official website instead of clicking the donation link and use strong antivirus software to help protect you from malicious links, phishing sites and malware that may be hiding behind fraudulent donation requests.

Review your credit card or bank statement after making a donation. Confirm that you were charged only the amount you approved and check that you were not signed up for recurring donations you did not intend to make. Keep the receipt or confirmation for your records.

If something feels wrong, report it. File a report with the FTC at ReportFraud.ftc.gov or the FBI at ic3.gov. You can also call the AARP Fraud Watch Network Helpline at 877-908-3360.

Verifying every charity request helps, but your personal information may already be available through data brokers and people-search sites. Removing that data can make it harder for scammers to build a detailed profile around you and use personal details to make a pitch seem believable.

One option is to use a personal data removal service that can contact data brokers and people-search sites on your behalf. These services can help reduce how much of your information is publicly available and may continue monitoring for data that reappears over time. You can also make removal requests yourself, although that process can take more time and repeated follow-up.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

Hurricane charity scams work because disasters create urgency while personal data makes scam pitches more believable. The Epsilon case shows how fraudsters can use targeted consumer lists, while the Trankle and Peterson cases show how fake charities can exploit people who want to help. FEMA and the FTC continue to warn that scammers take advantage of disasters and stolen personal information. Before you donate, verify the organization independently, slow down when someone pressures you and use a payment method that gives you better protection. Reducing the amount of personal information available through data brokers can also make it harder for scammers to build a detailed profile around you. You cannot stop hurricane season, but you can make yourself a harder target.

Have you ever received a disaster-relief donation request that made you suspicious? Let us know by writing to us at Cyberguy.com

Fox News AI Newsletter: Trump shreds AI doomer 'hoax'

Thu, 17 Sep 2026 12:39:15 -0400

IN TODAY'S NEWSLETTER:

- Trump calls Nvidia CEO Jensen Huang during summit, dismisses AI fears as 'hoax'

- Facebook co-founder Dustin Moskovitz's 'effective altruism' network tied to AI regulation push

- Sam Altman says OpenAI's won't go public in 2026 amid AI safety concerns

FUTURE ON THE LINE: Nvidia CEO Jensen Huang received a surprise phone call from President Donald Trump on Monday, in which the president dismissed fears that AI poses an existential threat to humanity and argued against calls to slow frontier AI development.

LISTING LIMBO: OpenAI CEO Sam Altman signaled that the company will delay its initial public offering (IPO) amid concerns about the safety and alignment of AI models given potential risks they could pose to society.

DIGITAL GUARDRAILS: Microsoft on Monday revealed a draft of a new "Humanist AI Code of Conduct" that outlines the principles that will govern its development of AI models in an effort to get feedback ahead of publishing a revised version later this year.

STEP FORWARD: Researchers are now using artificial intelligence to help tailor cancer treatments and uncover overlooked uses for existing medicines. Other systems can search microscopic images or identify subtle biological signals that people could easily miss.

OPINION: Every morning brings a new warning about "artificial intelligence" (AI) along the lines of, "We are all going to die." By afternoon, or by the next day at the latest, comes the counter-warning: "Stand down. Nothing to see here."

PLAYING SAFE: OpenAI CEO Sam Altman outlined two scenarios that he sees could derail progress in developing artificial intelligence (AI) and must be avoided.

OPINION: The cat is out of the bag. Simmering concerns about AI agents going rogue, plotting against their owners and hacking outside companies, and new systems coming perilously close to being uncontrollable by humans, are boiling over. Industry insiders warning that AI bots might kill us all are stoking our worst nightmares.

ZONING WARS: Democratic lawmakers are calling for tighter restrictions on data centers, while Republicans say the facilities could boost the economy and keep the U.S. ahead in the artificial intelligence (AI) race.

DOOM FOR DOLLARS: Concerns about artificial intelligence spelling doom for the human race are being linked to a "cult-like" philanthropy movement known as "effective altruism" supported by billionaire Democratic megadonor and Facebook co-founder Dustin Moskovitz, according to a policy analyst.

SOURCING SOLUTION: Treasury Secretary Scott Bessent on Tuesday told lawmakers in Congress that the U.S. needs to foster open artificial intelligence (AI) models to compete with those made by Chinese firms.

'DOOM' AND BOOM: "Doomer"-driven AI regulation could kneecap the U.S. against China while helping tech giants lock in their lead over smaller startups, a former Pentagon AI official who also worked for AI company Palantir Technologies told Fox News Digital.

WAKE-UP CALL: Former President Barack Obama urged Democrats during a private fundraiser in New York City Thursday to place artificial intelligence near the center of their political agenda ahead of the midterms and 2028 presidential race while warning that the technology could become dangerous without greater oversight as voters increasingly raise concerns about jobs, privacy and data centers.

GUARDRAIL DEBATE: House Speaker Mike Johnson, R-La., rejected an emergency moratorium on artificial intelligence development Sunday during CNN's "State of the Union," warning that slowing American innovation could allow China to pull ahead as tech executives and lawmakers intensify calls for new AI safety measures.

NUCLEAR ECHOES: Anthropic CEO Dario Amodei on Sunday compared the U.S.-China artificial intelligence (AI) race to the Cold War with the Soviet Union, warning both nations must manage the threat of "potential destruction" from each other.

FOLLOW FOX NEWS ON SOCIAL MEDIA

Facebook

Instagram

YouTube

SIGN UP FOR OUR OTHER NEWSLETTERS

DOWNLOAD OUR APPS

WATCH FOX NEWS ONLINE

Fox News Go

STREAM FOX NATION

Fox Nation

Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.

Driverless racing goes global. Will fans care?

Thu, 17 Sep 2026 09:12:43 -0400

Autonomous race cars are starting to show up on some very famous tracks. On Sept. 3, the Indy Autonomous Challenge brought its driverless race cars to WeatherTech Raceway Laguna Seca in California. Purdue AI Racing set a new autonomous track record and finished second in a head-to-head passing competition. Italy's Unimore Racing took the win.

Two days later, autonomous racing took another step forward in Europe. Five teams brought fully autonomous race cars to Italy's Imola Circuit for the Abu Dhabi Autonomous Racing League's first race outside Abu Dhabi. Team Kinetiz came from fourth on the grid to win the 12-lap event.

Now autonomous racing has reached major circuits in the U.S., Europe and Abu Dhabi. The technology clearly travels. The bigger question is whether the fans will follow.

WAYMO RECALLS ROBOTAXIS OVER CONSTRUCTION-ZONE RISK

The races at Laguna Seca and Imola came from two different autonomous racing programs. The Indy Autonomous Challenge brings together university teams that develop AI drivers for identical race cars. At Laguna Seca, nine university teams from North America, Europe and Asia were scheduled to compete.

The Sept. 3 event pushed the competition further by adapting the Indy Autonomous Challenge's passing format to a road course for the first time. Instead of several cars racing as a pack, two autonomous cars take turns in attacking and defending roles. The software has to manage spacing and decide when it can safely make a move.

Purdue became the only American team to qualify for that portion of the competition. Its car also set a 1:27.731 autonomous lap record before finishing runner-up to Unimore. Then came Imola. A2RL brought autonomous racing from its home at Yas Marina Circuit in Abu Dhabi to Europe for the first time. The league says Imola represents another step toward its goal of creating an international championship for fully autonomous race cars.

Imola raised the difficulty again. Kinetiz, Constructor Racing, PoliMOVE, Unimore Racing and two-time A2RL champion TUM entered the event. Each team competed with identical EAV-25 race car hardware based on the Dallara Super Formula SF23 platform. That means much of the competitive advantage came from the software each team developed.

The AI had to figure out where the car was, understand what was happening around it and decide what to do next. Then it had to turn those decisions into braking and steering inputs at racing speed.

TUM ran into a technical problem on the formation lap and returned to the pits before the rolling start. That left the remaining cars to fight for position. Unimore had started from pole and led the race. Then things went wrong.

WAYMO VEHICLES 'PUTTING AMERICAN LIVES AT RISK,' SOURCE WARNS AMID AUTONOMOUS VEHICLE COMPANY'S MASSIVE RECALL

Unimore set the fastest lap of the race before suffering a technical problem that caused the car to slow dramatically. PoliMOVE was close behind and hit the slowing Unimore car from the rear. The collision ended both teams' runs. That opened the door for Kinetiz.

The Singapore-UAE team had started fourth but moved into the lead and won by 10.963 seconds over Germany's Constructor Racing. PoliMOVE was classified third. The crash may also be one of the most revealing parts of the race.

Driving fast on an empty track is one challenge. Reacting when the car directly in front of you suddenly loses speed creates a much harder problem. That is exactly the type of unpredictability autonomous systems have to learn to handle.

These cars are moving a lot faster than you might expect. At Imola, PoliMOVE hit about 157 mph with nobody behind the wheel. During testing, the fastest autonomous lap came within 0.85 seconds of a benchmark lap set by Super Formula driver Juju Noda. That is surprisingly close.

In Abu Dhabi last year, former Formula 1 driver Daniil Kvyat still set a faster lap than the autonomous challenger, but the gap had narrowed to just 1.58 seconds. So the question has changed. We already know these cars can get around a racetrack at serious speeds. Now we are seeing what happens when they have to race another car and make those decisions in real time.

Here's where autonomous racing faces a challenge that has nothing to do with speed. Part of the fun of racing is having someone to root for. Fans follow drivers, get to know their personalities and pick favorites. Take the driver out of the car and suddenly that connection looks very different.

With autonomous racing, you are rooting for the team behind the software. For some tech fans, that may be enough. Watching engineers figure out how to make an AI-powered race car faster and smarter could become part of the appeal. But will people come back race after race?

We are already starting to get a sense of that. The Indy Autonomous Challenge returned to Laguna Seca this year and moved from solo time trials in 2025 to head-to-head passing on the road course. Just two days later, five autonomous race cars competed together at Imola in Italy.

Now the harder part may be building the kind of connection that keeps people watching after the surprise of seeing an empty cockpit wears off.

There is another reason these competitions are worth watching. Racetracks give autonomous driving researchers a place to push software extremely hard. At Laguna Seca, Purdue's team spent weeks practicing and used simulation to find bugs in its software before race day. At Imola, the AI had to deal with high speeds and other autonomous cars making their own decisions.

That pressure can reveal weaknesses quickly. A passenger car on a public road faces a very different environment. It has to deal with pedestrians, intersections and countless situations that do not exist on a closed racetrack.

So winning an autonomous race does not mean the same software is ready to drive you around town. Still, the basic challenge overlaps. An autonomous vehicle has to understand what is happening around it and decide how to respond. Racing forces researchers to test those capabilities at the edge of what the vehicle can handle. That is where this becomes relevant even if you never watch a single autonomous race.

Here's what gets me about autonomous racing. We have gone from asking whether AI can keep a race car on the track to watching these cars chase each other at more than 150 mph. That is pretty remarkable. But speed alone will not turn this into a sport people care about. Part of what makes racing so compelling is the person inside the car. You follow the driver, learn their personality and pick someone you want to win. When the cockpit is empty, that connection changes completely. Could fans eventually start rooting for the teams behind the technology instead? I can see Purdue students and engineers developing their own following as these competitions grow. But autonomous racing still has to prove that watching great software compete can be as exciting as watching a great driver push a car to the limit. The cars are clearly ready to race. Now we get to see whether the fans are ready to care.

Would you watch an entire race with nobody behind the wheel? Let us know by writing to us at Cyberguy.com.

Woman loses nearly $1M in LinkedIn romance scam

Wed, 16 Sep 2026 12:52:27 -0400

A message from a stranger on LinkedIn probably would not set off alarms for most of us. Especially when that person appears connected to someone you already know. That is how Gaby's story began. Gaby recently joined me on "The CyberGuy Report Podcast" at cyberguy.com/podcast/ to explain how an online relationship that began in 2019 grew into a devastating romance scam. Over roughly two years, she says she sent close to $1 million to a man she never met. The person Gaby thought she had fallen for was using the photos and likeness of a real man named Brian Haugen, who also joined us to explain what it has been like watching scammers use his photos to target women around the world.

Gaby described how quickly the attention pulled her in. "The words that he spoke, it was like a drug," she told me. The compliments kept coming, the relationship grew more intense and eventually the requests for money began. Her experience is also part of "Hey Beautiful: Anatomy of a Romance Scam," the three-part Hulu docuseries about women who believed they were communicating with the same man.

AI IS CHANGING MODERN DATING, BUT EXPERTS WARN IT'S MAKING PEOPLE 'RELATIONALLY STUPID'

What makes Gaby's story so revealing is how slowly the deception took hold. The scammer built trust over time, returned some of the money she initially sent and always seemed to have another explanation when they could not meet. By the time the biggest requests arrived, the relationship already felt very real.

NEW! Join our upcoming CyberGuy LIVE class: Get Better Healthcare With AI

In this free live online class, Kurt "CyberGuy" Knutsson will show you five practical ways AI can help you take a more active role in your healthcare. You’ll learn how to organize your health history, remember important appointment details, understand complicated medical information, research prescriptions and prepare questions for your next doctor’s visit. No technical experience is needed.

Register for free now at CyberGuyLive.com

Gaby says the first contact came through LinkedIn in March 2019. That detail helped lower her guard. She primarily used LinkedIn to connect with business contacts. More importantly, the stranger appeared connected to one of her former colleagues. "So I thought, oh yes, she knows him. Okay. That's fine. So let's contact," Gaby recalled.

That small connection gave the profile credibility it had not actually earned. Scammers can take advantage of exactly that type of information. The FTC says criminals may study what people post on social media and use those details to shape a more convincing approach. The FBI also advises people to be careful about what they make public online because romance scammers can use that information when targeting potential victims. Gaby's experience shows why a mutual connection on a social platform should never replace independent verification.

The fake Brian did not open the relationship by demanding hundreds of thousands of dollars. Gaby says they spent weeks talking about his supposed business activities. He claimed he worked in the gemstone trade and told her he had traveled to Vietnam. Then came a problem. He said his bank account had been blocked. Gaby remembers sending about $10,000 at first. Then something happened that dramatically changed how she viewed him. He gave the money back. That repayment helped convince Gaby that she was dealing with someone she could trust. As she explained, "I started to trust him because he sent me back money."

That move is especially revealing. If someone takes your first payment and disappears, you know you have a problem. Returning money can create the opposite reaction. It makes the next request feel less risky because you have already seen what appears to be proof that the person keeps a promise. The requests continued. Gaby recalls amounts of $10,000, $20,000 and $40,000 adding up over time. Eventually, she says the man told her he needed about $200,000 to deal with taxes and customs fees. He promised he would repay her once the supposed financial roadblock disappeared.

At some point, an online relationship has to enter the real world. Gaby thought about traveling to Vietnam to see him. The man pushed back. According to Gaby, he said he was under stress and did not want her seeing him when he did not look his best.

They continued talking about meeting. Then the COVID pandemic made international travel far more difficult. I asked Gaby whether the fake Brian always seemed to come up with another reason they could not see each other. She agreed that he did. The FBI identifies that pattern as a major romance scam warning sign. Scammers may promise to meet and then repeatedly cancel because of an emergency or another obstacle. The agency advises people to become suspicious when months pass without an in-person meeting.

Eventually, the story shifted from business trouble to a supposed health crisis. Gaby says the man claimed he needed surgery. She recalled how quickly the request became tied to the relationship itself: "Suddenly he told me he needs surgery to prove my love. I sent 500,000."

That is a staggering amount of money. Yet by this point, Gaby was dealing with someone she had communicated with for a long time. He had become part of her daily life. He had also returned money before. The financial emergency came after the emotional groundwork. Federal authorities repeatedly warn about that progression. Romance scammers can spend weeks or months building trust before introducing an emergency and asking for money. The FBI warns consumers never to send money to someone they have only communicated with online or by phone.

FLORIDA MAN WHO ALLEGEDLY LURED WOMEN WITH DATING APP COULD HAVE MORE VICTIMS: AUTHORITIES

The person in the photographs was real. The identity behind the messages was another story. Brian Haugen joined me in the studio to explain what had happened to his images. "They steal my photo off of a social media account," Brian said. He explained that scammers then used those photos on accounts with different names to approach women and ask for money. That makes Brian another victim of the scheme.

He also described how far the identity abuse had spread. Brian said he had become nervous about traveling because "there's multiple passports that have my photo on it in people's different names." Imagine seeing your face attached to conversations you never had with people you have never met. The FBI says romance scammers frequently use photographs stolen from someone else rather than images of themselves.

Brian's experience became part of Hey Beautiful: Anatomy of a Romance Scam. The Hulu docuseries follows women from around the world who fall for an online boyfriend who turns out to be someone else. The series has three episodes and originally debuted in 2025. What makes the story useful for anyone watching is the playbook behind the deception. Romance fraud can rely on stolen identities, information collected online and carefully timed emotional manipulation. Some criminal operations also involve multiple people rather than a single scammer working alone.

Brian described the people who used his identity as "Yahoo boys," a term often associated with certain online fraud groups. That should not be taken to mean that every romance scam comes from one group or one country. Romance fraud can originate in many places and take many forms. The consumer lesson remains the same: do not assume you know who is behind an online profile simply because the pictures look convincing or the person's story feels personal.

Social platforms have become a major starting point for these schemes. According to FTC data released in April 2026, nearly 60% of people who reported losing money to a romance scam in 2025 said it started on social media. Reported losses from romance scams that began on social media reached about $298 million during the year. That makes sense when you consider how much information many of us put online. A scammer may see your photographs or learn about your job. Posts may reveal that you recently traveled, moved or went through a major change in your life.

The FTC says scammers can use information from profiles to tailor their approach before inventing a crisis that requires money. For another example of how personal information can give criminals an opening, see our CyberGuy report on what a scammer can learn by Googling your name.

Gaby eventually began questioning the person she had been talking to. She had followed the real Brian Haugen and booked an online session connected to him. That gave her a chance to communicate with the actual man whose face appeared in the photos. The fake Brian tried to explain away what she had discovered, but Gaby wanted stronger proof. She asked him to send her a message from the same email account connected with the legitimate Zoom meeting invitation. He stalled.

Gaby says one week passed, then another. She kept pushing for the verification. Finally, she told him, "Otherwise I don't believe you anymore." He never produced the email she requested. For Gaby, that was the moment the deception finally fell apart. Her experience also offers an important lesson. When you have doubts about someone's identity, find an independent way to check their story. Do not let the person you suspect control all the evidence.

Gaby's story shows how difficult these scams can be to recognize once trust takes hold. These steps can help you spot warning signs earlier and make it harder for a scammer to manipulate you.

Your social media profile can give a stranger plenty of material to work with. Review who can see your posts and photographs. Consider hiding your friends list and avoid publicly sharing details about your routine or upcoming travel.

The FTC recommends limiting who can see your social media posts and contacts so scammers have less information they can use to approach you. People-search websites and data brokers can expose additional information, including old addresses and contact details. You can remove information from many of those sites yourself. If you would rather automate some of that work, a personal data removal service can submit removal requests and continue checking participating sites. Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

SHE DIDN’T EXIST, BUT THE MONEY DID: A REAL INFLUENCER SOUNDS THE ALARM ON AI DECEPTION

A familiar photograph or mutual connection does not prove an account belongs to the person it claims to represent. Look at how long the account has existed and review its activity. Check whether another profile uses the same name or photographs. If the person claims to know one of your friends or colleagues, contact that person separately and ask about the connection. Also run a reverse image search on the profile picture. The FBI recommends this when you suspect romance fraud. If the image appears under another person's name, take that warning seriously. Keep in mind that a clean search does not guarantee the person is legitimate. A scammer may use a newly stolen photograph or an AI-generated image that has never appeared online before.

A video call can still be useful. Someone who repeatedly refuses to appear on camera should raise your suspicions. However, seeing a face on your screen no longer proves who is really behind an account. The FBI warns that scammers can use deepfake technology or involve other people in video conversations. Compare what the person tells you with information you find independently. Look for an online history that makes sense and never send money, because a video call convinced you the person must be real.

Be cautious when someone you recently met online becomes intensely romantic very quickly. The FBI advises people to go slowly and ask plenty of questions. It also helps to tell someone you trust about the relationship, especially before sending money. A friend or family member may notice contradictions that are much harder to see when you are emotionally involved.

A sudden request could involve surgery, a frozen bank account or another supposed emergency. Whatever the story, stop before sending money to someone you have never met. Also refuse any request to receive money in your account and forward it somewhere else. The FBI warns that romance scam victims can become unwitting money mules when scammers convince them to move stolen funds.

Money may not be the only thing a romance scammer wants. They may also ask for account credentials, copies of identification or other sensitive information that can lead to identity theft. Even with good security habits, your Social Security number, financial information or other personal data may already be exposed without you knowing it. Consider using an identity theft protection service that monitors for suspicious activity tied to your personal information and alerts you when something needs your attention. Depending on the service and plan, protection may also include credit monitoring, financial account alerts and help recovering from identity theft. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.

You should also review your credit reports regularly, watch your bank and credit card accounts for unfamiliar activity and change passwords immediately if you believe an account has been compromised.

If you discover a scam, do not immediately delete the conversation. Save messages, emails, screenshots and payment records. Keep links to the scammer's profiles as well. If you already sent money, contact your bank or payment provider immediately and report the fraud. The FTC says acting quickly may improve your chances of stopping or reversing certain transactions. You should also report the scam to the FBI's Internet Crime Complaint Center and the FTC.

A previous scam victim can become a target all over again. The FTC warned in August 2026 that recovery scammers may contact people who have already lost money and promise to get it back. They may claim to represent a government agency, law firm or recovery service. Then they demand an upfront fee or ask for financial information. Do not pay someone who unexpectedly contacts you and promises to recover money you lost to a scam.

What stays with me about Gaby's story is how normal the beginning sounded. She was on LinkedIn. The profile seemed to share a professional connection with her. He talked about business. Later, he borrowed money and actually returned it. Each interaction gave the next one more credibility. As I said during our conversation, "Here's what I know about romance scams. They are highly involved. They take weeks if not months of time to evolve." That time gives scammers a chance to become part of someone's routine before the biggest financial request ever arrives. It is also why we need to watch out for people we care about. During the podcast, I pointed to another warning sign: "If any of the people that you love and your family or really good friends suddenly go quiet and claim that they're in love with someone from far away, or that they're dating a celebrity, it happens. Really. It's time for a reality check." That reality check does not have to start with an accusation. Ask questions. Listen to the story. Find out whether the person has actually met their new partner and whether money has entered the relationship. Sometimes an outside voice can spot the pattern before another transfer goes through. Hear Gaby's full story and my conversation with the real Brian Haugen on "The CyberGuy Report Podcast" at cyberguy.com/podcast/.

Have you ever connected with someone online who seemed completely genuine at first, only to discover something about their story did not add up? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

iOS 27 is here: 10 iPhone features you’ll want to try now

Wed, 16 Sep 2026 08:23:16 -0400

Your iPhone is getting a major update. Apple released iOS 27 to the public on Monday, Sept. 14, bringing a wave of new features along with the long-awaited Siri AI beta.

However, there is much more happening under the hood. Safari can now watch websites for changes. The Photos app gets powerful new editing tools. Apple also says it has made iOS faster across compatible iPhones.

Some of these changes could save you from digging through apps or hunting for information yourself. Others give you more control over how your iPhone looks and works. Here are the iOS 27 features I think are worth trying first, along with how to find them.

NEW! Join our upcoming CyberGuy LIVE class: Get Better healthcare With AI

Register for free now at CyberGuyLive.com.

8 BIGGEST THINGS WE LEARNED FROM APPLE'S 2026 EVENT

The good news is that Apple kept support fairly broad. iOS 27 works with the iPhone 11 family and newer models. It also supports the second-generation iPhone SE and later. That means plenty of people can upgrade without buying a new phone. However, the biggest AI features have tougher hardware requirements. Apple Intelligence and Siri AI require an iPhone 15 Pro or iPhone 15 Pro Max, or an iPhone 16 model or later. So, an iPhone 11 can run iOS 27, but it will miss Siri AI and other Apple Intelligence features.

Keep in mind that many of the features below, including the new AI photo tools, Safari Notify Me and Call Context, also require an Apple Intelligence-compatible iPhone. Siri AI is rolling out in beta in English on supported devices. Apple says support for additional languages will follow later. Availability can also vary by region.

Apple says iOS 27 brings performance improvements across the system. In Apple's testing, apps can launch up to 30% faster, new photos can load in the Photos app up to 70% faster and AirDrop transfers can be up to 80% faster. Apple also says iOS 27 improves transitions between Wi-Fi and cellular connections and makes Mail search more relevant. Those are Apple's own figures, so your results will vary depending on your iPhone and how you use it.

Before installing a major update, I recommend backing up your iPhone. Also, connect to Wi-Fi and make sure you have enough battery life or plug your phone into power.

Then follow these steps:

If iOS 27 does not appear immediately, check again later. Apple software releases can take some time to appear on every compatible iPhone.

Apple Intelligence moves deeper into the Photos app with Spatial Reframing. It lets you change the composition and perspective of a photo after you took it. Apple Intelligence can generate additional parts of the scene when your new framing exposes areas that were outside the original shot.

Because AI may create new portions of the scene, I would zoom in and inspect the result before sharing an edited photo. Generative tools can still produce odd details.

Maybe you took a photo too close to your subject. The new Extend tool lets you expand beyond the original edges while Apple Intelligence generates the missing surroundings.

The feature will not work with every photo. Apple also says its intelligent photo-editing tools can be subject to daily usage limits.

Apple has also upgraded Clean Up in Photos. The tool can now tackle larger unwanted objects and distractions while using AI to fill in the space left behind.

This could be especially handy for removing a person in the background or another distraction that pulls attention away from the subject.

Apple is also giving Image Playground a major upgrade in iOS 27. You can now generate images in many more styles, including photorealistic ones. You can also start with an existing image and describe how you want Apple Intelligence to change it.

For example, you could ask it to change the setting or adjust the overall look without starting from scratch. As with Apple’s other generative image tools, usage limits may apply. I would also look closely at the results before sharing them, especially when people or detailed objects appear in the scene.

This may end up being one of my favorite iOS 27 features because it solves a very common frustration. Safari’s new Notify Me feature can monitor a webpage for a change you care about. For example, you could ask Safari to watch for a product coming back in stock. It can also monitor a page for a price change. Instead of reopening the same page over and over, Safari can alert you when something changes.

You can choose hourly, daily, weekly or monthly checks. However, Notify Me does not yet work on every website. Safari can also automatically organize open tabs by topic, which could help anyone whose browser looks like a digital junk drawer by the end of the week.

APPLE AI SECURITY UPDATE PROVES HACKERS MOVE FAST

Apple Intelligence is also getting involved when you call businesses. A new feature called Call Context can surface useful information from other apps while you are on a call.

Say you call an airline about a reservation. Call Context can pull up a confirmation code from Mail rather than forcing you to leave the Phone app and search for it while someone waits on the other end.

There is no complicated workflow to learn. When you place a supported business call and Apple Intelligence identifies relevant information, it can surface that information during the call.

Apple says its system determines what could be useful based on who you are calling. It can do that without analyzing the audio from your call. That is the kind of AI feature I want to see more of, because you do not have to change your behavior to benefit from it.

Last year, Apple introduced the transparent Liquid Glass design across iOS. Some people liked the new look. Others found certain screens harder to read. With iOS 27, Apple says it has improved contrast and readability. More importantly, you now have greater control over how transparent the interface appears. Apple added a slider that lets you move the look from ultraclear toward fully tinted.

The changes appear in real time as you move the slider. The setting applies across iOS, including places such as Control Center, notifications and app overlays. This is a small change, but I like that Apple is giving people a choice rather than assuming one visual treatment works for everyone.

If you are always digging around for the timer, exposure or another Camera setting, iOS 27 lets you keep the controls you use most right above the camera frame. Apple starts you with Flash and Live Photo there, but you can customize the row with other tools you use regularly.

Depending on your iPhone and camera mode, available controls can include Flash, Live Photo, Timer, Exposure, Styles and Aspect. Apple also gives you a Reset to Essentials option if you want to return to the default setup.

Apple has put a lot of work into parental controls in iOS 27. The new Ask to Browse feature lets a child request access to a website that has been restricted. The parent receives that request through Messages and can approve or decline it.

You first need Family Sharing set up with your child in the family group.

When your child tries to visit restricted web content, they can send an Ask to Browse request for your approval. Apple has also expanded Communication Safety. It already helps protect children from nudity in supported Apple services. With iOS 27, Apple says the system can intervene when it detects gore or violent content in shared photos and videos.

Find My gets a useful privacy upgrade in iOS 27, especially if you only want someone to see your location for a limited amount of time. You can now choose a custom duration for location sharing or set an exact date and time for it to stop. That could come in handy on a trip, during an event or anytime you want temporary location sharing without having to remember to turn it off later. You can also pause location sharing until the end of the day for specific people. Apple says this can be useful when you want to keep something like a surprise party or gift-shopping trip private.

If you already share your location with someone, you can also pause sharing with that person until the end of the day from their location-sharing options. I like having more control here because location sharing often makes sense for a specific situation. You may want someone to know where you are during a weekend trip without giving them indefinite access afterward.

Shortcuts can be incredibly powerful, but building one manually can get complicated fast. iOS 27 makes the process much easier with Describe a Shortcut. You can tell Apple Intelligence what you want your iPhone to automate in plain English. Shortcuts then connects the actions needed to build it. For example, Apple says you could ask your iPhone to message someone with your ETA when you leave work. You could also build automations that work across supported apps.

This could make Shortcuts much more approachable for people who have always liked the idea of automating their iPhone but never wanted to figure out how all the individual actions fit together. Some Shortcuts that rely on Apple’s cloud-based AI models may be subject to daily usage limits.

ASKED SIRI TO CALL YOUR BANK? A SCAM COULD COST THOUSANDS

This is the feature many iPhone owners have been waiting for, but I would treat it differently from the 10 features above. Siri AI is rolling out as a beta in English on supported devices, so expect some rough edges while Apple continues to improve it.

Siri AI can hold more natural conversations and handle follow-up questions. It can also use personal context from information on your device.

For example, you could ask Siri to find an old photo without remembering when you took it. You can also ask it to locate something buried in an email or note. Siri can take more actions inside apps, too. Apple says it can work across messages, emails, photos and other supported apps. Siri can also pull information from the web when you ask broader questions.

The real test will be whether Siri can save you from bouncing between apps. I have always found voice assistants most useful when they remove a few steps from something I already wanted to do. If Siri AI can reliably find a buried email or pull up a photo from years ago based on a vague description, that could change how often people use it. Because this is still a beta, I would double-check important answers or actions before relying on them.

Apple has also given Siri its own app, which makes it feel more like the AI assistants people have grown used to using.

You can also pin conversations you want to keep handy. Apple says you can invoke Siri AI by saying "Hey Siri," pressing the side button or swiping down from the Dynamic Island on supported iPhones.

What I like most about iOS 27 is that some of its best features solve problems you actually run into. Safari can keep an eye on a webpage so you do not have to. The new photo tools could rescue a shot you thought was unusable. Find My also gives you better control over how long someone can see your location. I am especially interested in what Apple Intelligence can do with Shortcuts. Describing an automation instead of building it action by action could finally make Shortcuts approachable for people who have always found it too complicated. Siri AI is still the feature I will be watching most closely. Apple is asking us to trust Siri with more personal context and more complicated requests, so getting the answers right will be critical. The fact that Siri AI launches as a beta tells me we should expect some bumps along the way. What I want from AI on my iPhone is pretty simple. Save me time without making me think about the technology doing the work. If iOS 27 can consistently do that, these features could become the ones you use every day without even thinking about them.

What would Siri AI have to prove before you let it handle more of your day? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report

DMV breach confirmed as hackers claim 200,000 records stolen

Tue, 15 Sep 2026 15:30:22 -0400

Most of us hand over a lot of personal information to the DMV because we have no choice. Your address, birth date, driver's license information and other identifying details can all end up in government systems. That is why a breach involving driver records deserves attention.

Florida officials have now confirmed that the Florida Department of Highway Safety and Motor Vehicles, or FLHSMV, experienced a data breach. The agency says it learned about the incident on Sept. 4, quickly mitigated it and has seen no further breach or ongoing unauthorized access.

The confirmation follows claims from the ShinyHunters extortion group that it accessed Florida's Driver and Vehicle Information Database, known as DAVID, and stole more than 200,000 driver records.

Florida has not confirmed that record count or publicly said exactly what information was taken. Here's what ShinyHunters claims happened, what Florida says its investigation found and what drivers should do now.

INSURANCE BREACH EXPOSES 7M DRIVER'S LICENSES

NEW! Join our upcoming CyberGuy LIVE class: Get Better Health Care With AI

In this free live online class, Kurt "CyberGuy" Knutsson will show you five practical ways AI can help you take a more active role in your health care. You’ll learn how to organize your health history, remember important appointment details, understand complicated medical information, research prescriptions and prepare questions for your next doctor’s visit. No technical

experience is needed.

Register for free now at CyberGuyLive.com

FLHSMV says its investigation traced the breach to credentials belonging to a single Plant City Police Department user. According to the agency, those credentials were improperly stored on the employee's personal electronic device. A criminal actor was then able to take advantage of them.

That explanation gives us the first official account of how the breach occurred. It also differs from the access method ShinyHunters previously described.

FLHSMV says it notified the Florida Office of the Attorney General as required under state law. The agency is also working with the Florida Digital Service and Florida Department of Law Enforcement. The criminal investigation remains ongoing. Officials say additional information will be released at an appropriate time.

ShinyHunters says it stole more than 200,000 driver records from DAVID. BleepingComputer reported that the group provided a screenshot of a DAVID record belonging to Jeffrey Epstein as evidence that it had accessed the system. The screenshot reportedly contained an address, Social Security number, birth date, driver's license information and registered vehicle details.

DAVID can contain far more than a person's basic driver's license information. Government records describing the system show that authorized users may have access to driver information, photographs, signatures, vehicle history, insurance information and other identifying records.

However, FLHSMV still has not disclosed how many records were accessed or stolen. The agency also has not confirmed ShinyHunters' claim that more than 200,000 records were taken.

CyberGuy reached out to FLHSMV for additional comment, but did not hear back before our deadline.

ShinyHunters originally told BleepingComputer that it breached DAVID through a password-reset flaw. The group claimed that weakness allowed it to compromise multiple accounts, allegedly including accounts belonging to DMV employees and an FBI agent. ShinyHunters said it then moved through DAVID record IDs and downloaded associated pages and driver files beginning Sept. 3. The group later said it had lost access and believed the password-reset issue was being patched.

Florida's investigation now points somewhere else. FLHSMV says the attacker took advantage of credentials belonging to one Plant City Police Department user that had been improperly stored on a personal electronic device. The agency has not backed ShinyHunters' claim that a password-reset flaw allowed the group to compromise multiple accounts. So, for now, the password-reset explanation remains ShinyHunters' version of events, while compromised police credentials are the access method Florida has publicly identified.

DAVID serves authorized government users rather than ordinary public searches. FLHSMV says its Bureau of Records manages access to driver records through DAVID for law enforcement and other approved entities. The agency also audits users for compliance.

Florida policy treats personal information in motor vehicle records as confidential. That information can include Social Security numbers, driver identification numbers, addresses and medical or disability information. That kind of information can give criminals powerful material for identity theft.

Imagine getting a call from someone claiming to represent a government agency. The caller already knows your address, birth date and driver's license information. Suddenly, the scam sounds far more convincing.

IS YOUR SOCIAL SECURITY NUMBER ON THE DARK WEB?

BleepingComputer previously reported that a source said the attackers were targeting DMV platforms in other states through social engineering. ShinyHunters also told the outlet it expected additional DMV breaches to surface.

There has been no confirmation from Florida that the current breach involved other state DMV systems. Still, the possibility deserves attention because state motor vehicle agencies hold information that can be extremely valuable for identity fraud and targeted scams.

If criminals find a technique that works against one government system, they often look for similar access elsewhere.

ShinyHunters is an extortion operation associated with data theft attacks against companies and online services.

Threat actors using the name have been linked to attacks involving Salesforce environments and companies including Google, Cisco and Match Group.

More recently, the attackers have used voice phishing, also called vishing. In these attacks, someone impersonates IT support and tries to convince an employee to enter credentials or authentication codes into a phishing site.

The attackers have also targeted single sign-on accounts connected to services such as Microsoft 365, Google Workspace and Salesforce.

FLHSMV referred to the attacker in its statement only as an "international cybercriminal organization." The agency did not publicly identify ShinyHunters by name. So, while ShinyHunters has claimed responsibility and Florida has confirmed a breach, Florida has not publicly attributed the attack to the group.

Still, this shows why protecting trusted accounts has become so important. Once an attacker gets legitimate credentials, other connected services may become accessible too.

You do not need to wait for a confirmed case of identity theft before protecting yourself. These steps can make stolen personal information harder for criminals to use.

A credit freeze can make it harder for someone to open new credit accounts in your name. You need to place a freeze separately with Equifax, Experian and TransUnion. Credit freezes are free. You can temporarily lift one when you legitimately need a lender to access your credit.

Check your credit reports for new accounts or inquiries you do not recognize. You can request your reports through AnnualCreditReport.com, the federally authorized source for free credit reports. Also, keep an eye on your financial accounts. Small unfamiliar transactions can sometimes be an early warning sign.

A confirmed breach creates a ready-made lure for scammers. You could receive a text, email or phone call claiming your Florida driver information was exposed. Be especially careful if the sender pressures you to verify personal information or click a link. Instead, visit FLHSMV through its official website at flhsmv.gov/ yourself.

FAKE SHINYHUNTERS SEXTORTION EMAIL USES CARNIVAL BREACH DATA

Scammers may use news of a DMV breach to send fake alerts containing malicious links or attachments. Strong antivirus software can help detect malware, phishing sites and other threats before they compromise your device or personal information. Keep your antivirus software running and updated on your computers and mobile devices. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

Your primary email account deserves extra attention because criminals can use it to reset passwords for other services. Give it a strong, unique password and use a password manager to create and securely store it. Then turn on multifactor authentication. Whenever possible, consider an authenticator app or passkey rather than relying only on codes sent by text message.

Review bank accounts, credit cards and other important services for activity you do not recognize. Also pay attention to unexpected government correspondence. A strange tax notice or benefits letter could signal that someone has used your identity.

You may also want to consider an identity theft protection service that monitors for suspicious use of your personal information and can help with recovery if your identity is stolen. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com

If you discover identity theft, report it at IdentityTheft.gov and follow the recovery steps provided by the Federal Trade Commission.

Data brokers and people-search websites can provide scammers with even more information about you. Removing that data cannot erase records stolen during a breach. However, reducing the information available elsewhere can make it harder for criminals to build a detailed profile and create convincing scams.

Consider using a personal data removal service to help find your information on data broker sites and submit removal requests on your behalf. These services can also keep checking for information that reappears over time. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

Now that FLHSMV has confirmed the breach, scammers could imitate any future notices sent to affected drivers. FLHSMV has not yet publicly disclosed how many people were affected or exactly what information was taken. Do not automatically trust an email simply because it mentions DAVID or the Florida DMV. Avoid using links in unexpected messages. Go directly to the agency's official website to verify any notice.

Florida has now confirmed the breach, but some of the biggest questions remain unanswered. ShinyHunters claims it stole more than 200,000 driver records, while Florida says the attacker got in using credentials belonging to a Plant City Police Department user that were improperly stored on a personal device. What we still do not know is exactly how much information was taken or whose records were exposed. Until Florida releases more details, I would take this seriously. Check your credit, lock down your important accounts and be especially suspicious of unexpected DMV texts, emails or calls asking you to verify personal information.

If hackers stole your driver's license record, Social Security number and address from a government database, how quickly would you expect the state to tell you? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

Tesla Cybercab bars kids under 13 as scrutiny grows

Tue, 15 Sep 2026 09:09:34 -0400

Tesla's Cybercab is finally carrying riders in Austin, Texas. And some of the details buried in the fine print may surprise you.

The gold two-seater has no steering wheel or pedals. Tesla says it uses cameras and AI to handle the driving, putting passengers entirely in the hands of its autonomous system.

Yet the Sept. 3 launch was unusually low-key for Tesla. The main presentation reportedly lasted about 15 minutes, and Elon Musk apparently did not speak. Then, on Sept. 4, federal safety regulators announced an investigation into how Tesla certified Cybercab for U.S. roads.

Tesla has spent years building toward this moment. Now that real riders are climbing inside, the little details suddenly become much more important. Here is what you should know before you step into a Cybercab.

ZOOX ROBOTAXI REDESIGN BRINGS BIG RIDER UPGRADES

NEW! Join our upcoming CyberGuy LIVE class: Get Better Healthcare With AI

experience is needed.

Register for free now at CyberGuyLive.com

If you planned to call a Cybercab for a family ride, check the passenger rules first. Tesla says children under 13 cannot ride in Cybercab "at this time." Teens ages 13 through 17 can ride, although an adult must accompany them for the entire trip.

Interestingly, Tesla sets a different age limit for the Model Y vehicles in its Robotaxi service. Children ages 8 through 17 can ride in those vehicles with an adult. Guests under 8 cannot.

So, an 11-year-old could ride in a Tesla Model Y Robotaxi but could not take the same trip in a Cybercab. Tesla does not explain the reason for that difference in its current rider guidance. Then there is another detail parents may notice.

Tesla confirms that Cybercab has no LATCH or ISOFIX child-restraint system. If a rider needs a booster seat, Tesla says it must use a seat belt to secure it.

That may sound odd considering Cybercab does not allow children under 13. However, some older children may still need a booster seat depending on their size and local requirements.

Tesla gives instructions for using one, but there are no LATCH anchors to attach it to. It is the kind of detail most of us probably would not think about until a Cybercab showed up at the curb.

A driverless vehicle still needs a plan for the moment something goes wrong. According to Tesla documentation, a collision can trigger several automatic responses. The airbags can deploy and the doors can unlock. Hazard lights and interior lights can also switch on.

The vehicle can disable its high-voltage battery, move the windows into a vent position and apply the brakes until it comes to a stop. Tesla's system can also open a two-way connection with its Robotaxi Support team.

That support connection could become especially important in a vehicle where nobody can grab the steering wheel or hit the brakes. Tesla also gives riders ways to stop a trip themselves.

UBER LETS PARENTS WATCH TEEN RIDES LIVE

Look above you when you get inside a Cybercab. Tesla placed a dedicated Stop button between the dome lights. Pressing it sends an immediate pull-over request, ends the ride and connects you with Robotaxi Support.

You can also tap Pull Over on the touchscreen or make the request through the Robotaxi app. However, Tesla warns that an "immediate" pull-over may still take some time. For example, the vehicle may need longer to reach a safe stopping point while traveling on a highway. That is worth knowing before your first ride.

Tesla's electronic door releases have attracted criticism because passengers may need a mechanical backup when a vehicle loses power.

Cybercab still uses electronically controlled doors during normal operation. In fact, the nearest door can open automatically when the ride requester approaches.

Inside, you can normally open the door through the touchscreen or gently lift a lever on the door panel. Pull that lever firmly all the way up, though, and it activates the mechanical release. Both Cybercab doors have one.

I like that Tesla put the emergency release where a passenger can actually see and reach it. There is one important warning. Tesla says using the mechanical release can damage the window or trim. If the vehicle has no power and the window remains fully raised, Tesla warns the glass could shatter when someone activates the release. That is one instruction I would want to know before an emergency.

Tesla also made a major change underneath the vehicle. Cybercab uses a brake-by-wire system rather than a traditional hydraulic setup. Electronic actuators control the brake calipers instead of hydraulic lines carrying brake fluid.

Musk said in a post on X that electric brakes avoid the complexity of routing hydraulic plumbing around the vehicle. Tesla has already used steer-by-wire technology in the Cybertruck.

With Cybercab, passengers have no physical driving controls at all. That puts even more responsibility on the electronics and software to work properly every time.

Here is one of the stranger details Tesla included in its new rider guide. Cybercab passengers can lower the windows, but Tesla says they "cannot be fully opened at this time." The company does not explain why.

The window switches also sit underneath the center touchscreen rather than on the doors. So, yes, you can crack a window for some air. You simply cannot roll it all the way down right now.

WAYMO RECALLS ROBOTAXIS OVER CONSTRUCTION-ZONE RISK

At least you should have somewhere to plug in your devices. Tesla confirms that Cybercab has USB-C charging ports inside the cabin.

An attendee at the launch reported that those ports can deliver up to 90 watts of power. That could be enough to charge many laptops.

However, Tesla's current public rider guide does not list that wattage. So, I would treat the 90-watt figure as an early report until Tesla publishes the specification itself.

On Sept. 3, the National Highway Traffic Safety Administration opened what it calls an Audit Query into Tesla's certification that Cybercab meets all applicable Federal Motor Vehicle Safety Standards. NHTSA announced the action on Sept. 4 following the vehicle's commercial deployment in Austin.

Automakers in the U.S. generally certify their own vehicles as complying with federal standards. NHTSA can then audit those certifications and investigate when questions come up.

Cybercab presents an unusual case because it has no steering wheel, pedals or mirrors. Many federal vehicle rules were written around cars designed for human drivers. NHTSA's audit reportedly covers about 1,000 Cybercabs as the agency reviews how Tesla determined the vehicles comply.

That does not mean regulators have found Cybercab unsafe. It does mean Tesla now has to back up its certification with technical information that satisfies the agency.

If you get the chance to ride in a Cybercab, I would spend a minute learning the cabin before the car starts moving. Find the emergency Stop button. Know where the mechanical door release sits. Keep your seat belt fastened for the entire trip.

Tesla says every passenger must buckle up before the ride begins. Cybercab may pull over or cancel a trip if it detects improper seat-belt use. Parents should also pay close attention to the age rules. Cybercab and Tesla's Model Y Robotaxi do not follow the same limits.

Beyond that, remember how new this vehicle is. Tesla is putting a very different kind of car into real-world service, and regulators are already asking questions about how it fits existing safety standards.

We have seen how unexpected situations can challenge other autonomous vehicles too. CyberGuy recently reported how Waymo recalled robotaxis over a construction-zone risk after vehicles entered closed freeway construction areas.

The technology can be impressive. Still, the real test comes when these vehicles deal with everything ordinary roads throw at them.

Cybercab is finally moving from Tesla's big promise to something people can actually ride in. I like seeing safeguards such as the mechanical door release and emergency Stop button, especially when passengers have no steering wheel or pedals to grab. Still, the under-13 restriction, lack of LATCH anchors and windows that do not fully open caught my attention. Add the federal investigation, and Tesla now has something bigger to prove. Putting Cybercab on the road is one thing. Showing that people can trust it day after day is the real test.

Would you climb into a Cybercab today with no steering wheel or pedals, or would you want to see a longer safety record before trusting it with your ride? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

How AI could transform cancer treatment and medicine

Mon, 14 Sep 2026 14:30:10 -0400

Researchers are now using artificial intelligence to help tailor cancer treatments and uncover overlooked uses for existing medicines. Other systems can search microscopic images or identify subtle biological signals that people could easily miss.

Some of these technologies have already helped patients. Others remain in clinical trials or research labs, so we need to be careful about separating promising science from treatments you can actually receive today.

Still, what researchers are accomplishing would have been difficult to imagine a few years ago. Here's where AI is already changing medicine and what you should know before trusting it with your health.

NEW! Join our upcoming CyberGuy LIVE class: Get Better Healthcare With AI

Register for free now at CyberGuyLive.com

CANCER VACCINE PREVENTS DEADLY MELANOMA FROM RETURNING OR SPREADING IN LANDMARK TRIAL

One of the biggest recent developments comes from Moderna and Merck. On Aug. 19, the companies announced positive topline results from a Phase 3 melanoma trial. The study tested intismeran autogene, also known as V940 or mRNA-4157, alongside Keytruda. The trial enrolled 1,137 people with high-risk melanoma that surgeons had completely removed. The combination met its primary endpoint for recurrence-free survival. It also met a key secondary endpoint measuring distant metastasis-free survival.

Merck and Moderna said this was the first positive Phase 3 readout for an individualized neoantigen therapy. It was also the first positive Phase 3 result for an mRNA-based cancer therapy. That sounds complicated, but the basic idea is fascinating. Researchers start with a sample of a patient's tumor. They analyze its unique mutations and use an algorithm to select targets that may help the immune system recognize the cancer. The resulting individualized therapy can encode up to 34 neoantigens. Moderna has also said the V940 program uses integrated AI algorithms during the development process.

The company then creates an mRNA treatment based on the selected targets. You may have seen this approach called a personalized cancer vaccine. Moderna and Merck currently describe intismeran as an individualized neoantigen therapy. The goal is to train the immune system to recognize characteristics unique to that patient's cancer.

There is plenty of reason for excitement, but there is also an important limitation. Merck and Moderna have announced only topline results from the Phase 3 trial so far. The companies plan to present the full findings at an international medical meeting and share them with regulators. The study also continues to track overall survival.

Earlier results offer additional context. In a smaller Phase 2b study with longer follow-up, intismeran plus Keytruda reduced the risk of recurrence or death by 49% compared with Keytruda alone. It also reduced the risk of distant metastasis or death by 59%. Those earlier results came from a much smaller patient group. That makes the larger Phase 3 trial an important step forward. Still, intismeran remains investigational. The FDA has not approved intismeran as a melanoma treatment.

Developing a new medicine can take years. Another group of researchers is asking a different question: What if a useful treatment already exists? Dr. David Fajgenbaum co-founded the nonprofit Every Cure to pursue that possibility. According to Every Cure's 2025 annual report, about 18,000 recognized diseases exist worldwide. The organization says roughly 4,000 have FDA-approved medications. That leaves an enormous number of diseases with limited treatment options.

Every Cure uses AI to scan biomedical knowledge and look for connections between existing medicines and other diseases they might potentially treat. The organization says its system can generate tens of millions of predictions in less than a day. Researchers then examine the most promising possibilities.

The federal Advanced Research Projects Agency for Health, or ARPA-H, is backing this approach through a project called MATRIX. MATRIX uses machine learning and artificial intelligence to predict which FDA-approved drugs could potentially treat other diseases. Researchers then validate promising candidates through laboratory or clinical work. AI does not prove that a drug will work for another illness. Instead, it can help researchers decide where to look next. That could dramatically narrow an otherwise enormous search.

Fajgenbaum has seen firsthand what finding a new use for an existing drug can mean. Kaila Mabus developed multicentric Castleman disease at 13 and became severely ill despite chemotherapy. In 2020, her doctors tried ruxolitinib, a drug already used for certain blood disorders but not FDA-approved for Castleman disease. She began improving within months and was declared in remission in January 2021. AI did not identify her treatment, but her case shows why Every Cure wants to use AI to uncover promising drug-disease connections much faster and on a far larger scale.

At Columbia University Fertility Center, artificial intelligence has taken on a very different challenge. Researchers developed the Sperm Tracking and Recovery system, known as STAR. It combines high-speed imaging with an AI detection model and microfluidics.

STAR was designed for patients with azoospermia or cryptozoospermia, conditions where sperm may appear absent or exist in extremely small numbers. The system examines a semen sample far more thoroughly than a person could reasonably do by hand. STAR can capture and process about 1.1 million images every hour. Its AI model examines frames for possible sperm cells.

When the system confirms one, a microfluidic mechanism isolates the cell. Doctors may then use the recovered sperm for fertility treatment or freeze it for later use. In one validation sample, embryologists searched for two days without finding sperm. STAR found 44 sperm in about an hour. That is exactly the type of repetitive search where AI can shine. A human eye can get tired. A computer can keep examining frame after frame.

NEW BLOOD TEST DETECTS 90% OF AGGRESSIVE PROSTATE CANCER CASES, BEATING CURRENT SCREENINGS

This technology has moved beyond a research demonstration. Columbia says STAR achieved its first reported pregnancy in March 2025. The couple involved had spent nearly two decades trying to conceive. STAR found and recovered sperm that conventional examination of the same sample had missed. The pregnancy later resulted in a healthy delivery.

That does not mean STAR will work for everyone. Columbia currently reports that sperm are found in about 28% of patients who previously received an azoospermia diagnosis. The center says about 20% of mature eggs fertilize with STAR-recovered sperm. Around 18% of those fertilized eggs develop into good-quality embryos for transfer or freezing.

Those rates are lower than typical IVF or ICSI. The patients using STAR often face especially difficult fertility problems, which helps explain the difference. Even so, the technology shows how finding one tiny biological clue can completely change the options available to a patient.

Researchers at the University of Hong Kong are exploring another possibility. Their AI-based tool, called CardiOmicScore, analyzes molecular information found in blood. The researchers used large-scale data from the UK Biobank. Their system examined 2,920 circulating proteins and 168 metabolites. It also incorporated genomic information.

CardiOmicScore uses deep learning to estimate the future risk of six cardiovascular diseases. Those include coronary artery disease, stroke and heart failure. The system also evaluates atrial fibrillation, peripheral artery disease and venous thromboembolism. Researchers found that the approach improved risk prediction when combined with standard clinical information. In some cases, CardiOmicScore could flag elevated risk as much as 15 years before symptoms appeared.

Think about what that could eventually mean. Instead of discovering cardiovascular disease after symptoms develop, doctors might get a warning while there is still more time to intervene. However, CardiOmicScore remains a research development. You cannot walk into your doctor's office today and request it as a routine screening test.

At UCLA, scientists are taking another approach to personalized cancer treatment. They create tiny laboratory-grown replicas of patient tumors called organoids. Researchers can expose those organoids to different drugs and monitor what happens. Their platform combines 3D bioprinting with advanced imaging and artificial intelligence. AI helps researchers process the large amount of imaging data generated as the organoids respond to treatment. The system can track thousands of individual organoids.

That allows researchers to examine how different parts of a tumor respond to various drugs. This could be valuable because cancer can behave differently from one patient to another. Even cells within the same person's tumor can respond differently to treatment. Eventually, researchers hope this type of technology could help identify therapies that better fit an individual patient's cancer. For now, UCLA continues to develop and validate the platform.

The possibilities for AI in medicine extend beyond blood samples and microscopes. Researchers are also studying what computers can learn from the way we speak. A Perspective published Sept. 4 in npj Digital Medicine examined voice biomarkers for ALS and Parkinson's disease.

Neurodegenerative diseases can cause measurable changes in speech. Researchers believe AI could potentially analyze those changes and help monitor disease progression. For ALS, the authors see particular potential in tracking changes that affect speech and swallowing. However, this field remains early.

At the time of publication, no speech or voice-derived endpoint for ALS or Parkinson's disease had received qualification from the FDA or European Medicines Agency. One ALS speech analytics platform has received FDA Breakthrough Device designation. That status can help speed regulatory review, but it does not amount to FDA marketing authorization. Researchers see real potential here. The clinical proof still has more catching up to do.

PATIENTS REMAIN CANCER-FREE NEARLY 3 YEARS AFTER RECEIVING EXPERIMENTAL IMMUNOTHERAPY

You may encounter AI in your healthcare without ever opening an AI chatbot.

A laboratory could use it while analyzing a tumor. A fertility clinic might use it to search for something the human eye missed. Researchers can also use AI behind the scenes to find treatments worth investigating. The key question for you is how much evidence supports the specific technology being used.

A university research project sits at a very different stage from a medical device that has gone through clinical testing and regulatory review. You should also understand how much human oversight remains involved. AI can help doctors process information and identify patterns.

Your healthcare decisions still deserve qualified medical judgment based on your individual circumstances.

That is why asking a few questions can help when AI becomes part of your care.

Medical AI can be useful. You still deserve to know how it affects you.

Find out what role the technology plays in your care. Does it analyze information for a doctor? Does it flag something for additional review? The phrase "AI-powered" can cover a wide range of technology, so ask for a simple explanation.

Ask whether a doctor, specialist or laboratory professional checks the AI's findings before anyone makes a decision. Human review becomes especially important when a result could affect treatment or diagnosis.

Ask whether the FDA has cleared or approved the technology when regulatory authorization applies. Also find out what type of research supports it. Early research can show promise while still leaving important questions unanswered.

Medical AI may rely on sensitive health information. Ask how your provider stores that data and who can access it. You can also ask whether your information may be used to improve or train an AI system. For more on transparency around artificial intelligence in healthcare, see our CyberGuy guide on what patients should know about AI disclosure. This article provides general information and does not replace advice from your healthcare professional.

What I find so interesting here is how AI can help doctors and researchers see things that would be incredibly difficult to find on their own. A system can search more than a million microscope images in an hour looking for a single sperm cell. Another can sift through huge amounts of medical research to find a possible new use for an existing drug. Researchers are even developing cancer treatments around the unique mutations inside one patient's tumor. That is pretty remarkable. But I also think we have to be careful not to let the excitement around AI move faster than the science. The melanoma Phase 3 results are encouraging, but we still need to see the complete data. Several of the other technologies in this article remain experimental or available only in limited settings. For me, that is where this gets really interesting. AI may help doctors find answers faster and uncover possibilities they might otherwise miss. What I want to see next is how often those discoveries translate into treatments that actually make people healthier and improve their lives.

If AI uncovered a treatment your doctor had never considered, how much evidence would you need before you felt comfortable trying it? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Scammers know the best time to text you

Mon, 14 Sep 2026 09:52:39 -0400

If your phone seems to light up with suspicious texts right when your day gets busy, you may not be imagining it. New research from cybersecurity company Malwarebytes suggests scammers have gotten much more strategic about when they contact you and where they do it.

The company analyzed global threat data collected between April 15 and July 14, 2026. Researchers tracked more than 20 scam categories. They found that criminals often choose the platform that gives a particular scam the best chance of working.

Then there is the timing. For Americans, scam text volume peaked around 12 p.m. ET. That was about 874% higher than at 1 a.m. ET, the quietest hour Malwarebytes observed. Scam text volume also climbed as the week went on. It reached its highest point on Friday, when people received roughly 50% more fraudulent texts than at the beginning of the week.

That tells me scammers are paying attention to more than what they send you. They are also watching when you may be most likely to see it. And the timing is only part of the strategy, because the type of scam often determines exactly where they try to reach you.

THE SCAM TEXT TEST: SPOT DANGER BEFORE YOU TAP

NEW! Join our upcoming CyberGuy LIVE class: Get Better Healthcare With AI

Register for free now at CyberGuyLive.com.

Different scams tend to favor different platforms. Malwarebytes found that job scams commonly arrive through email. Romance scams favor social media, where conversations with new people feel more natural. Meanwhile, tech support scams frequently start with a phone call. That makes sense when you think about how each scam works.

A fake recruiter can blend into a busy inbox. Someone starting a conversation on social media may seem harmless. A caller claiming your computer has a serious problem can immediately put you under pressure.

The channel becomes part of the trick. We've seen that with changing tech support scams. They can now begin with fake invoices, bogus security alerts or convincing support pages.

You hear plenty about scam texts and suspicious DMs. However, the web remains the leading way scams reach people in Malwarebytes' data. Email came next, followed by SMS.

Malwarebytes says it blocks around 500,000 phishing websites every day. That number gives you an idea of how many fake pages criminals keep pushing online.

Some copy banks or popular retailers. Others imitate technology companies or government services. A link in a text can take you straight to one of these pages. The fake site may look polished enough to fool you at first glance.

So, when a message says something has gone wrong with an account, resist the urge to use the link it provides. Open the company's app yourself or type the website address directly into your browser.

Here's the part that really caught my attention. Malwarebytes found that scam texts targeting Americans reached their highest volume around 12 p.m. ET. At noon, volume was about 874% higher than at 1 a.m. ET. Think about what your phone habits look like around lunchtime.

You could be leaving a meeting, grabbing something to eat or checking messages between errands. Your attention may already be split. Then a text arrives saying your package cannot be delivered. Another claims you owe a toll. Maybe a message warns that somebody accessed your account. That timing can work in a scammer's favor because you may react before giving the message a closer look.

Of course, a text arriving at noon does not automatically mean somebody is trying to scam you. The data shows when Malwarebytes observed the highest volume. Still, the pattern gives us another look at how organized scam campaigns have become.

IS THAT TRAFFIC TICKET TEXT A SCAM OR REAL?

The day of the week also appears to play a role. Malwarebytes saw its lowest scam text volume on Sunday. Activity then increased as the week went on. By Friday, people were receiving roughly 50% more fraudulent texts than at the beginning of the week.

The researchers cannot say exactly why Friday produced the highest volume. However, the pattern suggests scammers may be deliberately timing campaigns instead of sending messages at random.

Maybe you're finishing work and thinking about the weekend. You could also be juggling deliveries, travel plans or bills. Whatever the reason, criminals want you moving quickly.

That's something we've seen repeatedly with fake government messages. A DMV scam text can threaten fines or license problems while pushing you toward a payment page. The threat gets your attention. The deadline tries to stop you from thinking.

Timing gets the message in front of you. Familiarity can make you trust it. Malwarebytes found that Jimmy Donaldson, better known as MrBeast, was the most impersonated person in its data. His likeness appeared in about 30% of impersonation scams observed by the company.

Elon Musk and Donald Trump followed him in the data. These scams can involve fake cryptocurrency giveaways or schemes that demand a fee before you supposedly receive money. The real person has nothing to do with the offer.

Scammers borrow a face you recognize because familiarity can lower your guard. That tactic has become even more troubling as AI-generated video and cloned voices improve. A face on your screen no longer proves the person actually made the video.

Scammers use the same strategy with companies you recognize. According to reports from Malwarebytes users, the five most impersonated brands were: Google, Microsoft, Apple, Roblox and Amazon.

Google's name appeared at least twice as often as Amazon's. That familiarity gives criminals a huge advantage. If you use Google every day, a fake security warning may look routine. An Apple customer may react quickly to a message about an account problem.

Amazon scams can land at exactly the right moment because so many of us regularly have packages on the way. So, treat the logo as decoration until you verify the message yourself.

Gaming communities are also attracting scammers. Malwarebytes found Roblox, Steam, Discord and Minecraft among the most impersonated gaming platforms.

Roblox scam activity increased 15% between mid-June and mid-July. Steam saw a 19% increase during the same period. The potential losses can also get serious.

Malwarebytes says about half of the gaming scams it analyzed could lead to losses of $1,000 or more. That is particularly concerning when younger gamers may encounter fake offers through communities they already trust.

A message promising free in-game items or access to something exclusive can quickly lead to a fake login page. Once the victim enters a password, the scammer may take over the account.

AMAZON JOB SCAM TEXTS ARE SPREADING AGAIN WITH A NEW TWIST

Scammers can improve their timing, but you can make yourself a much harder target. The best defense starts with slowing down and verifying what you see.

Avoid links and phone numbers inside unsolicited emails, texts or social media messages. A link can take you to a copied website designed to steal your login or payment information. Likewise, the phone number in a fake security alert can connect you directly to the scammer. Instead, leave the message and contact the company another way.

Go directly to the company's official website or open its app. If the message claims you owe money, check your real account before paying anything. You can also contact the organization using a phone number you already trust. This breaks the scammer's control over the conversation.

Searching for a company's website can help, but pay close attention to what you click. Scammers can use sponsored search ads that lead to fake support pages or convincing copies of legitimate websites. Check the web address before entering sensitive information. When possible, use a saved bookmark or the company's official app.

Never give someone your password because they called or messaged you unexpectedly. The same goes for PINs, account recovery codes and one-time verification codes. A scammer may claim they need a code to verify your identity. In reality, that code may give them access to your account. If a caller asks for sensitive information, hang up and contact the organization yourself.

Be suspicious when an unexpected caller or message demands immediate payment. Before paying, confirm the charge through your actual account or by contacting the organization independently. Watch closely for payment requests involving gift cards, cryptocurrency or transfers that may be difficult to reverse. Urgency should make you more cautious, not less.

Strong antivirus software can help block known phishing sites and other malicious pages. Browser protection can also warn you before you enter information on a dangerous website. Keep your browser updated as well. Security updates help close weaknesses that criminals may try to exploit. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

Your phone may already include tools that identify suspicious calls or messages. Turn on spam filtering when your device and messaging app support it. Mobile security software can provide another layer of protection by identifying scam texts and dangerous links. No filter catches everything, so continue checking unexpected messages yourself.

If something feels wrong, look into it before you reply. Search for the company's official contact information. Check your account directly. You can also use a reputable scam-checking service to examine a suspicious phone number, message or link. The goal is simple. Verify the claim somewhere outside the conversation the scammer started.

Once you know a message is fraudulent, block the sender and report it as spam. Most phones and email services include built-in reporting options. Reporting scams can also help providers identify campaigns and block similar messages for other users. Then delete the message so you do not accidentally interact with it later.

If you entered a password on a suspicious site, change it immediately using the real website or app.

Change that password anywhere else you reused it. Better yet, use a password manager to create and store strong, unique passwords for each account so one stolen password cannot unlock several accounts.

If you gave away payment information, contact your bank or card issuer right away.

You should also review your accounts for unfamiliar activity.

If a scammer gained access to your device, disconnect it from the internet and run a trusted security scan.

What grabs me about this research is how deliberate scam campaigns are becoming. Scammers are paying attention to where you spend your time. Now, the timing data suggests they may also be watching when you're more likely to respond. That changes how I think about those random-looking texts that pop up during a busy day. The message may feel like one more thing that needs your attention. That's exactly when you need to slow down. You cannot control when a scammer contacts you. You can control whether that person gets to set the pace. When something unexpected asks for money or account information, get out of the message. Find the real company on your own and check the claim there. That small pause can ruin a scammer's entire plan.

Have you noticed more scam texts arriving around lunchtime or toward the end of the week, and what kind of message almost fooled you into responding? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Thousands of hacked sites trick you into installing malware

Sun, 13 Sep 2026 14:30:18 -0400

You land on the real website of a local business and a CAPTCHA appears. It looks routine until the page tells you to open Windows Run and paste a command. That should stop you cold.

Security researchers say thousands of legitimate small-business websites have been compromised to spread this malware trap. Here's what to know before a familiar website catches you off guard.

NEW! Join our upcoming CyberGuy LIVE class: Get Better Health Care With AI

In this free live online class, Kurt "CyberGuy" Knutsson will show you five practical ways AI can help you take a more active role in your health care. You’ll learn how to organize your health history, remember important appointment details, understand complicated medical information, research prescriptions and prepare questions for your next doctor’s visit. No technical experience is needed.

Register for free now at CyberGuyLive.com

FAKE PATIENT PORTAL SCAM CAN STEAL YOUR LOGIN AND INFECT YOUR PC

This campaign is much bigger than a handful of infected pages. Netskope Threat Labs says it identified more than 5,400 compromised websites across more than 2,200 organizations worldwide over the past few months.

The sites have little in common beyond many belonging to small businesses. Researchers found clinics, plumbing companies, online stores and other businesses among the victims.

Where Netskope examined individual sites, they most often ran WordPress and sometimes PrestaShop. Researchers still do not know how attackers initially compromised them.

That is important because you could visit the legitimate website of a business you recognize and still encounter a malicious prompt.

Netskope says several hundred compromised sites can be active on a given day. It has recently seen more than 300 sites contacting the malicious infrastructure each weekday.

The attack starts with malicious code hidden inside a compromised website. When you visit the site, that code can load another script. Then the page may blur and show what looks like an ordinary CAPTCHA.

Instead of simply asking you to prove you are human, the page tells you to open the Windows Run dialog and paste a command. That command can download and launch the attacker's malware.

Here is the warning sign I want you to remember: A legitimate CAPTCHA should never tell you to open Windows Run or paste a command into your computer.

We have seen fake CAPTCHA scams use this same trick before. The page looks familiar, so you may assume the instructions are part of a normal security check. They are not. The criminal is trying to get you to launch the attack yourself.

CLICKLOCK MAC MALWARE LOCKS APPS UNTIL YOU GIVE IN

This technique is known as ClickFix. The clever part has less to do with some exotic computer hack and more to do with psychology.

You are already used to CAPTCHAs. Websites ask you to click a box or prove you are human all the time. So, when a convincing verification screen appears on a legitimate website, your guard may be down. Then the instructions make the dangerous action look like one more step in the verification process.

Cybercriminals have used similar ClickFix tricks with fake Windows update screens. The appearance changes, but the warning remains the same. A webpage should not be telling you to run computer commands.

This is where the campaign gets more unusual. The attackers are using the BNB Smart Chain test network to store instructions used by the compromised websites.

You do not need to understand cryptocurrency to understand why criminals like this setup. Normally, attackers might keep malicious code on a regular web server. Once investigators find that server, a hosting provider may be able to shut it down.

A blockchain works differently. In this campaign, the attackers store code inside something called a smart contract. Think of it as a place where the hacked websites can check for their next set of instructions.

Netskope says the attackers are using the test version of BNB Smart Chain. Developers normally use this network to experiment without spending real cryptocurrency.

That gives the criminals inexpensive infrastructure that can also be harder to take down through traditional methods. There is another advantage.

The attacker can change what the smart contract delivers. The compromised websites can then pick up those new instructions without criminals having to modify every hacked site individually. That helps explain why this infrastructure is so useful to them.

Netskope also found a newer version of the attack that skips the fake CAPTCHA. This version uses technology called WebRTC. Your browser normally uses WebRTC for things such as video calls and real-time communications. The attackers found another use for it.

Their code can create an encrypted data connection with the attacker and receive additional malicious code through the browser. Netskope says the code can then run without first being saved as a traditional file on the computer.

For you, the technical details are less important than the larger point. The criminals can change how the attack works while continuing to use the same network of compromised websites.

A few simple habits can help you avoid handing control of your computer to an attacker.

If a website tells you to open Windows Run, PowerShell or Command Prompt, stop. Do not paste anything it gives you. Close the page instead.

A normal CAPTCHA may ask you to click a checkbox or identify pictures. It should not require you to change settings or run commands on your PC. If the instructions suddenly leave the browser, close the page.

Strong antivirus protection can help detect malicious scripts and malware if something slips past you. Keep it updated and enable real-time protection. If you accidentally follow suspicious instructions, run a full system scan. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

Install security updates when they become available. However, update Windows through Windows Update. Update your browser through its built-in settings or official source. Do not trust an unexpected webpage that says you must download an update.

If you followed the instructions from a suspicious CAPTCHA, disconnect the computer from the internet. Run a full antivirus scan. Then use another trusted device to change passwords for sensitive accounts you accessed on that computer. Start with your main email account. Also review active login sessions and enable multifactor authentication wherever you can.

Website owners should take this campaign seriously too. Netskope recommends checking the integrity of your content management system files. Researchers found malicious code added to legitimate JavaScript files or hidden inside fake plugin directories. Keep WordPress, PrestaShop and any plugins you use updated. Remove plugins you no longer need. Keep in mind that Netskope has not identified how attackers initially broke into the websites in this campaign. Those steps are good security practices, but researchers have not tied a specific WordPress or PrestaShop vulnerability to these compromises.

What gets me about this attack is how ordinary everything can look at first. You could be visiting the real website of a neighborhood business you have used before. Then a familiar CAPTCHA appears. That sense of trust is exactly what can make the next instruction dangerous. The blockchain technology behind the campaign makes life harder for security teams trying to shut it down. For the rest of us, though, the best defense is refreshingly simple. A website should never need you to open Windows Run or paste a command to prove you are human. If you see that request, close the page. That one warning sign could save you from installing malware yourself.

Would you recognize a fake CAPTCHA if it appeared on the website of a business you already trusted, or would the familiar site make you more likely to follow the instructions? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

AI robot for seniors can alert family after a call for help

Sun, 13 Sep 2026 07:27:48 -0400

If you have a parent or grandparent who wants to stay in their own home, you probably know the question that can sit quietly in the back of your mind: What happens if they fall and nobody realizes they need help? Tuya Smart thinks its small artificial intelligence robot could become part of the answer.

The company unveiled Doova at IFA 2026 in Berlin. This wheeled AI home companion is designed for seniors who live independently. It can move through the home, respond when someone calls for help and connect family members through live video when an emergency appears to be unfolding.

That gets my attention because Doova goes beyond sitting on a table waiting for someone to press a button or call out from across the room. It can actually come to you. And that raises a bigger question: How much could a robot like this really help someone live safely and independently at home?

THE BEST TIME TO TALK TO YOUR PARENTS ABOUT SENIOR CARE — BEFORE IT'S TOO LATE

NEW! Join our upcoming CyberGuy LIVE class: Get Better Health Care With AI

Register for free now at CyberGuyLive.com

Doova uses LDS LiDAR to navigate around the home. A four-microphone system helps it figure out where a voice is coming from. Meanwhile, AI vision analyzes a person's skeletal posture.

If someone falls or needs assistance, that person can say, "Hey Tuya, help." Doova then locates the person and rolls over to assess what is happening. Tuya says that if the user does not respond within 60 seconds, Doova starts an emergency response workflow. Family members receive an alert with a two-way live video call so they can see what is happening and arrange assistance.

For now, Tuya has not said that Doova automatically detects falls without the user first calling for help or that it directly contacts 911 or a professional monitoring service. So, I would treat it as an added layer of support rather than a replacement for a dedicated medical alert system.

Emergency help is only part of what Tuya has built into Doova. The robot uses a multimodal large language model so people can talk with it in a more natural way instead of memorizing rigid voice commands.

For someone spending long stretches at home alone, Doova can carry on a conversation or play entertainment. It can also help make sense of a confusing bill or letter. Another feature caught my eye. Tuya says Doova can identify potential scam risks.

YOUR SENIOR PARENTS ARE EASIER TO IMPERSONATE THAN YOU ARE

That could be useful for older adults who receive a suspicious message and want a second opinion before responding. However, I would never want someone relying solely on an AI robot to decide whether a bill, email or financial request is legitimate.

AI can make mistakes. If Doova flags something suspicious, the safest next move would still be to verify it independently or share it with someone you trust. We've seen how much personal information scammers can gather about older adults, particularly after major life changes such as moving into a retirement community.

A WHEELED ROBOT MAY BEAT HUMANOIDS INTO YOUR HOME

Doova can remind you to take medication, keep track of your schedule and give you weather updates. Tuya says it can also learn your preferences over time, which could make its suggestions feel more useful day to day.

The company plans to add a feature that helps find misplaced items around the house. If that works well, I can see the appeal. Plenty of us have spent far too long looking for glasses, keys or a remote that was nearby the whole time.

WOULD YOU PAY $8,000 FOR A ROBOT TO FOLD LAUNDRY?

Doova also doubles as a mobile home-monitoring device. Rather than continuously hugging the walls as some patrol robots do, Tuya says Doova travels to selected locations near the center of rooms. From there, it can perform a 360-degree scan.

The robot then creates a safety report that can be sent to the user's phone. When the battery runs low, Doova can return to its charging dock on its own.

AI CHATBOT PRIVACY: WHAT YOUR AI MAY KNOW ABOUT YOU

That gives the robot another possible use when someone travels or spends part of the day away from home. However, this capability also leads straight into the biggest question I have about Doova.

Doova has microphones, AI vision and live video inside the home. It can also learn a user's preferences over time. That can make the robot more helpful, but it also means giving it access to a lot of personal information.

We raised similar questions when we looked at another AI home robot that can recognize family members and build personalized memories. With Doova, I would want to know where video and audio are processed, what gets stored, who can see it and whether users can permanently delete what the robot has learned.

Tuya's launch announcement does not spell out those Doova-specific privacy controls. Until it does, that is something I would look closely at before bringing a camera-equipped AI robot into a loved one's home. You can also review our guide to limiting the information popular AI services collect about you.

Tuya also designed Doova to work as a central smart home controller. A senior could use voice commands to adjust connected lights or curtains. Doova can also interact with compatible kitchen and bathroom devices.

I like the thinking here. Smart homes can become complicated very quickly, especially when every device has its own app. If Doova can put those controls into a simple conversation, that could make smart home technology far easier to use.

The robot has a 10.1-inch HD display with animated facial expressions. Its rounded design also looks more like a friendly household companion than an industrial machine.

There are still some important blanks to fill in. Tuya has not announced a retail price or when consumers will actually be able to buy Doova. I also want to see how it handles a real home. Rugs, cords and tight spaces can trip up mobile robots. Stairs are another obvious challenge for something that moves around on wheels.

The bigger question is how dependable Doova would be during an actual emergency. Someone may be frightened, speaking softly or lying somewhere the robot cannot easily reach. That is where real world testing will tell us much more than a demonstration on the show floor.

We reached out to Tuya Smart with questions about Doova's emergency response, privacy protections, connectivity and availability but did not hear back before our deadline.

If you are helping a parent or loved one age in place, Doova gives us a pretty good look at where home technology is heading. Instead of relying only on stationary smart speakers or cameras, future AI assistants may move around the house and respond to what is happening nearby.

That could give families another way to stay connected while allowing older adults to maintain more independence. However, I would look closely at the emergency process before relying on any product like this. Find out who gets contacted and what happens when the internet fails. You should also understand exactly what the cameras and microphones collect.

Finally, think about the person who will actually use it. The best technology in the world offers little value if someone finds it confusing, intrusive or uncomfortable.

What interests me most about Doova is the move from passive smart devices toward AI that can physically come to you. For an older adult who wants to remain independent, having a robot respond to a call for help and bring family into the situation quickly could offer real peace of mind.

Still, I would want much more information before trusting Doova with someone I love. Safety technology has to prove itself outside the controlled environment of a trade show. I want to know how reliably it reaches someone during an emergency and how much personal information it collects along the way.

The privacy side deserves just as much attention. A moving camera and microphone that learns your routines can become incredibly helpful. It can also become one of the most intimate connected devices in your home. Doova has an interesting idea at its core. Now Tuya needs to show the technology can earn the level of trust its role requires.

Would you put an AI robot with cameras and microphones in an aging parent's home if it could help family respond faster during an emergency, or would that feel like too much surveillance? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Man films himself taking down Flock cameras, gets arrested

Sat, 12 Sep 2026 15:19:14 -0400

You might expect someone taking down surveillance cameras to avoid being filmed. Jevon Martinez did the opposite.

The 44-year-old Rio Rancho, New Mexico, man recorded himself removing Flock Safety camera equipment around Bernalillo County on Sept. 2. He loaded the equipment into his pickup truck while explaining his reasoning to people watching online. The timing gave Martinez his opening.

Days earlier, Bernalillo County Sheriff John Allen had moved to end the department's three contracts with Flock Safety. Allen cited concerns about privacy, data sharing and his confidence in the company. However, he still supports automated license plate reader technology and plans to look at other vendors.

Martinez apparently saw the remaining cameras as unfinished business. What happened next shows how quickly a fight over surveillance can turn into a criminal case once someone starts removing hardware they do not own.

NEW! Join our upcoming CyberGuy LIVE class: Get Better Health Care With AI

In this free live online class, Kurt "CyberGuy" Knutsson will show you five practical ways AI can help you take a more active role in your health care. You’ll learn how to organize your health history, remember important appointment details, understand complicated medical information, research prescriptions and prepare questions for your next doctor’s visit. No technical experience is needed.

Register for free now at CyberGuyLive.com

TEENS ACCUSED OF DESTROYING FLOCK CAMERA UNTIL BATTERY EXPLODED, IGNITING FIRE NEAR HOMES: REPORT

Martinez made his position unusually easy to understand because he documented it himself. In a Sept. 2 social media post, Martinez said BCSO no longer subscribed to Flock. He wrote that he was taking down the equipment so he could return it.

He also insisted that he was neither destroying nor stealing the equipment. Martinez described it as property that had been left unattended.

His videos carried the same message. "Since BCSO is busy, I know BCSO is busy, everyone who works for BCSO, I know you guys are busy, so I went ahead and helped you out," Martinez says while driving his pickup.

The camera then shows what he means by "helped." His truck bed is filling up with Flock equipment.

This also was not Martinez's first encounter with law enforcement over license plate readers. Rio Rancho police had arrested him months earlier in a separate Sandoval County case involving the alleged removal and damage of three license plate reader systems. He faced nine felony charges in that case.

Martinez does not come across in the videos as someone trying to keep a low profile. Quite the opposite. "We got a bunch of these bad boys," he says while showing off the equipment in the back of the truck.

Then comes the line that gives the videos an almost game-like quality. "Let's see how much I can get in one day. That's gonna be the challenge for everyone out there."

At another point, Martinez tells viewers, "Not in my city, not in my state." He also repeatedly calls the Flock cameras "tyranny trees," a nickname that says plenty about how he views automated vehicle surveillance. Reports of his livestream show him dismantling one of the systems while continuing to explain his position. Martinez creates his own record as he goes, with his face, voice and actions captured on camera.

This is where Martinez's social media explanation runs into an important problem. Bernalillo County authorities say he removed 10 Flock camera systems with an estimated combined value of $16,500.

However, only two were associated with BCSO. Authorities say the other eight were managed by neighborhood associations. That changes the picture considerably.

Martinez repeatedly described what he was doing as returning equipment to the sheriff after BCSO ended its relationship with Flock. Yet most of the systems authorities recovered were connected to other organizations.

BCSO also says the equipment remained property that members of the public had no authorization to remove. So while Martinez's videos clearly explain what he believed he was doing, they do not settle the ownership question.

EX-INDIANA DEPUTY CHARGED WITH FELONY FOR ALLEGEDLY USING FLOCK CAMERAS TO STALK GIRLFRIEND

Martinez said throughout his videos that he planned to return the equipment to BCSO. However, investigators give a somewhat different account of how that ended.

According to the criminal complaint, Martinez drove past BCSO headquarters three times while the equipment remained in his truck. Deputies eventually stopped him outside the sheriff's office.

Video of the arrest shows deputies surrounding his pickup with guns drawn before placing him in handcuffs. Martinez was unarmed, and the charges against him stem from the alleged removal of the equipment rather than a violent offense.

Court reporting differs slightly on the precise larceny charge. One account of the criminal complaint describes attempted larceny over $2,500, while BCSO reporting lists larceny over $2,500. He also faces an interference with communications charge.

Martinez appeared virtually in Bernalillo County Metropolitan Court on Sept. 4. Prosecutors did not file a pretrial detention motion, and Judge Claire McDaniel did not order him held in the Bernalillo County case.

That did not mean Martinez walked free. He remained in custody because of the separate Sandoval County case tied to the earlier alleged license plate reader removals. Reports say that Sandoval County held him over a violation of his release conditions and that a grand jury has since indicted him in that case. The cases remain unresolved, and the charges are allegations unless and until proven in court.

There is another wrinkle here that makes this story more interesting. Sheriff Allen had already reached his own breaking point with Flock Safety.

BCSO had three contracts connected to the company. One covered five automatic license plate reader cameras. Another involved 16 speed cameras connected to the Flock network. A third covered gunshot detection technology.

Allen said he had lost confidence in Flock over privacy safeguards and data sharing. He also raised concerns about other law enforcement agencies gaining access to New Mexico plate data.

Still, Allen has defended the underlying technology as a useful law enforcement tool. His disagreement centers on the vendor and the safeguards surrounding the data. That puts BCSO and Martinez in an unusual position. Both expressed serious concerns about Flock. Their ideas about what should happen next could hardly be further apart.

Automatic license plate readers can create a detailed record of where vehicles appear. Flock's LPR systems collect license plate text along with the date, time and camera location. They can also record basic vehicle characteristics such as make, model and color. Flock says the system does not collect the driver's identity through the LPR camera.

Police can use that information to generate leads in investigations. The concern comes from what happens when millions of those observations become searchable.

We saw the risks firsthand in Colorado, where a woman faced a porch theft accusation after Flock cameras linked her truck to the area. Other location data eventually helped her show where she actually was.

Flock cameras have also moved into places you may visit every week. CyberGuy found license plate readers operating at some Home Depot and Lowe's parking lots in Connecticut. That means pulling into a store can create another record tied to your vehicle.

Then there are systems that can combine different types of signals. We recently looked at SignalTrace, technology that can correlate wireless device signals with license plate reader information and travel patterns.

All of this helps explain why a camera on a roadside can trigger such a strong reaction. It does not give someone permission to dismantle one.

You can question automatic license plate readers without ever touching a camera. Start by finding out which company operates the readers in your community and how long your local agency keeps the data.

Then ask who can search the system and how officials audit those searches. Private cameras deserve attention too. A homeowners association, shopping center or business may operate plate readers that connect with law enforcement.

Public records can help you understand how local agencies use the technology. Public meetings also give residents a way to challenge contracts before officials renew them.

If you want cameras removed, push the people who have the legal authority to make that decision. That keeps the debate focused on surveillance policy rather than turning it into a criminal case.

TENNESSEE OFFICIAL SAYS FLOCK CEO SHOULD BE HANGED 'PUBLICLY FOR TREASON’ AS CONTROVERSIAL CAMERAS FACE REVOLT

I understand why these cameras make people uncomfortable. A system that quietly logs where vehicles appear deserves close scrutiny, especially when information can move between agencies. Bernalillo County's own sheriff had enough concerns about Flock to walk away from the company. Martinez clearly shares the privacy concern, but his videos show what can happen when someone decides to take the next step on his own.

The biggest factual problem with his argument is hard to overlook. Authorities say only two of the 10 systems he removed were associated with BCSO. The other eight were managed by neighborhood associations. Then there are the videos themselves. Martinez wanted people to see what he was doing. He explained his reasoning and showed the equipment piling up in his truck. Those posts may help him make a political argument online. They also give investigators a remarkably detailed record of what happened. For me, the useful questions are who gets to collect our movement data and what limits control access to it. Those are fights worth having in public.

If your local sheriff said it no longer trusted a surveillance company, would you want every camera removed immediately or would you accept a replacement system with stronger privacy safeguards? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report

153 million driver's license scans may be on the dark web

Sat, 12 Sep 2026 11:14:37 -0400

Think about how often you hand someone your driver's license without giving it much thought. You rent a car, check into a business or go somewhere that needs to verify your age. Someone scans your ID, hands it back and you move on.

A dark web service called Nexus claimed to have collected more than 153 million driver's license records from people in the United States and Canada. It also claimed to have more than 10 million identification cards, over 3 million travel documents or international IDs and at least 579,000 medical cards. That's a staggering amount of identity information.

There is an important caveat, though. The 153 million figure comes from Nexus itself. It has not been confirmed as the number of unique people affected. Some records also contained multiple images of the same license. Still, researchers found enough real driver's licenses in the database to get the FBI's attention.

NEW! Join our upcoming CyberGuy LIVE class: Get Better Healthcare With AI

INSURANCE BREACH EXPOSES 7M DRIVER'S LICENSES

KrebsOnSecurity reported that Nexus appeared on the Russian-language cybercrime forum Exploit on Aug. 31. The service advertised access to identity documents covering more than 170 million people in North America. Driver's licenses made up the biggest category.

Nexus claimed more than 153 million driver's license records. It also advertised millions of other identity documents and hundreds of thousands of medical cards. Krebs tested the service by running a blank search. That returned roughly 11.5 million pages of results with about 15 records per page.

That does not prove there were 153 million different people in the database. However, it does support the possibility that the collection was enormous. More concerning, the driver's license total increased by nearly 400,000 records in about 24 hours while Krebs was examining the service.

The people running Nexus claimed they had been continuously taking new data for more than a year. Investigators have not independently verified that claim.

The timestamps attached to some of the images helped researchers begin tracing where the records might have originated. Cybersecurity journalist Brian Krebs discovered his own Virginia driver's license being offered as a free sample by the people promoting Nexus.

His record contained six image files. Those included images of the front and back of his license, along with infrared and ultraviolet versions. Krebs then asked friends and family members for permission to search for their licenses. Nine people whose licenses appeared in Nexus said the timestamps closely matched dates when they had traveled or presented identification. That led investigators away from the idea that airport security alone might explain the records.

For example, Krebs reported that he had used his passport at airport security during one trip. Later that day, he and his mother handed their driver's licenses to a Hertz rental car representative. Their driver's license scans in Nexus carried timestamps only seconds apart.

Security researcher Zach Edwards found his license in Nexus too. His timestamp lined up with a trip to Las Vegas. Edwards said he had presented his license in several places during the trip. However, he specifically remembered having it scanned at Planet 13, a marijuana dispensary.

The Planet 13 connection pointed researchers toward Louisiana-based identity verification company IDScan.net, which announced a partnership with the dispensary in 2022. Its scanners can capture IDs using ultraviolet, infrared and white light, similar to the additional scans found in some Nexus records.

IDScan.net has since acknowledged a security incident. The company says an unauthorized third party may have accessed or copied customer information stored in accounts on its cloud. That information may include full names and driver's license or other government-issued identification numbers.

IDScan.net says it is notifying potentially affected people and offering free credit monitoring. However, the company has not confirmed that the Nexus collection came from its systems or that the 153 million records represent 153 million unique people.

IDENTITY THEFT RARELY ANNOUNCES ITSELF: 6 SIGNS YOU MISSED

The FBI has now confirmed that it is examining what happened. In a statement to Reuters on Sept. 2, the bureau said it was "looking into the incident" but could not provide more information because of the ongoing investigation.

Reuters reported that the breach, if confirmed at the reported scale, could rank among the largest exposures of government-issued identity documents in North America.

Shortly after KrebsOnSecurity published its investigation, the Nexus dark web site disappeared. Its login page was replaced with a message saying the service was no longer available. That does not mean the stolen records disappeared with it. Anyone who purchased or downloaded information before the site vanished could potentially retain copies.

Your driver's license holds information criminals can use to make impersonation attempts much more convincing. Depending on the state, it may include your full name, address, date of birth, license number, photograph and signature.

A high-quality image of the front and back can also give a criminal something physical to present during an identity check. That can become especially concerning when businesses use driver's licenses to verify customers remotely or in person.

A stolen card number can usually be canceled. Your name, photograph and other identity information are much harder to replace.

You cannot pull back a driver's license scan that may already have leaked, but you can make stolen identity information harder to use and watch for warning signs.

A credit freeze can make it much harder for someone to open a new credit account using your identity. The Federal Trade Commission says freezes are free. They also do not affect your credit score and remain in place until you lift them. To fully freeze your credit, contact Equifax, Experian and TransUnion separately .

A freeze primarily protects against new credit accounts. It will not stop someone from misusing an existing bank account or another service that does not check your credit. The FTC recommends credit freezes as one of the strongest protections against new-account identity theft.

Look through your credit reports for accounts, inquiries or personal information you do not recognize. An unfamiliar account can be an early sign that someone is using your identity.

Do not assume one clean check means you're finished. Stolen information can sit unused for months before a criminal tries it. The FTC recommends reviewing your credit reports regularly for accounts you do not recognize.

A credit freeze cannot stop every form of identity fraud. Turn on transaction alerts through your bank and credit card providers. Also watch for password changes, new devices and changes to your contact information. Check your statements instead of relying only on alerts.

Your primary email account can become a gateway to everything else. Use a strong, unique password, store it in a trusted password manager and enable multifactor authentication when available.

Protect your mobile account too. Ask your carrier whether you can add an account PIN or stronger protection against unauthorized number transfers. Also, treat unexpected calls differently when the caller already knows information about you.

Knowing your address or driver's license details does not prove someone is legitimate. That information could have come from stolen records.

Even with good security habits, identity theft can still happen. Your Social Security number, financial information or other personal data may already be exposed without you knowing it. An identity theft protection service can add another layer of monitoring.

Depending on the service and plan, protection may include credit and financial account monitoring, alerts when personal information appears in known breaches or risky online locations and access to specialists who can help with recovery if fraud occurs. Some services also offer reimbursement or coverage for eligible identity theft losses.

Look closely at what each service monitors, how quickly it sends alerts and what recovery help is included.

See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.

If you discover someone using your identity, document what happened and start the recovery process quickly. The FTC recommends reporting identity theft through IdentityTheft.gov. The service creates a recovery plan based on the type of fraud involved.

If someone misuses your driver's license, contact your state motor vehicle agency as well. Procedures for replacing a compromised license or changing a license number vary by state. Keep copies of reports, case numbers and correspondence. You may need them later when disputing fraudulent activity.

STOLEN IDS SOLD FOR ‘HAPPY MEAL’ PRICES FUEL BILLIONS IN US BENEFIT FRAUD

What jumps out at me here goes beyond the massive 153 million figure. We hand over our driver's licenses all the time, often without knowing who keeps the scan or how long they store it. If criminals get a copy, they may have another powerful piece of information to use for identity theft. While investigators work to determine where the Nexus records came from, protect what you can. Consider freezing your credit, keep an eye on your accounts and use identity theft monitoring if you want added protection. And the next time someone scans your license, ask what happens to that image after you leave.

After seeing how driver's license scans can potentially end up in criminal hands, will you think twice before letting a business scan yours? Let us know by writing to us at Cyberguy.com

Asked Siri to call your bank? A scam could cost thousands

Fri, 11 Sep 2026 16:00:31 -0400

Asking Siri to call your credit card company sounds about as routine as asking for the weather. You say the company name, Siri finds a number and the call begins. For Virginia, an 82-year-old woman from Concord, Massachusetts, that simple request nearly turned into a financial nightmare.

She says she asked Siri to call American Express. Instead, she reached a bogus number. From there, the conversation eventually moved to her Bank of America account and a supposed $1,000 credit that suddenly became $100,000. Virginia caught on before sending the money.

Her story shows how a Siri bank scam can exploit something many of us barely think about: where a phone number came from before we dialed it. The Better Business Bureau has previously warned that fake customer service numbers can surface through voice searches. It has documented cases involving Siri and other voice assistants where people believed they had reached a legitimate company.

Here's how the scam unfolded and what you can do before your next financial call to make sure you're reaching the real company.

FTC REVEALS WHERE SPAM CALLS HIT HARDEST

Missed CyberGuy LIVE? Watch the Protect Your Money Replay

Our free CyberGuy LIVE class, Protect Your Money From Today’s Biggest Threats, has ended, but you can still watch the full replay and download our financial protection checklist. Kurt "CyberGuy" Knutsson walks you through five simple ways to help defend yourself against AI scams, fraud, identity theft and financial hacks. You’ll learn how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed.

Get the free replay and checklist now at CyberGuyLive.com

Virginia wrote to CyberGuy after the experience because she wanted other people to know how quickly a seemingly safe phone call can go wrong.

"Hi, I just wanted to pass on this scam. I needed to call American Express. Instead of using the phone number on my credit card, I asked Siri to call American Express instead. It was all downhill from that point on. The telephone number was bogus, and eventually I wound up on my BOA account with a so-called BOA Security Expert. Fortunately, when zeros started being added to the $1000.00 credit I was supposed to get, and the "gentleman" said he couldn't correct it, I needed to go to BOA and return the $100000.00. I realized what was going on and immediately hung up and froze my BOA account. I never expected that a number that Siri provided would lead to trouble. I try to inform people now that calling a number can also put your finances in jeopardy. I am 82 years old and could have lost my entire retirement in one fell swoop. Thank you," Virginia, Concord, Massachusetts.

That last part stopped me. Virginia had no reason to think asking Siri to place a call could potentially put her retirement savings in danger. After all, she initiated the call herself. That gave the person who answered an immediate advantage.

Based on Virginia's account, this looks like two scam techniques chained together. First came the fake customer service number. Then came a refund or overpayment scheme designed to persuade her to send real money back.

Virginia says she asked Siri to call American Express rather than using the phone number printed on her card. Apple says business information can appear across Apple services, including Maps and Siri. Place cards can include phone numbers and other business details.

We reached out to Apple for comment but did not hear back before our deadline. However, Virginia's experience alone cannot tell us how this specific bogus number became associated with her request. We simply do not know how the bad number got there.

This was a powerful setup because Virginia believed she had contacted American Express herself. She had not answered a random phone call. She had asked her iPhone to make the call. That can lower your guard before the person on the other end even says hello.

The Better Business Bureau has warned about this problem. Scammers can promote fake support numbers that make their way into online search results. Voice assistants may then use information pulled from those results or related business listings.

We have seen a similar trap with traditional web searches. In our report, The No. 1 Google search scam everyone falls for, a victim searching for customer support landed on a fake number and eventually lost control of his phone. Voice assistants can add another layer of trust because you may never see the number before the call starts.

According to Virginia, she eventually found herself dealing with someone claiming to be a Bank of America security expert. At that point, the story had shifted from customer service to her bank account. That shift should immediately raise your guard. Bank of America warns about criminals who pose as bank representatives and invent urgent problems involving your account. Scammers may ask for verification codes, remote access or money transfers. Then Virginia encountered the clue that saved her.

Virginia says she expected a $1,000 credit. Then zeros started appearing. Suddenly, she was dealing with $100,000. The supposed bank expert told her the mistake could not be corrected. According to Virginia, she was then told she needed to go to Bank of America and return the excess money. That follows a familiar overpayment or refund scam pattern.

Scammers claim they accidentally sent too much money. Then they pressure you to return the difference before you have time to verify what happened. Fortunately, the sudden jump to $100,000 made Virginia question the entire story. She hung up and froze her Bank of America account.

We cannot determine that from Virginia's description. Scammers sometimes use remote-access software to manipulate what a person sees on a computer. They can also move a victim's own money between accounts, so it appears that a new deposit arrived. Another possibility involves a fake banking page designed to display whatever balance the criminal wants the victim to see.

CyberGuy has covered how fake support representatives use remote access and other tactics to take control of devices. You can see the warning signs in our guide, Protect yourself from tech support scams. Virginia did not provide enough information to identify the exact technique used here.

What we do know is that the criminal wanted her to believe $100,000 had appeared and that she needed to return it. If she had followed those instructions, the money she sent would have been very real.

NEW BANK SCAM LAWS COULD STOP SUSPICIOUS PAYMENTS

A scammer may know your name, your bank or details that make the call sound convincing. These steps can help you stay in control.

For banks and credit card companies, the safest starting point is usually the number printed on the back of your physical card. You can also open the institution's official app and find its contact information there. Avoid relying on a phone number supplied by a search result, sponsored ad or voice assistant when your finances are involved.

A call to your credit card company should not suddenly require you to move money through an unrelated bank account. If the story starts getting complicated, hang up. Then contact the company again using a verified number.

A scammer may claim your money needs to be transferred into another account to keep it safe. Do not do it. Bank of America warns that it will never ask customers to transfer money because fraud was detected on an account. The same caution applies if someone tells you to withdraw cash, buy gift cards or purchase cryptocurrency to resolve a banking problem.

If someone says $1,000 accidentally became $100,000, stop. Do not transfer the supposed difference back. Contact your bank independently and ask it to verify your actual balance and transaction history.

Banks use one-time codes to confirm your identity or approve certain actions. A scammer may ask you to read one aloud while claiming it is needed to cancel fraud. Never give a verification code to someone who called you or someone you reached through an unverified number.

If someone claiming to represent a bank or credit card company tells you to install software that lets them see or control your screen, end the call. Remote-access programs can give criminals enormous control over your computer. They may watch you log into your bank, move money between accounts or manipulate what appears on the screen.

Strong antivirus software can help protect you if a fake support representative sends you to a malicious website or convinces you to download a dangerous file. It can also warn you about phishing pages and other threats designed to steal passwords or financial information. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

Set alerts for purchases, withdrawals and transfers so you know quickly when money moves. You should also enable notifications for suspicious logins and changes to your account information when your financial institution offers them. These alerts give you another chance to catch activity you did not authorize.

Your banking password should never be reused on another account. A password manager can create and store strong passwords so you do not have to remember them all. Also enable two-factor authentication whenever your bank supports it. An authenticator app or security key can provide stronger protection when available.

If someone tells you money suddenly appeared in your account, do not rely on what they show you. Close the session. Open your bank's official app yourself or type the bank's website address directly into your browser. Then check your transactions independently.

If Siri or Apple Maps provides incorrect business information, you can report the listing to Apple. On an iPhone, open Maps > tap your picture or initials next to the search field > tap Reports > tap Report a New Issue > choose the appropriate option and follow the on-screen instructions. Fixing a bad listing may help prevent someone else from reaching the same number.

APPLE’S $250M SIRI SETTLEMENT: ARE YOU OWED CASH?

If you think a scammer got access to your financial information, act quickly.

Hang up and stop responding to texts, emails or calls from the person. Do not use a callback number they provided.

Use the number on your card or inside the official app. Tell the fraud department exactly what happened. Ask whether any transfers, new payees or other account changes need to be stopped.

Virginia froze her Bank of America account as soon as she realized something was wrong. Your bank may also allow you to lock a debit or credit card instantly through its app.

If you entered a password while the scammer could see your screen, or you gave one away, change it from a trusted device. Change any other account that used the same or a similar password.

If you installed a remote-control program at the scammer's direction, disconnect that computer from the internet. Remove the software and run a full antivirus scan before signing back into sensitive accounts. If you are unsure whether the device is clean, get help from a trusted computer professional before using it for banking again.

Look for unfamiliar transactions, new payees and changes to your phone number or email address. Also check whether the scammer altered security settings or added a new device to the account.

If the scammer obtained your Social Security number or enough personal information to open accounts in your name, consider freezing your credit with Equifax, Experian and TransUnion. A credit freeze can make it harder for a criminal to open new credit in your name.

Report financial fraud to your bank immediately. You can also file a report with the Federal Trade Commission at ReportFraud.ftc.gov. If money was transferred, contact the financial institution involved as soon as possible. Some transactions become much harder to recover once they are completed.

Criminals may contact victims again after the first attempt. Sometimes they pretend to be investigators, bank employees or recovery specialists who claim they can get your money back. Treat any unexpected follow-up contact with suspicion.

What sticks with me about Virginia's story is how ordinary the first move felt. She was trying to reach a company she already trusted and used Siri to save herself a little time. That tiny convenience nearly opened the door to a six-figure loss. Virginia also deserves credit for catching the moment when the story stopped making sense. A $1,000 credit becoming $100,000 was enough to make her question the person guiding her.

That instinct protected her retirement. I also would not frame this as an age issue. Criminals succeed because they exploit trust in familiar technology and recognizable financial brands. Anyone can get caught when a call begins through a device they use every day. From now on, I would treat financial phone numbers almost like passwords. Verify them before you use them. The number on your physical card or inside the official banking app gives you a much stronger starting point than a search result or voice request.

After hearing what happened to Virginia, would you still let Siri dial your bank without checking the number first? Have you ever reached the wrong company through a voice assistant or online search? Write to us in the comments below and tell us what happened. Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Fox News AI Newsletter: Researcher delivers extinction warning

Fri, 11 Sep 2026 13:22:53 -0400

IN TODAY’S NEWSLETTER:

- Researcher who departed AI role over fears of racing into extinction says people are 'begging' for regulation

- 9/11 hero’s legacy lives on 25 years later as son unveils new tech lifeline for those facing grief

- Nobody wants AI-generated sports commentators, but a pro golf tournament is introducing one anyway

'GAMBLE': The Anthropic researcher who is leaving the company over fears the technology is gambling with human life told Fox News there is hope that we can avoid the chance it could destroy humankind within the next decade.

BEYOND THE PAIN: A father's legacy is living on through a new artificial intelligence (AI) tool that helps others navigate grief and trauma — two-and-a-half decades after the Sept. 11, 2001, terrorist attacks.

SMART FLEX: Apple on Wednesday unveiled a highly anticipated foldable version of the iPhone along with other consumer tech devices embedded with artificial intelligence in the first major product event under the leadership of new CEO John Ternus.

NEXT-GEN SIDEKICK: Meta on Tuesday rolled out a long-planned personal artificial intelligence agent aimed at helping users complete daily tasks.

THREAT ALERT: Anthropic said Thursday it disrupted several attempts this year by researchers to use its AI models for biological research that could potentially aid the development of biological weapons, prompting the company to ban accounts and strengthen its safeguards.

RACE TO NOWHERE: Golf fans who tune into this week's New Mexico Open broadcast will be introduced to a new commentator by the name of Duff Foreman. He'll join former PGA Tour winner Notah Begay III and well-known broadcaster Ryan Burr on the call, although Foreman won't technically be on site, seeing as how he's not an actual person.

SILICON HANDSHAKE: The federal government under President Donald Trump reached an agreement with OpenAI on a landmark deal to equip government employees with the most cutting-edge artificial intelligence models at a major discount, Fox News Digital has learned.

'SEAT AT THE TABLE': A GOP insider making the conservative case for regulating artificial intelligence development predicts President Donald Trump's full-throated support for data center expansion will soon change after he hears from the American people on the midterm campaign trail.

THE NEW GOLD RUSH: As Americans weigh the costs and benefits of massive data centers emerging in their towns to fuel the artificial intelligence boom, the country's reddest state could be poised to capitalize on billions of dollars in investment that other states are increasingly reluctant to welcome.

CUT OF THE DEAL: As opposition to artificial intelligence data centers spreads across rural America, one group is proposing "data center dividends" to counter the backlash by allowing residents to share directly in the wealth generated by the technology hubs.

BOLD FRONTIER: Nvidia co-founder and CEO Jensen Huang declared that the era of artificial general intelligence (AGI) has arrived after OpenAI released its latest model.

AISLE BE WATCHING: Artificial intelligence is making its way into the grocery aisle, and it could have an unexpected effect on how much you spend. You grab a grocery cart, start working through your list and notice a screen on the handle offering directions, coupons and product suggestions. It can keep a running total and may even let you skip the checkout line. That sounds convenient. It also gives the store a new way to reach you while you are deciding what goes into your cart.

FOLLOW FOX NEWS ON SOCIAL MEDIA

Facebook

Instagram

YouTube

SIGN UP FOR OUR OTHER NEWSLETTERS

DOWNLOAD OUR APPS

WATCH FOX NEWS ONLINE

Fox News Go

STREAM FOX NATION

Fox Nation

Stay up to date on the latest AI technology advancements and learn about the challenges and opportunities AI presents now and for the future with Fox News here.

8 biggest things we learned from Apple's 2026 event

Fri, 11 Sep 2026 10:30:20 -0400

Apple finally did it. After years of watching Samsung, Google and other phone makers experiment with foldables, Apple has entered the race with iPhone Duo, its first foldable iPhone.

It's the announcement everyone is talking about, but it was hardly the only thing that stood out. Apple also showed us an iPhone camera that can help prove a photo is authentic. Siri AI is getting far more personal. Apple Watch will soon be able to summarize conversations you want to remember. Even AirPods are getting smarter at a lower starting price.

Some of these upgrades feel genuinely useful. Others raise questions about privacy, price and how much intelligence we want built into the devices around us. So, after sorting through everything Apple announced, here are the eight biggest things we learned from Apple's 2026 event and what they could mean for you.

Missed CyberGuy LIVE? Watch the Protect Your Money replay

Get the free replay and checklist now at CyberGuyLive.com

IS APPLE INTELLIGENCE ON YOUR IPHONE REALLY SECURE?

Let's start with the product everyone is talking about. iPhone Duo opens to a 7.6-inch Super Retina XDR display. Apple says that gives you 50% more screen area than iPhone 18 Pro Max. The 5.4-inch outer display offers 90% of the screen area of iPhone 18 Pro.

Apple also tackled one of the biggest complaints about foldables: the crease. The company developed a custom nano-texture finish that reduces glare and reflections. Apple says the finish also minimizes the visibility of the crease while giving the display a matte feel.

There are some other unexpected choices. Instead of Face ID, iPhone Duo uses Touch ID built into the side button. You can enroll multiple fingers, so unlocking works in different positions. Apple Pencil with USB-C support will arrive later this year. The phone uses Grade 5 titanium. Apple also says it carries an IP68 rating for dust and water resistance.

The folding design also creates some camera tricks you can't get on a regular iPhone. Dual Capture can show your front and rear camera feeds at the same time during FaceTime, while Duo FaceTime lets someone beside you join the call using the outer display. You can also use that outer screen to frame higher-quality selfies with the rear cameras.

Apple added a few other clever touches. Duo Preview lets the person you're photographing see the shot before you take it, while Kid Cue uses animations to get a child's attention. Smart Take can even watch the scene and automatically snap a photo when everyone is ready. Then comes the part that may give you sticker shock: the price. iPhone Duo starts at $1,999 with 256GB of storage. Apple will offer configurations up to 2TB. Preorders begin Oct. 16, with availability starting Oct. 23.

The hardware grabs your eye, but the software could decide whether Duo succeeds. Apple changed iOS 27 so content moves between the outside and inside displays. Open the phone and apps can expand onto the larger screen.

You can also put two apps side by side. Mail can show your inbox alongside a message. The Home Screen can display two pages at once. The system also responds when you fold or rotate the phone.

That caught my attention because a folding screen needs to earn its extra cost. If I open a phone this large, I want more than a bigger version of the same app. Apple is also giving developers tools to take advantage of the design. During the event, Apple showed Zoom using the expanded screen for video calls and Netflix adapting its experience to the two displays.

The cameras use the second screen too. Duo Preview lets the person you're photographing see themselves on the outer display. Meanwhile, Smart Take can follow a scene and automatically snap the photo when everyone looks ready. Those are the features that could make the folding design useful after the initial wow factor wears off.

If a foldable phone doesn't interest you, Apple gave the regular Pro lineup a substantial camera upgrade. The iPhone 18 Pro and iPhone 18 Pro Max use a 48MP Fusion Main camera with a variable aperture.

The camera can automatically adjust the aperture depending on lighting and depth of field. Apple also gives photographers manual control through four aperture settings: ƒ/1.48, ƒ/1.8, ƒ/2.8 and ƒ/4.0.

In darker environments, opening the aperture lets in more light. A narrower aperture can keep more of a scene in focus. However, another camera feature may prove even more important.

Apple Reference Image securely signs photo data at the pixel level when the picture is captured. Apple says that can help verify exactly what the camera sensor saw. Think about where we're headed with AI-generated images.

Being able to verify that an image began as an actual camera capture could become valuable for journalists, investigators or anyone documenting something important. That feature may get less attention than the new camera hardware. I wouldn't overlook it.

iPhone 18 Pro starts at $1,199, while iPhone 18 Pro Max starts at $1,299. Preorders begin Sept. 12, with both phones available starting Sept. 18.

APPLE RAISES PRICES AS AI CHIP COSTS SURGE

Apple can show us faster chips every year. Most of us notice battery life much faster. Apple says the iPhone 18 Pro Max can deliver up to 45 hours of video playback, the longest battery life the company has offered in an iPhone. It also rates the Pro Max for up to 30 hours of general use per charge.

Charging gets faster too. Apple says iPhone 18 Pro can reach 50% charge in around 15 minutes with a compatible adapter. Underneath it all sits the A20 Pro chip.

Apple built A20 Pro using 2-nanometer technology. The chip includes a second Neural Engine, bringing the total to 32 Neural Engine cores. Apple says that doubles compute power for advanced on-device models. The new Pro models also use a redesigned vapor chamber to manage heat. Faster performance sounds good. More time away from a charger is something you'll notice every day.

Siri AI had a big role in Apple's Sept. 9 iPhone 18 Pro unveiling. Apple showed how its rebuilt assistant can use your personal context, understand what you're looking at and take action across the apps you already use.

During the event, Apple showed someone asking what her mother wanted to cook during an upcoming visit. Siri searched Mail and Messages to find the answer. Apple also demonstrated Siri working through the Camera app. Point your iPhone at something and Siri can answer questions about what you're seeing or take action based on what's around you.

There's also a new Siri app on the Home Screen. You can use it to start a conversation or return to an earlier one, with conversations syncing privately through iCloud. Siri AI begins rolling out in beta in English on Sept. 14 with iOS 27. Apple says support for French, Japanese, Korean, Portuguese and Spanish will follow in October.

This one made me pay attention. Apple announced Siri Recap for Apple Watch Series 12 and Apple Watch Ultra 4. It uses ambient listening to turn conversations into high-level notes. Apple says each recap can include a title, summary and key points that appear in the Siri app. You control where and when Siri Recap takes notes. For example, you could allow it at work but disable it at night.

Then there is Live Rewind. Double-click the Digital Crown and Apple Watch can transcribe what was said during the previous 15 seconds. You can then review what you missed. That's useful if you missed something someone said in a noisy restaurant. Naturally, ambient listening raises privacy questions.

Apple says these Audio Intelligence features do not create or store audio recordings. The company says raw audio used for processing remains inaccessible, even to Apple. Apple also says Audio Intelligence does not identify or attribute speakers. Live Rewind transcripts and Siri Recaps use end-to-end encryption when syncing through iCloud.

Siri Recap and Live Rewind require Siri AI. Apple says both will arrive in beta later this year, starting in English. I like the idea of getting help remembering an important conversation. However, I would want to know exactly when the feature is active every time I use it.

Apple Watch is becoming more aggressive about turning health data into something you can understand. Series 12 and Ultra 4 use Apple's new Health Sensing System. According to Apple, Apple Watch Series 12 can now measure heart rate every five seconds throughout the day. Apple also says heart rate variability is measured up to 24 times more often than before. Apple says its head-to-head testing found the system delivered the most accurate heart rate sensing in a wearable.

For everyday users, Readiness may be the more relatable feature. Each morning, Apple Watch analyzes your recent activity, sleep and vital signs. It then gives you a score designed to help you decide whether to push harder or recover. The score can also change during the day.

Meanwhile, Apple Watch Ultra 4 gets up to 50 hours of normal use. Max Extended Workout mode can reach 45 hours. Apple Watch Series 12 starts at $399, while Apple Watch Ultra 4 starts at $799. Both are available to preorder now and will be available starting Sept. 18.

Apple also showed how the iPhone and Apple Watch can work together to assess how your body is moving. With Movement Evaluations in the redesigned Health app, you can position your iPhone so the camera can see you, then follow guided exercises while vision-based AI analyzes your movements.

Apple says the assessments can look at flexibility, strength, balance, movement mechanics and VO2 max. They can also help you track your progress while recovering from an injury. Apple says the processing happens on your device, and no video is recorded, stored or shared.

SAMSUNG GALAXY Z FOLD8 LINEUP ADDS THREE CHOICES

The final surprise may appeal to people who have no interest in spending $1,999 on a foldable phone. Apple announced AirPods 5 with Active Noise Cancellation for $129. Apple says the new earbuds provide stronger Active Noise Cancellation than the previous generation. They keep an open-ear design for people who prefer not to use silicone ear tips. The standard $129 model gets up to four hours of listening with ANC enabled. The charging case brings the total to up to 20 hours.

A $149 version adds volume swipe on the stem and a wireless charging case. It gets up to five hours per charge with ANC and up to 22 hours with the case and ANC enabled. Both versions are available starting Sept. 18, with preorders open now.

AirPods 5 also support Live Translation and Siri AI. During the event, Apple showed AirPods translating Spanish into English while the wearer continued a face-to-face conversation.

Compared with iPhone Duo, AirPods 5 may seem like a smaller announcement. Still, the $129 model could end up being one of the products far more people actually buy.

Apple gave us plenty to talk about, but iPhone Duo is the one people are going to want to pick up and play with. I certainly do. At $1,999, it carries a premium price, but Apple is clearly betting that the larger screen and new foldable experiences will be enough to tempt early adopters. What interests me more is how much smarter these devices are becoming. Siri AI finally looks like it could understand enough about your day to be genuinely helpful. Siri Recap sounds incredibly convenient too, but a watch that can summarize conversations around you deserves some healthy scrutiny about when it's listening and how clearly you know it's active. Then there are improvements you don't need a demo to appreciate. Give me longer iPhone battery life any day. And Apple Reference Image could become far more important than it sounds today if we reach a point where you can no longer trust your eyes to tell whether a photo is real.

After everything Apple announced, what would actually convince you to upgrade, and what would make you hold onto the device you already have? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

What your HOA may be putting online about you

Thu, 10 Sep 2026 14:30:59 -0400

A scammer doesn't need to hack your homeowners' association. They may only need to look at information your community already makes available.

Meeting minutes, membership records and other association documents can contain details about the people who live in a community. Depending on the HOA and state law, some records may be available to association members while others could appear on an association website or another online system.

You probably didn't put the information there yourself. You may have no idea how much someone can learn about you. Yet a name tied to an address or community can give a scammer useful details for making a call or message sound legitimate.

What your HOA puts online could reveal more about you than you realize. Here's what to look for and what you can do about it.

THE ONE THING SCAMMERS CHECK BEFORE TARGETING YOU ONLINE

Missed CyberGuy LIVE? Watch the Protect Your Money replay

Get the free replay and checklist now at CyberGuyLive.com

HOA records can contain details about homeowners, association business and community disputes. What members can access and what an association can publish depends heavily on state law.

HOA meeting minutes and other association records can reveal more than homeowners expect. How much information appears depends on the association and state law. Some states give HOA members broad rights to inspect association records. Sensitive disciplinary, collection and payment issues can receive additional privacy protections.

California provides a useful example. State law treats board meeting minutes as association records available for member inspection but excludes minutes and other information from executive sessions. Those closed sessions can cover matters such as member discipline, certain payment issues and other sensitive association business.

California law also allows an association to withhold or redact information when releasing it could reasonably lead to identity theft or fraud or compromise a member's privacy. The privacy concern grows when an association includes unnecessary personal details in records or makes information available more broadly than required.

HOA membership lists can contain information that scammers and data brokers would find useful. In California, state law defines the membership list as including a homeowner's name, property address, mailing address and email address as collected by the association. Members can request access to association records under state law.

Homeowners also have an important privacy option. California law allows members to opt out of sharing their name, property address, mailing address and email address through the membership list by notifying the association in writing. The law also restricts association records from being sold, used for commercial purposes or used for purposes unrelated to a member's interests as a member.

Rules differ from state to state, so check the laws where you live and ask your HOA exactly what information it collects, who can access it and whether you can opt out. The concern extends beyond the HOA itself. Once personal information appears publicly online, it can be indexed or copied and combined with information already collected from public records and other sources. Data brokers and people-search sites build profiles using many of those sources.

FIVE DATA BROKER OPT-OUT MYTHS THAT LEAVE RETIREES EXPOSED

Personal information gives scammers context they can use to make a fraudulent message feel legitimate. The Justice Department has already prosecuted companies that supplied consumer information to fraud operations.

Epsilon Data Management, one of the largest marketing companies in the country, agreed to pay $150 million after federal prosecutors said it sold consumer data to operators running fraudulent mass-mailing schemes involving fake sweepstakes and astrology solicitations. The government said many victims were elderly and vulnerable. A related company, Macromark, pleaded guilty after lists it provided to fraudulent clients resulted in at least $9.5 million in victim losses.

Those cases involved marketing databases rather than HOA records. Still, they demonstrate why personal details can become valuable to criminals. Names and addresses helped fraudsters identify and target potential victims.

HOA information can give scammers another source of context. A scammer who learns your name, street address and community can weave those details into a phone call, text or email. A message claiming to involve an assessment or another issue connected to your property can sound far more believable when the person contacting you already knows where you live.

Older adults remain especially attractive targets for financial scammers. The FBI says criminals may target older Americans because many have accumulated significant savings. Older victims can also be more likely to engage with unsolicited phone calls, texts or emails.

In 2025, Americans over 60 reported more than $7.7 billion in internet-enabled fraud losses. The FBI received more than 201,000 complaints from people in that age group, which reported the highest total losses of any age group.

Those numbers don't mean everyone living in a retirement or 55+ community will encounter fraud. They do show why reducing unnecessary personal information online deserves attention. The fewer details scammers can easily connect to you, the harder you make their job.

You may have more control over your HOA information than you realize, but your options depend on where you live and how your association handles its records.

Start by seeing what someone outside your community can find. Search your HOA's name along with terms such as "minutes," "directory," "membership list" or your own name. Check whether documents appear directly in search results without requiring a resident login. Pay particular attention to documents that connect your name with your address or other personal information.

Contact your board or management company and ask which records anyone on the internet can access. Find out which documents require a resident login and whether search engines can index anything posted on the association's website. If a document contains personal information that has no reason to appear publicly, ask whether the association can remove it, redact the information or restrict access.

Privacy rights vary by state, so find out what options apply where you live. California homeowners, for example, can opt out of sharing certain information through the HOA membership list. Other states may have different rules covering association directories and member records. Ask your HOA or management company how its opt-out process works and whether you can limit the contact information available to other members.

WHY CAREFUL PEOPLE STILL END UP ON DATA BROKER SITES

Even if your HOA removes information from a public page, your name, address and other details may already appear elsewhere online. People-search sites and data brokers gather personal information from public records, websites and other sources, then combine those details into profiles.

Start by searching for your name, phone number, email address and home address on major people-search sites. If you find a profile, look for the site's opt-out or removal process and submit a request to have your information deleted.

You can also use a data removal service to automate some of this work. These services send removal requests to data brokers on your behalf and may continue monitoring for information that reappears later.

Whichever route you choose, check back periodically. Personal information can resurface as data brokers refresh their databases or pull from new sources.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

I doubt most HOA boards are thinking about scammers when they post meeting minutes or maintain a community directory. They are focused on running the neighborhood. The problem comes when information collected for one purpose becomes useful to someone with very different intentions. That is why I would spend a few minutes searching your HOA's name along with your own. See what a stranger can learn about you without logging in or proving they live in your community. You may be surprised by how quickly a name, home address and neighborhood can be connected. I would also ask your HOA what stays behind a resident login, what appears on the open web and what you can opt out of sharing. Laws vary by state, but there is no reason to make a scammer's research easier than it already is. And remember, removing something from an HOA website may only solve part of the problem. Once personal information spreads to people-search sites and data brokers, cutting down those profiles can help put some distance between you and anyone trying to build a convincing story around your life.

Have you ever discovered your name, address or other personal information in HOA records online? If you asked your association to remove or restrict it, what happened? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report

Floating solar panels could save cities millions. Is your town next?

Thu, 10 Sep 2026 08:41:50 -0400

What if your town could build a solar farm without giving up acres of valuable land? Lima, Ohio, is trying something different. The city has completed a 2-megawatt solar array that floats on the Twin Lakes Reservoir, its primary drinking water source.

More than 3,000 solar panels now sit on the water and feed electricity to the nearby water treatment plant. The city projects the system will save nearly $10 million in electricity costs over its lifetime. That kind of savings could get the attention of cities far beyond Ohio.

So, could floating solar panels eventually show up on a reservoir near you? Here's how the technology works, why cities are interested and what it could mean for your community.

Missed CyberGuy LIVE? Watch the Protect Your Money replay

Get the free replay and checklist now at CyberGuyLive.com

WHO PAYS FOR US POWER BOOM? BLUE, RED STATES OFFER STARKLY DIFFERENT WAYS TO LOWER UTILITY BILLS AMID AI SURGE

Lima officially celebrated the completion of its Twin Lakes Floating Solar Project on Aug. 12. The final system includes 3,120 solar panels spread across about 3.6 acres of water, according to developer D3Energy. The 2-megawatt array sits on Lima's primary drinking water reservoir. That reservoir serves roughly 35,000 residents.

Next door, the city's water treatment plant processes about 14 million gallons of water each day. It also consumes more electricity than any other city facility. That makes the plant an obvious place to look for energy savings. Lima projects the floating solar system will save nearly $10 million in electricity costs over its lifetime. Earlier city estimates put first-year savings at roughly $200,000. For a city utility, that is serious money. Actual lifetime savings will depend on factors including future electricity prices and how the system performs over time.

Instead of attaching panels to racks planted in the ground, engineers mount them on floating platforms. Anchors and mooring lines keep the array in position.

Lima uses Ciel & Terre's Hydrelio floating system. Its anchoring setup connects to the banks and reservoir bottom. The design also allows the array to move as water levels change. The project uses bifacial solar panels, which can capture light on both sides.

Electricity travels from the array to eight inverters onshore. From there, the electricity helps power the water treatment plant. The result looks a bit like a traditional solar farm that traded grass for water.

Here is where the idea gets particularly interesting. Land costs money. It also competes with housing, businesses, agriculture and other development. Reservoirs already occupy space. Lima's floating array covers about four acres.

A land-based system producing the same amount of electricity would reportedly need at least 10 acres. That could make floating solar attractive to cities with limited open space. The panels can also sit near the facilities that need the electricity. In Lima, the water treatment plant sits right beside the reservoir. That reduces the need to find a distant solar site and then figure out how to move the electricity where the city needs it.

Researchers have also studied whether floating solar can help reduce evaporation by shading portions of the water surface. Of course, every reservoir comes with different conditions. Water depth, changing levels and recreational use can affect whether a project makes sense. Federal researchers also consider existing dam operations when evaluating potential sites.

LAWMAKERS TARGET ENERGY AFFORDABILITY THROUGH SWEEPING PERMITTING OVERHAUL IN NEW HOUSE BILL

This was one of my first questions. These panels are floating on the same reservoir that provides drinking water to about 35,000 people. Lima's system uses Ciel & Terre Hydrelio floats made from high-density polyethylene, or HDPE.

Ciel & Terre says its floating system complies with the BS 6920:2000 standard for nonmetallic materials that come into contact with water intended for human consumption. Still, communities considering floating solar have more to evaluate than whether the structure can float safely.

The National Renewable Energy Laboratory has examined environmental and regulatory questions surrounding floating solar. Its research notes that projects can affect water bodies differently depending on the location. That means a system that works well on one reservoir may require a different design somewhere else.

There is another number worth paying attention to. The Lima project cost about $5.3 million. Federal support played a substantial role in making the numbers work. The city received a $2.4 million Department of Energy grant. Combined with almost $900,000 in federal direct-pay tax credits, that support helped offset roughly half of the project's cost.

Those incentives covered a significant share of the upfront expense. That context is important when another city looks at Lima's projected $10 million in savings. A town considering floating solar would need to look at construction costs, financing and expected electricity production. Available incentives could change the calculation as well.

Lima began considering the project years before crews put panels on the water. City Council approved moving forward with the project in 2023. Construction began in 2025 before the system came online this August.

Lima may look unusual today, but floating solar has substantial room to grow. Ohio already has more than one project. D3Energy and ARP Solar completed a 1.5-megawatt floating array for Del-Co Water in Delaware, Ohio, in 2024. A 6-megawatt system in Monroeville is expected to come online before the end of 2026.

The bigger opportunity stretches far beyond Ohio. National Renewable Energy Laboratory researchers studied federally owned or regulated reservoirs across the U.S. They estimated those reservoirs have technical potential for 861 to 1,042 gigawatts of floating solar capacity.

That figure represents technical potential rather than a prediction that thousands of reservoirs will soon disappear under solar panels. Plenty of locations would never make sense.

Still, the scale helps explain why energy developers and local governments are taking a closer look at water. CyberGuy has covered this idea before on a much larger scale. India's Omkareshwar project showed how enormous floating solar installations can become. We have also seen developers rethink the shape of solar installations on land. One Texas company is building vertical solar towers designed to produce more power from a smaller footprint.

AMERICA’S BROKEN PERMITTING SYSTEM IS QUIETLY RAISING YOUR COST OF LIVING

Here is the part I would keep an eye on. Lima expects to save nearly $10 million in electricity costs over the project's lifetime. But that does not mean residents will suddenly see a cheaper water bill. The city could use those savings in different ways. Lower energy costs could help cover other expenses, pay for infrastructure upgrades or ease pressure on future rate increases.

So, if a floating solar project comes to your town, there is one question worth asking: Will any of those savings eventually make their way back to you? That answer could determine how much this technology really helps the people paying the bills.

You probably do not spend much time thinking about how much electricity your local water plant consumes. Yet you ultimately help pay for that electricity through taxes, utility rates or both. Floating solar gives cities another way to attack that expense without buying a huge parcel of land.

It also raises questions you should ask before cheering on a project. How much will it cost? How much electricity will it realistically generate? What happens to the savings? You should also ask what testing and monitoring will protect the water supply. Those answers will tell you whether a floating solar project makes financial sense for your community.

What I like about Lima's floating solar project is how practical the idea feels. The city already owns the reservoir, and its water treatment plant right next door uses a huge amount of electricity. So instead of finding another piece of land for solar panels, Lima put them on the water. Then there is the projected $10 million in savings. That certainly gets my attention. I want to see whether those savings hold up over time and, more importantly, whether residents eventually benefit from them. Lima also gives other cities something real to look at. We are seeing communities experiment with new ways to generate and store energy, from floating solar to massive battery projects. And who knows? The next solar project in your town may end up floating right on the water.

Would you be comfortable with thousands of solar panels floating on your town's drinking water reservoir if officials said the project could save millions, or would you need to see more long-term evidence first? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report

Amazon's Alexa for Shopping can now verify suspicious messages

Wed, 09 Sep 2026 14:25:06 -0400

We have seen plenty of scams borrow Amazon's name, and some of them look convincing enough to make almost anyone hesitate.

Earlier this summer, we showed you a fake Amazon email that claimed there was unusual activity on an account and pushed the recipient to "Sign In to Verify." The message even suggested a document might need to be uploaded. We have also warned about fake Amazon recruiting texts promising hundreds of dollars a day for easy remote work.

The stories change, but scammers keep coming back to Amazon because so many of us use it. A delivery warning or account alert can feel believable when you are already expecting a package.

Now Amazon is giving customers a new way to answer the question we keep asking when these messages arrive: Did Amazon actually send this? The company says about 360,000 customers contact Amazon customer service every year asking whether a message is real. Its latest answer is built into Alexa for Shopping.

AMAZON JOB SCAM TEXTS ARE SPREADING AGAIN WITH A NEW TWIST

Here is how the new verification tool works, what it can tell you and why you should still keep your guard up when an Amazon message feels suspicious.

Missed CyberGuy LIVE? Watch the Protect Your Money replay

Get the free replay and checklist now at CyberGuyLive.com

Amazon says U.S. customers can now ask Alexa for Shopping whether an email, text, phone call or other message actually came from Amazon. Alexa for Shopping is Amazon's AI shopping assistant. It helps customers find products, compare items and manage shopping through natural conversation. Prime membership is not required to use Alexa for Shopping, but if you are considering joining, see our guide on how to get a cheap Amazon Prime membership at Cyberguy.com.

Now, you can also use Alexa for Shopping when something suspicious lands on your phone or computer. Instead of trying to judge a message by appearance alone, you can describe it to Alexa for Shopping.

You might ask: "Did Amazon send me a text about a delivery problem yesterday?" Or you could ask whether a Prime membership email came from Amazon. You can even provide details about a phone call from someone claiming to offer an Amazon refund. The verification tool then checks the information you provide against Amazon's own communication records.

When you ask Alexa for Shopping about a suspicious communication, provide details about where it came from and when you received it. You can also tell the assistant what the message said. Amazon then compares those details with its records.

According to the company, its technology looks at information such as the sender and message content. It also considers timing and formatting.

That gives Amazon an advantage over tools that simply search for suspicious wording or potentially dangerous links. Amazon can compare the communication with messages generated through its own systems. The company says it only confirms a message as legitimate when the tool has complete confidence.

The answer depends on what Amazon finds. If Amazon can match the communication to its records, Alexa for Shopping tells you it came from Amazon. It can also provide details about the communication and account security advice.

If the message does not match Amazon's records, the tool tells you that the information provided does not appear to correspond with an official Amazon communication.

At that point, Amazon may advise you to check your orders directly in the app or contact Amazon through its official support channels. You should also avoid clicking links in the suspicious message.

There is another possibility. Alexa may tell you that it cannot verify the communication with certainty. If that happens, Amazon provides additional steps. You can submit more detailed information or use another Amazon verification option.

AMAZON RECALL TEXT SCAM COMES WITH RED FLAGS

Alexa for Shopping is only one of Amazon's verification options. Earlier this year, Amazon launched verify@amazon.com. Anyone worldwide can forward a suspicious message to that email address and receive a response about whether Amazon sent it. You do not need an Amazon account or the Amazon app to use the service.

Amazon also offers a communication verification form through its customer service pages. So, if Alexa for Shopping cannot give you a firm answer, you still have another way to check before taking action.

There is another interesting part of the new feature. When you ask Alexa for Shopping to verify a communication, Amazon says it automatically reports that submission to its customer protection and enforcement team.

Those reports can help Amazon identify developing scam campaigns and bad actors impersonating the company. That means the suspicious text sitting on your phone could potentially help Amazon spot a larger scam targeting other customers.

Amazon scams work because they often start with something completely believable. You ordered something last week, so a delivery problem sounds possible. You have a Prime membership, so an account warning gets your attention. Then the scammer adds pressure.

A fake email may claim your account has been locked. Another message might say someone placed an expensive order using your account. That urgency can push you toward a link before you have time to think.

We saw exactly that pattern in the fake Amazon account email we investigated. The message used Amazon branding and warned that the account had been placed on hold. The safest response remains simple. Do not use the link in the message to investigate the warning. Open Amazon yourself and check your account.

FBI HELPS TAKE DOWN AI PHISHING RING

Amazon's new verification feature gives you another way to check suspicious communications. However, scammers will keep changing their tactics, so these steps can help you stay safer.

Be cautious when a message pressures you to act immediately or threatens consequences if you do not respond. Scammers want you reacting quickly because slowing down gives you more time to spot something suspicious.

If a message claims your account will close or a package requires immediate action, avoid clicking its links. Check your Amazon account through the official app or website instead.

Watch for anyone claiming to represent Amazon who asks you to buy gift cards as payment. Amazon warns that it will never ask you to purchase a gift card to resolve an account problem or make a payment. If someone makes that request, stop communicating with them.

Be especially careful if a caller asks for sensitive account information. Amazon says it will never ask for your password or one-time passcode over the phone. If someone claiming to represent Amazon asks for those details, end the conversation and contact Amazon through an official channel.

Phone scams deserve extra caution because the number on your screen can look convincing. Scammers can spoof caller ID information and make a call appear to come from a familiar company. Seeing "Amazon" on your phone does not prove Amazon is actually calling. If someone unexpectedly calls about a refund or account problem, avoid giving them information. Hang up and check your Amazon account independently.

Phishing messages can expose you to malicious websites and dangerous downloads. That is why I recommend using strong antivirus software on your devices. Strong antivirus software can warn you about known phishing sites and suspicious links. It can also help detect malware if a scammer tricks you into downloading something dangerous. Of course, antivirus software cannot replace good judgment. Avoid clicking links in unexpected Amazon messages whenever possible. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

Amazon also points U.S. consumers toward the Better Business Bureau's Scam Tracker at bbb.org/scamtracker. Amazon has partnered with the BBB so consumers can search reports involving suspicious communications. You can search using details such as an email address or phone number. However, a lack of reports does not prove a message is safe. New scams can appear before anyone reports them. When in doubt, verify directly with Amazon.

We have spent a lot of time showing you convincing Amazon scams because they keep arriving in inboxes and on phones. Scammers understand that Amazon feels familiar, which can make an urgent message easier to believe. That is why I think this verification feature has real potential. Instead of staring at an email wondering whether the logo looks right, you can ask Amazon whether the communication lines up with something it actually sent. Still, I would keep one habit above everything else: go around the message. Open Amazon yourself. Check your account from there. If something looks suspicious, use Amazon's official verification tools before you respond. The more ways we have to interrupt a scammer's sense of urgency, the harder it becomes for that scam to work.

Would you trust Alexa to tell you whether an Amazon message is real, or would you still want to verify it another way before taking action? Let us know your thoughts in the comments below. Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report

Innocent woman says police use of Flock camera led to 13 days in jail

Wed, 09 Sep 2026 09:12:24 -0400

Lindsey Brooke Isaacs was asleep at home when police arrived and told the 23-year-old that her car had been involved in a crash that killed three people. She knew they had the wrong person. Her black Dodge Durango showed no obvious collision damage, and she had a receipt showing where she had been.

Still, the investigation eventually led to her being arrested and 13 days in jail. "My heart was in my stomach," Lindsey told me on The CyberGuy Report Podcast at Cyberguy.com/podcast/. "I didn't know what was going on."

Months later, prosecutors dropped all eight felony charges against her and investigators arrested another woman in connection with the crash. Her case now raises a bigger question about how much weight investigators should give license plate camera data when a person's freedom is on the line.

Missed CyberGuy LIVE? Watch the Protect Your Money replay

Get the free replay and checklist now at CyberGuyLive.com

LICENSE PLATE CAMERAS ARE TRACKING DRIVERS EVERYWHERE

The deadly crash happened on Oct. 4, 2025, along eastbound Interstate 4 near DeBary, Florida. Motorcyclist Joaquin Deno died. Flagler County Deputy Administrator Jorge Salinas and his wife, Nancy Salinas, also died. Witnesses reported that a Dodge Durango was involved.

Investigators found Lindsey's black Dodge Durango through a Flock automated license plate reader. The camera recorded her vehicle traveling eastbound near the Seminole and Volusia county line at 9:51 p.m. That camera was about three miles west of the crash scene. The crash happened around 9:53 p.m. That timing became especially important later.

Lindsey's attorney, Patrick McGeehan, said his team performed a time-distance analysis and concluded Lindsey was already beyond the crash location when the collision occurred. So the camera really did capture Lindsey's vehicle. The problem came from what investigators concluded from that sighting. Lindsey put it more bluntly during our conversation. "They just picked up my car off a camera and called it the end of the day. We got her."

The Flock camera hit was far from the only information investigators had. A 911 caller described a maroon Dodge Durango and provided part of its license plate number. Later, investigators also found red or maroon paint transfer on a Ford Focus involved in the crash.

Meanwhile, Lindsey drove a black Dodge Durango. A specialized Florida Highway Patrol team later inspected Lindsey's vehicle and reported finding no damage suggesting it had been involved in a collision with another vehicle.

That finding lined up with something Lindsey said she had been telling investigators from the beginning. "Where is the damage on the vehicle?" she recalled asking police. "Because I'm standing right in front of it and I don't see any damage." Still, authorities impounded her SUV. Months passed.

On April 17, 2026, Lindsey got a call from her attorney. She had to surrender that day. "They are arresting you for this crime," Lindsey recalled him telling her. She faced eight felony charges: three counts of vehicular homicide, three counts of leaving the scene of a crash involving death, leaving the scene involving serious bodily injury and reckless driving causing serious bodily injury. Lindsey spent 13 days in jail.

During our podcast conversation, she described spending her first several days in solitary confinement. She said she had a toilet, a sink and a metal sleeping slab covered by a thin mat. Her charges were so serious, she said, that jail officials initially kept her separated from other people.

Later, Lindsey was transferred to other sections of the jail. After her first bond hearing, she remained behind bars. "I was devastated, I was scared," she told me. "I thought my life was over."

HOW SURVEILLANCE TECH LED POLICE TO ACCUSE THE WRONG PERSON

A new investigation changes the case

The case finally began moving in a very different direction after prosecutors and a specialized Florida Highway Patrol team took another look. That team found no meaningful crash damage on Lindsey's Durango. Investigators revisited witness information and followed evidence pointing toward another vehicle.

On May 22, the State Attorney's Office formally declined to prosecute Lindsey on all eight charges. Authorities then arrested Alisa Lee Montalvo on charges connected to the crash. Prosecutors allege Montalvo was driving a maroon Dodge Durango. She faces nine charges, including three counts of vehicular homicide and tampering with physical evidence. She has not been convicted, and the charges remain allegations.

For Lindsey, the news brought enormous relief. "I felt like a new woman," she told me. "I felt free." Lindsey told me she later received an apology from the head of the Florida Highway Patrol. "It felt like a miracle," she said. "Another miracle from God that I was hearing it in person, face to face."

However, she also said the experience left lasting emotional and physical effects. "This took and is going to take maybe years to get better mentally, physically, emotionally," Lindsey said. Lindsey has since filed a federal civil rights lawsuit against two Florida Highway Patrol troopers involved in the investigation, alleging false arrest, wrongful imprisonment and malicious prosecution. Those claims have not been proven in court.

We reached out to Flock Safety and the Florida Highway Patrol for comment. Flock Safety responded with the following statement:

"Flock cameras provide investigative leads; they do not identify perpetrators, determine guilt, or make arrest decisions. In fact, the complaint itself calls the Flock evidence 'exculpatory, not inculpatory,' meaning the evidence pointed away from Ms. Isaacs rather than implicating her: it accurately placed her vehicle three miles from the crash scene just two minutes before the crash. Characterizing her arrest as the result of Flock technology fundamentally misrepresents both the allegations and the role our technology played in this case."

The Florida Highway Patrol did not respond to our request for comment.

What a Flock camera can record

Flock cameras are automated license plate readers, often called ALPRs. They capture images of passing vehicles and use software to identify license plates. Flock systems can also capture vehicle characteristics including make, model and color. Each camera sighting can create a record linking a vehicle with a particular place and time.

For police, that can become an extremely useful investigative tool. A stolen car can appear on a camera. A vehicle connected to a missing person case could produce a lead. However, Lindsey's experience raises another question. What happens when investigators put too much confidence in one search result? We previously explored that concern after surveillance technology helped police accuse a Colorado woman of stealing a package. Her own phone location history eventually helped show where she had really been.

One of the most interesting moments in my conversation with Lindsey came when I asked whether she blamed the Flock technology or the way police interpreted its data. Her answer was clear. "I 100% think the second one you said, how police interpret the camera footage," she told me. That gets to the heart of this story.

The Flock camera captured Lindsey's vehicle traveling on I-4. The machine did what it was designed to do. Human judgment came next. Investigators had to decide what that sighting meant. They also had to weigh it against witness accounts, physical evidence and the condition of Lindsey's car.

According to Lindsey's federal complaint, the Flock hit three miles from the crash two minutes beforehand, ultimately helped her legal team argue that she was already beyond the crash location when the collision occurred. Technology can surface a lead. People still have to prove what that lead actually means.

FLOCK SAFETY CAMERAS NEED CONSTITUTIONAL GUARDRAILS BEFORE FURTHER DEPLOYMENT, TENNESSEE MAYOR ARGUES

The debate over these cameras has now taken a major turn in Florida. On Aug. 31, the Florida Department of Transportation revoked permits for license plate reader systems within rights-of-way on Florida's state highway system.

FDOT cited the rapid growth of the systems along with reports of misuse and concerns involving data privacy and surveillance. Cameras covered by the order must be removed within 30 days. The agency also said it will stop issuing future permits for license plate readers within its jurisdiction.

However, that order does not eliminate every Flock camera in Florida. It applies to cameras within FDOT-controlled state highway rights of way. Local governments can take different approaches to cameras on city or county property. Several agencies have chosen to pull back further. Miami-Dade County, for example, announced that it would suspend its entire license plate reader program. Other Florida agencies plan to continue using cameras away from state highways.

Flock Safety has also announced significant changes to how its system operates. In August, the company announced that it was changing its recommended and default license plate data retention period from 30 days to seven days.

Flock also plans to require law enforcement customers to use its Audit Assistance tool by the end of 2026. The technology flags unusual search activity for review.

Case codes will also become mandatory for law enforcement searches by the end of the year. Flock says emergency searches can bypass that requirement, although those searches will be flagged for review. Those changes add oversight. Still, safeguards inside the software cannot determine whether an investigator has drawn the right conclusion from the information on the screen.

Most of us probably drive past license plate readers without noticing them. A single plate scan may seem harmless. After all, anyone standing beside the road can see your license plate.

A searchable network changes the equation. Instead of someone seeing your vehicle once, a network of cameras can record when that vehicle passed particular locations.

We have already reported on Flock license plate cameras appearing at some Home Depot and Lowe's parking lots. We also reported on a Washington court ruling that found Flock license plate reader images can qualify as public records under that state's Public Records Act.

Lindsey told me she knew Flock cameras existed before her ordeal. She simply had no idea how much could ride on the information they collected. "I just thought it was like a traffic camera," she said. Today, her opinion has changed. "I feel very different about those cameras now."

POWERFUL CRIME-FIGHTING SURVEILLANCE GROWTH SPURS LAWMAKERS TO ISSUE WARNING: 'ORWELLIAN'

If police tell you that your vehicle appeared in a license plate reader search tied to a serious crime, your own records could become important.

Save receipts and toll records that can help establish where you were. If your phone already stores location history, preserve that information too. Avoid changing or deleting anything related to the period investigators are asking about.

Doorbell cameras and security systems often overwrite older recordings. If footage could show your vehicle at home or somewhere else, preserve a copy as soon as possible. The same goes for dashcam video.

If authorities claim your car was involved in a collision, take detailed pictures and video showing its condition. Photograph and record each side of the vehicle and keep the original files with their date information intact.

A serious criminal accusation can escalate quickly. An attorney can help preserve evidence and communicate with investigators. Legal counsel can also examine whether the available data actually supports what police believe happened.

I'm torn on Flock cameras. If somebody burglarizes my home, I want police to have technology that can help identify the vehicle that drove away. If investigators are trying to locate a missing person, a license plate reader could provide a valuable lead. But Lindsey's story shows what can happen when a lead begins driving the investigation instead of helping investigators test what really happened. Her black Dodge Durango had no crash damage. Other evidence pointed toward a maroon Durango. The timing of the Flock hit ultimately helped her attorney argue that she could not have caused the crash. Yet she still spent 13 days in jail. As I told Lindsey during our conversation, "I can't stand when technology is used in ways that it was never intended for." That is where I land on this. The technology can be incredibly useful. The people using it still need to challenge what they think they know before someone loses their freedom. For more of Lindsey's remarkable firsthand account, listen to or watch my full conversation with her on The CyberGuy Report Podcast at Cyberguy.com/podcast/.

After hearing what happened to Lindsey, would you want Flock cameras in your community, or has this case changed how you feel about police tracking license plates? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Report

AI shopping carts could drive up your grocery bill

Tue, 08 Sep 2026 16:00:04 -0400

Artificial intelligence is making its way into the grocery aisle, and it could have an unexpected effect on how much you spend. You grab a grocery cart, start working through your list and notice a screen on the handle offering directions, coupons and product suggestions. It can keep a running total and may even let you skip the checkout line. That sounds convenient. It also gives the store a new way to reach you while you are deciding what goes into your cart.

New research found that shoppers who chose a smart shopping cart spent 32% more on average than people using a regular cart. They also bought more items and stayed in the store longer. So the question for you is pretty simple: Does a smarter cart help you shop better, or does it make spending more a little too easy?

Here's how the study worked, where these smart carts are already showing up in the U.S. and how to use one without letting it push your grocery bill higher.

Missed CyberGuy LIVE? Watch the Protect Your Money replay

Get the free replay and checklist now at CyberGuyLive.com.

NEW AMAZON AI SEARCH TURNS WORDS INTO SHOPPABLE IMAGES

The research comes from Bayes Business School at City St George's, University of London. The study, published in the Journal of Business Research, looked at how digital shopping carts were associated with spending and shopping behavior. Researchers studied smart shopping carts at a well-known German supermarket chain during March 2025.

They analyzed 12,418 individual shopping sessions over the month. Of those trips, 9,422 involved shoppers actively using the smart-cart technology. These were grocery carts fitted with tablet-style screens on the handle. Shoppers could use the technology for digital shopping lists, personalized recommendations and in-store navigation. The carts also supported checkout-free payment.

Researchers recorded how much shoppers spent and how many items they bought. They also measured how long each shopping trip lasted. The differences were substantial.

Smart-cart shoppers spent 32% more on average than non-users. They also purchased 25% more items and spent 23% more time in the store. The spending gap grew during afternoons and weekends. Meanwhile, shoppers tended to spend the most time in stores during the evening.

Those numbers naturally caught the researchers' attention because a cart that increases shopper engagement could become a valuable tool for stores. Dr. Sabrina Gottschalk, a lecturer in marketing at Bayes Business School and lead author of the study, said the findings suggest retailers could see significant revenue gains from the technology.

She pointed to special offers and new product recommendations as potential opportunities. The screen also creates another place for retailers and brands to advertise while someone is actively deciding what to buy. That last part catches my attention. The screen may help you find something faster. At the same time, it can put another product in front of you when you are already in shopping mode. Your grocery cart has essentially become another screen competing for your attention.

There is an important limitation here. The study found an association between smart-cart use and higher spending. Because the researchers observed shopping behavior rather than randomly assigning shoppers to different carts, the results do not prove that the technology itself caused the 32% increase.

Someone choosing a smart cart may already have planned a bigger grocery run. A shopper with a longer list could also be more interested in technology designed to make navigating the store easier. Then researchers found another wrinkle.

They looked at shoppers who interacted with the smart-cart screen more than 20 times during a single trip. These "superusers" bought significantly more items and stayed in the store longer. However, they did not spend more money overall. Once screen interaction reached higher levels, spending and basket size eventually began to decline.

Researchers suggested that some of these shoppers may have been using the technology more for the experience than because they wanted to buy more. So the research does not prove that tapping a smart-cart screen automatically sends your grocery bill soaring. Still, a 32% difference in average spending is hard to ignore.

BABY BOOMERS HATE 10 THINGS ABOUT TODAY'S GROCERY STORES

While this particular study happened in Germany, smart carts are already rolling through grocery stores here in the U.S. Instacart says thousands of its AI-powered Caper Carts are deployed across more than 100 cities. The company also said in May 2026 that Caper Carts spanned 15 states and were available across more than a dozen retail banners overall. U.S. retailers using the technology include Kroger and Schnucks, along with Wakefern banners such as ShopRite and Fairway Market. Weis Markets has also begun deploying them at select stores.

Caper Carts use cameras, built-in scales and other sensors to understand what shoppers put into or remove from their baskets. The screen can also deliver recommendations while customers move through the store. Amazon has a competing version called Dash Cart.

Its newest Dash Cart displays prices and keeps a running total as you shop. It can offer personalized nearby deals, help navigate the store and let shoppers bypass the traditional checkout line. Amazon says the newest version will expand to dozens of additional Whole Foods Market locations across the U.S. by the end of 2026. That means this technology could become a much more familiar part of your grocery run.

Here is where I think smart carts become especially interesting. A traditional shopping cart holds your groceries. A smart cart can also put promotions directly in front of you while you move around the store.

Instacart says its Caper Cart technology can use signals such as what is already in your basket and where the cart is inside the store to decide when to surface recommendations. The company says prompts designed to remind shoppers about forgotten items have increased average basket size in its own testing. Think about how powerful that can be.

You turn down an aisle and a promotion appears for something nearby. Something already in your cart could also lead to a recommendation for another product. Sometimes that could save you money or remind you about something you genuinely need. Other times, you may end up buying something that never appeared on your shopping list. Retailers have spent decades figuring out where to position products. Smart carts bring another version of that strategy directly onto a screen that moves through the store with you.

There is also a data side to these carts that deserves attention. Instacart says its Caper Carts use basket-facing camera sensors and outward-facing cameras. They also rely on built-in scales and location-tracking systems.

The company says those systems can detect which products enter or leave the basket and how shoppers move through store aisles. Instacart also says its technology can connect physical shopping interactions with purchase history. That data can make the cart more useful. It can also help make recommendations more targeted.

That is why I would pay attention to the privacy settings connected to any grocery-store account or loyalty program you use. Take a look at what information the retailer collects and what controls it gives you over personalized advertising.

MARYLAND MOVES TO BAN SURVEILLANCE PRICING IN GROCERY STORES

You do not have to avoid an AI shopping cart simply because there is a screen attached to it. Some of the technology can genuinely make grocery shopping easier. The key is using those features without letting every recommendation change what you planned to buy.

Decide what you need before you enter the store. When the cart suggests something extra, compare it with the list you already made.

This could actually be one of the best features of a smart cart. Keep an eye on your total as you shop instead of waiting for the final surprise at checkout.

A recommendation may be useful, but remember why it appeared on your screen. The retailer benefits when another product lands in your cart.

Do not assume a coupon or promoted product gives you the best deal. Compare prices and look at the unit price when package sizes differ.

Here is a simple experiment you can do yourself. Compare what you spend during a few smart-cart trips with your regular grocery runs. You may discover the technology helps you stay organized. You could also find that those convenient suggestions are adding more to your bill than you realized. For more ways to cut grocery costs, check out our article on 8 apps that can cut your food bill.

I like technology that removes some of the aggravation from grocery shopping. Seeing your running total can be useful. Getting out of the store without standing in a long checkout line sounds pretty appealing to me too. What I want you to remember is that the screen on your cart has another purpose. Retailers can use it to put offers and recommendations in front of you at exactly the moment you are deciding what to buy. That does not make every suggestion a bad deal. Some could genuinely save you money. Still, the 32% spending difference in this study caught my attention. As these carts become more common in grocery stores, I think we should pay as much attention to how they influence our shopping as we do to how much time they save us. Enjoy the convenience and take the discounts when they really help. Most of all, keep your shopping list and your budget in charge.

Would you grab an AI-powered shopping cart if it helped you skip the checkout line, or would knowing smart-cart users spent 32% more make you stick with a regular cart? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

How to stream safely while traveling outside the US

Tue, 08 Sep 2026 06:47:30 -0400

Traveling abroad used to mean leaving your normal entertainment routine at home. Now, your streaming subscriptions can come with you. However, hotels, airports and cafés often mean unfamiliar Wi-Fi networks and different streaming catalogs.

If you want to stream safely while traveling outside the U.S., a VPN, or virtual private network, can help. It creates an encrypted connection between your device and the VPN server. That adds useful protection when you are on a network you do not control.

A VPN can also let you choose a server in your home country. That can be useful when you sign in to streaming services you already use. Still, content availability depends on the service, your subscription and local licensing rules. Here's what to know before you travel so you can protect your connection, stream more smoothly and avoid surprises along the way.

Missed CyberGuy LIVE? Watch the Protect Your Money replay

Get the free replay and checklist now at CyberGuyLive.com

INSTANTLY UPGRADE YOUR STREAMING: AT HOME AND WHEN TRAVELING

Free Wi-Fi makes travel easier. Yet you often do not know who runs the network, how it is configured or who else is connected. Most major websites and apps already use HTTPS encryption. Even so, a VPN adds another encrypted tunnel between your device and the VPN server. That can reduce what the local network can learn about your internet activity.

This protection is useful beyond streaming. You may check email, book a reservation or sign in to an account while you are away. Turning on a VPN before using unfamiliar Wi-Fi adds another layer of privacy. Of course, a VPN does not make every public network risk-free. You should still avoid suspicious Wi-Fi names, keep your devices updated and use strong account security.

Streaming can get more complicated when you cross international borders. A service may offer one catalog in the U.S. and another in Europe or Australia. Licensing agreements, regional rights and company policies often determine what appears. A VPN can be useful here because it gives you a secure way to connect to the internet while you sign in to subscriptions you normally use at home. You can also choose a VPN server in the U.S. when you need a U.S.-based connection.

However, a VPN does not guarantee access to a particular show, movie, channel or sporting event. Streaming companies set their own terms of use and regional availability rules. A program you watch at home may therefore be unavailable at your destination. Before you travel, check your streaming provider's current policies and the availability of anything you especially want to watch.

If you want a secure U.S. connection while traveling, set everything up before you leave. That way, you are not troubleshooting from an airport lounge or hotel room.

Choose a reputable VPN service and create your account before your trip. Look for one that offers U.S. server locations, apps for the devices you use and enough simultaneous connections for the people traveling with you.

Install the VPN app on every phone, tablet or computer you plan to bring. Then, sign in and test the connection before you leave home. This also gives you time to solve any password, installation or account problems while you still have a reliable connection.

Open your VPN and choose a U.S. server location. Once connected, open your streaming service and sign in normally. Websites and streaming services see the VPN server's IP address instead of your usual public IP address, while the connection between your device and the VPN server remains encrypted. Your streaming provider still decides what programming your account can access.

TRAVEL MISTAKE PUTS PHONE, LAPTOP AND STREAMING ACCOUNTS AT RISK

Streaming services have their own rules for VPN connections, regional access and travel. Netflix, Hulu, Disney+, Amazon Prime Video, YouTube, ESPN and Apple TV+ may handle VPN connections differently, so check your service before you travel.

The exact shows, movies, channels and sporting events you can watch also depend on your subscription and the streaming provider's regional rules.

That is especially important for live TV and sports. Broadcast rights can change by country, league and even individual event. If there is something specific you want to watch during your trip, check the service before you leave.

A VPN can also protect your connection while you watch live sports through subscriptions you already have. That can be useful for football, basketball, baseball, hockey, tennis, cycling, golf and other events when you are away from home.

However, a VPN does not create a subscription or eliminate a provider's blackout rules. Your streaming service still controls access based on your plan, location and its current broadcasting agreements. For that reason, check the event and service before relying on it for a big game.

The best time to prepare is before you are standing in an airport with spotty Wi-Fi. Download the VPN app on your phone, tablet or laptop. Sign in and test it. Also, update your streaming apps before departure.

Next, sign in to the services you expect to use. Some platforms may ask you to verify your identity when they detect a new device or location. Handling that at home can save time later. If your service supports offline viewing, download a few shows or movies before you go. Offline downloads are especially useful on planes, trains and trips where the connection may be unreliable.

When you use a VPN, your traffic travels through the VPN server before reaching the internet. Distance can affect performance. If you mainly want extra privacy and do not need a particular country, choose a nearby server. A shorter distance can often improve speed and latency.

If you need a U.S. IP address for a service you normally use at home, connect to a U.S. server instead. If the stream slows down, try another server in the same country. A different location may have less congestion or better performance.

Not every streaming problem comes from the VPN. Hotel and airport networks can slow down when many people share the same connection. First, check the underlying Wi-Fi. Then, reconnect to the VPN or try another server.

Closing apps that are downloading files, backing up photos or running large updates can also help. If the connection still struggles, lower the video quality. HD and 4K video require much more bandwidth than standard-definition video. A trusted mobile connection may also perform better than crowded public Wi-Fi, depending on your roaming plan and signal strength.

THE TRICK TO SMOOTHER STREAMING AT HOME AND ON THE ROAD

Traveling with a streaming device can make a hotel room feel more like home. However, VPN setup varies depending on the device.

Apple TV: Some VPN providers offer dedicated Apple TV apps that you can install directly on supported models.

Amazon Fire TV and Fire Stick: Many major VPN services offer apps for compatible Fire TV devices.

Roku: Roku does not support traditional VPN apps directly. Instead, you generally need to connect it through a VPN-enabled router or another supported network setup.

Before packing a streaming stick, check whether your hotel television gives you access to an HDMI port. Also, remember that some hotel networks use a browser-based login page. That can make connecting a streaming device more complicated.

A streaming service may license a movie in the U.S. but not in France, Australia or another country. Another broadcaster or streaming company may hold the rights there. As a result, the same account can show a different catalog after you cross a border.

Live sports can be even more complicated because broadcasting rights often vary by market. That is why it helps to check availability before a trip. A VPN can protect your connection and change the location of the VPN server you connect through. However, it cannot change the licensing agreements behind a streaming service.

With so many VPN services available, I would focus on a few practical things. Look for strong encryption, an easy-to-use app, plenty of server locations and support for the devices you plan to bring. If you expect to stream while traveling, also check whether the VPN works well with the streaming services you use and offers servers in the countries you may need.

A VPN encrypts the traffic between your device and the VPN provider's servers, which can add an important layer of privacy when you are using hotel, airport or café Wi-Fi. Before choosing one, check that it supports your phone, computer, tablet and any streaming devices you plan to use. You should also compare how many devices can connect at the same time, especially if you are traveling with family.

I would also look closely at the provider's privacy practices, reputation and independent security audits. Free VPNs can come with limitations such as slower speeds, fewer server choices or questionable data practices, so read the privacy policy before installing one.

Remember that a VPN is a privacy and security tool. You remain responsible for following the terms of your streaming provider and any applicable laws.

For the best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android & iOS devices at Cyberguy.com/VPN.

Streaming abroad is much easier than it used to be. Still, I would not wait until you land to figure out your setup. Install your VPN and update your streaming apps before leaving home. Sign in ahead of time, too. Then download something for offline viewing so you have a backup when hotel Wi-Fi becomes unreliable. I also like using a VPN on unfamiliar networks because streaming is only part of what we do online while traveling. You may use the same connection for email, travel reservations and other accounts. Finally, remember what a VPN can and cannot do. It can encrypt your connection and let you select the location of the VPN server you use. It cannot promise that every show, channel or game will be available everywhere you travel.

What is the biggest streaming headache you have run into while traveling outside the U.S.? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Report