Your home address, phone number and relatives’ names may be sitting on people search websites you’ve never visited. Anyone who finds those listings could learn more about you than you’re comfortable sharing. A data broker opt-out can help reduce that exposure, especially during retirement, when protecting your finances, family and home becomes a priority.

And a tragic case in Minnesota shows why publicly available personal information deserves a closer look. Here’s what happened in Minnesota and the steps you can take to make your personal information harder to find online.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, Oct. 31, at 11 AM ET/8 AM PT. Register for free now at CyberGuyLive.com.

WHAT A SCAMMER SEES THE MOMENT THEY GOOGLE YOUR NAME

In June 2025, Minnesota lawmaker Melissa Hortman and her husband, Mark, were murdered in a targeted attack. State Sen. John Hoffman and his wife, Yvette, were seriously injured in a separate shooting. Investigators discovered notebooks containing the names of public officials and a handwritten list of 11 people search websites in the suspect’s vehicle. 

The list included TruePeopleSearch, Spokeo, Pipl, PeopleFinders, BeenVerified, Whitepages, TruthFinder, Intelius, Ownerly, USSearch and PeopleLooker. The notes described which services were free and what information someone could find through them.

However, the discovery alone did not establish whether the websites supplied the victims’ addresses. On June 11, Vance Boelter pleaded guilty to federal charges in the murders, shootings and stalking of the victims. He was sentenced July 23 to two consecutive life terms, plus 40 years, in federal prison. Separate state charges remain pending. The case raised an unsettling question: How easily could someone find your home address and information about your family?

Data brokers collect information from public records, online activity, commercial databases and other sources. They then combine those details into profiles that businesses and individuals may be able to purchase or access. Some companies specialize in marketing information. Others operate people search websites that make personal details available through free searches or paid reports.

Depending on the company and the available records, those profiles may include:

Not every broker collects or sells all this information. Credit reporting agencies also operate under different legal requirements than many people search services. Still, these records can reveal details you never intended to share with strangers. For a closer look at how criminals assemble this information, read our CyberGuy report on how scammers build a profile on you using data brokers.

Want to see how much of your personal information may already be exposed? Get a free scan to find out if your personal information is already out on the web: Cyberguy.com

Scammers can use publicly available details to make their stories more convincing. As a result, a suspicious call or message may sound surprisingly personal.

Here are some of the potential risks.

Even if you’ve never experienced one of these problems, reducing the amount of personal information available online can make it harder for someone to research you.

THE SECRET LIST THAT TELLS SCAMMERS YOU’RE AN EASY TARGET

You can request removal from many people search websites for free. However, each company may have different requirements, and removing a listing doesn’t always prevent it from returning.

Here’s how to get started.

If you live in California, you now have another option. The state’s free Delete Request and Opt-out Platform (DROP) at privacy.ca.gov/drop/ launched in January 2026. It allows eligible residents to submit one deletion request to more than 600 registered data brokers. Beginning August 1, 2026, covered data brokers were required to start processing those requests. 

The system also requires recurring checks for matching information, although legal exceptions apply and removal is not immediate. Other states have their own privacy laws and removal rights, so your options may depend on where you live.

If manually contacting dozens of websites sounds exhausting, a data removal service can handle much of the work for you. These services help identify data brokers and people-search websites that may have your information. They can also submit removal requests on your behalf and follow up when necessary.

Depending on the provider and subscription plan, available features may include:

To get started, choose a reputable data removal service, create an account and provide the information needed to identify your records. You’ll typically need to authorize the service to submit removal requests on your behalf. Some providers also offer family plans that cover multiple household members.

Before subscribing, compare the websites each service covers, its removal process, ongoing monitoring features and subscription costs.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Even with automated removal, some personal information may remain publicly accessible. Property ownership records, government databases and certain court records can continue displaying details about you. Data removal services generally cannot force government agencies to delete legally available public records.

Additionally, not every website must honor a removal request. Some services offer custom removals, but legal restrictions and technical limitations can prevent certain information from being deleted.

Removing data broker listings also cannot undo previous data breaches or guarantee that scammers will stop contacting you.

Still, reducing the number of websites exposing your information can make it harder for strangers to find personal details. For retirees, that added privacy can help reduce exposure to targeted scams and unwanted contact.

What concerns me most is how much someone can learn about you without ever meeting you. Your address, family connections and personal history can give scammers information they can use to gain your trust. And once that information starts circulating, controlling where it goes becomes difficult. 

That’s why I recommend taking a proactive approach. Start by finding out what’s publicly available, remove what you can and keep checking. If the process becomes overwhelming, a reputable data removal service can help with the ongoing work. You may never erase every trace of yourself from the internet, but you can make your personal information harder to find.

Have you ever searched your name on a people search website and been surprised by how much information was available? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.

Ever find something you want to buy online, leave it sitting in a browser tab and then completely forget where you saw it? Maybe you spotted a great pair of headphones while searching Google. Later, you found a birthday gift at another retailer. Before long, you’ve got a dozen tabs open and no idea which store had the better deal.

Google thinks it has a solution. On Oct. 15, the company began the U.S. rollout of Universal Cart, a new artificial intelligence-powered shopping tool that brings products from different retailers into one place. It also tracks prices, watches for restocks and helps you find savings before checkout.

With holiday shopping approaching, the timing could be especially useful. But there’s another question worth asking. Will having everything in one cart help us spend less, or simply make it easier to buy more?

AMERICANS SAY THEY’RE BROKE. SO WHY CAN’T THEY STOP SPENDING SO MUCH?

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register for free now at CyberGuyLive.com.

AMAZON ABOUT YOU MAY KNOW YOU A LITTLE TOO WELL

Google Universal Cart is a shopping hub that works across Google Search and the Gemini app. Instead of keeping separate lists of products you might buy, you can save items from different retailers in one place. For example, you might find a coffee maker while searching Google and add it to your Universal Cart. Later, while talking with Gemini about gift ideas, you could save a pair of sneakers from another store. When you return, both products will be waiting for you. Google first previewed the tool in May 2026. Now, Universal Cart is rolling out to U.S. shoppers. It uses Google’s Shopping Graph, which contains more than 60 billion continually refreshed product listings. That information helps the system monitor prices and availability across supported products.

The biggest attraction here is convenience. But Google has added several features that could also help you avoid paying more than necessary.

Shopping online often means bouncing between websites. You find something at Target, check another item at Walmart and then head to Sephora for a gift. Remembering where you saw everything can become a chore. Universal Cart lets you save supported products you discover through Google Search and Gemini. More importantly, your saved items stay together when you return to shopping. That could come in handy when you’re shopping for several people or making a big purchase that requires some research. You can keep your options organized without committing to buying anything right away.

Here’s the feature I find particularly interesting. Universal Cart can monitor saved products and notify you when a price drops. It can also alert you when something that sold out becomes available again. Suppose you’re considering a new television but aren’t ready to spend the money. Rather than checking the same retailer every morning, you can save it and let Google’s shopping system watch for changes. The alerts could be especially helpful heading into Black Friday and the holiday shopping season. Still, remember that a price reduction doesn’t automatically guarantee the lowest price available.

IDENTITY THEFT PROTECTION IS CHANGING: WHAT TO LOOK FOR

This is where Google’s AI starts doing some extra work. Universal Cart can surface relevant promotional codes and consider benefits associated with your payment cards. Let’s say you have multiple credit cards but can’t remember which one offers better rewards at a particular retailer. Universal Cart uses information from Google Wallet to understand supported credit card benefits and help you choose between payment methods. It can also show relevant promotional codes directly in your cart, potentially helping you find savings you might otherwise miss. However, I would still check the details before choosing a card. Rewards programs come with conditions, and the highest points offer may not always translate into the greatest savings.

Once you’re ready to buy, Universal Cart offers a more streamlined checkout experience with participating retailers. In some cases, you can complete the purchase using Google Pay directly from the cart. Alternatively, Google can transfer your selected items to the retailer’s website so you can finish your order there. Google says its simplified checkout experiences include retailers such as Nike, Sephora, Target, Ulta Beauty, Walmart and Wayfair, along with many Shopify merchants. However, the available checkout options depend on the retailer. Either way, the retailer remains the seller of record and handles order confirmations and customer support. That means you’ll continue dealing with the merchant for delivery questions or returns.

119,000 FAKE SHOPS COULD STEAL YOUR CREDIT CARD DETAILS

Google began rolling out Universal Cart to U.S. users on Oct. 15. The feature works across Google Search and the Gemini app, although availability may vary as the rollout continues. To explore it, open Google Search or Gemini and look for products you’re interested in buying. When Universal Cart becomes available in your shopping experience, you can save supported products from different retailers. Google says those items will remain in your cart when you return, allowing you to pick up where you left off. You can also use the cart to monitor price changes, discover promotional offers and review available checkout options. However, Google hasn’t provided a single set of instructions that applies to every device. The appearance and placement of these features may vary.

NEW AMAZON AI SEARCH TURNS WORDS INTO SHOPPABLE IMAGES

Not necessarily. Google says Universal Cart can organize products across retailers, but that doesn’t mean every online store supports every feature. The products you can save depend on supported shopping experiences. Meanwhile, checkout options vary depending on the merchant. Some purchases can happen through Google Pay in the cart, while others require you to finish on the retailer’s website. Google originally introduced Universal Cart in May with plans to bring it to Search, Gemini, YouTube and Gmail. However, its October 15 launch announcement specifically confirms availability across Search and Gemini in the U.S. Google has not announced a confirmed launch date for Universal Cart integration with Gmail or YouTube.

Behind the scenes, Google uses something called the Universal Commerce Protocol, or UCP. It’s a shared technical standard designed to help AI-powered shopping tools communicate with retailers and payment systems. For shoppers, the technical details are less important than what they make possible. UCP helps Google connect product discovery with checkout, reducing the need to jump between different shopping experiences. Google has also been expanding AI shopping beyond the cart. Its Let Google Call feature, for example, can use AI to contact nearby stores and check product availability. Amazon has been developing AI-powered shopping tools, while OpenAI offers AI agents that can assist with shopping-related tasks. The competition to become your digital shopping assistant is heating up.

Having Google organize your shopping could be convenient, especially if you already use Search and Gemini. Still, it’s worth considering how much shopping information you’re comfortable keeping within your Google account. Universal Cart uses Google Wallet to help identify supported payment benefits and relevant offers. However, Google’s launch announcement doesn’t provide detailed information about how long Universal Cart shopping data is retained or exactly how it may be used for advertising. Before relying on the feature, review your Google account’s privacy settings and Google’s published privacy policies. For now, I would avoid assuming that adding something to Universal Cart keeps that shopping interest private. And if you’re buying a surprise gift for someone who shares access to your Google account, think twice before saving it there. Of course, the usual online shopping precautions still apply. Before completing a purchase, check the final price and verify that you’re buying from a legitimate seller. A familiar checkout experience shouldn’t replace those basic habits. For more help spotting suspicious sellers, see our guide on how to tell whether an online store is real or a scam.

I like the idea of having one place to keep track of everything I’m considering buying, especially when the holidays roll around. The price alerts could be genuinely helpful. And if Google’s AI can find a discount code I would have otherwise missed, I’m all for it. But I’m also watching where this is heading. Google is making shopping increasingly convenient, and that convenience can be a double-edged sword. When a company knows what you’re interested in buying and makes checkout easier, there’s less time to reconsider a purchase. My advice? Use Universal Cart to do your homework and save money. Just don’t let the technology do the deciding for you.

Would you trust Google’s AI to help you shop and choose how to pay, or are we giving tech companies too much influence over what we buy? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.

Have you ever found something you wanted to buy, only to wonder whether the price might drop next week? Maybe it’s a new pair of headphones, a kitchen appliance or a gift you’ve had your eye on. You could keep checking the website every day, but who has time for that?

Here’s something you may not realize. Your phone can help watch prices for you. Apple’s Safari browser has a feature that monitors website changes, while Google’s shopping tools offer price tracking on supported products.

That means you can spend less time refreshing product listings and more time deciding whether a deal is actually worth your money. I’ll show you how to set up these alerts on an Apple iPhone, Samsung Galaxy and Google Pixel.

8 SERIOUSLY ANNOYING TASKS YOU CAN HAND OFF TO AN AI AGENT

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, Oct. 31, at 11 AM ET/8 AM PT. Register free now at CyberGuyLive.com.

Apple introduced a feature called Notify Me in Safari with iOS 27. Instead of returning to a website to see whether something has changed, you can tell Safari what to watch. For example, you might ask Safari to notify you when a pair of headphones drops below $150. You could also monitor a sold-out item and get an alert when the website indicates it’s available again.

Unlike a traditional price tracker, Safari can look for other changes on a webpage, too. However, the feature doesn’t work with every website, and alerts depend on Safari detecting the requested change.

Important: Notify Me requires Apple Intelligence. It works on compatible models, including the iPhone 15 Pro, iPhone 15 Pro Max and iPhone 16 or later. The standard iPhone 15 and iPhone 15 Plus do not support Apple Intelligence.

Safari checks the page at your selected interval and sends a notification when it detects the change you requested. The available checking intervals include hourly, daily, weekly and monthly options. You can also use Notify Me for something other than shopping, such as watching for event tickets or a registration page to open. Just remember that updates are not necessarily instantaneous.

Yes. If you have a standard iPhone 15 or another model that doesn’t support Safari Notify Me, you can use Google Chrome instead. Google offers Chrome price tracking on iPhones running iOS 15 or later, including iOS 27. It works on supported product pages and requires a signed-in Google Account, history synchronization and the necessary browsing settings.

To manage tracked products, look for Track Price in Chrome’s three-dot menu. You may also find alert controls under Chrome > three-dot menu > Settings > Notifications. The exact options can vary by Chrome version and account.

Don’t see Track Price? The option may not be available for that product or your account. You can also try searching for the product in the Google app and looking for a price-tracking option in its shopping results.

ANTI-SCAM SETTINGS ON IPHONE, PIXEL AND GALAXY YOU SHOULD CHECK

Samsung Galaxy and Google Pixel owners can use Google’s shopping tools to track products and receive alerts when prices fall. The easiest place to start is the Google app, which works similarly on both phones. Chrome may also show price-drop indicators on shopping pages you’ve left open.

Google can send you a notification on your phone or an email when the product reaches your selected price. Make sure you’re signed into your Google Account and have notifications enabled.

Don’t see Track price? Go back to your search results and tap Shopping near the top of the screen. Select the product you want and look for Track price again. Google doesn’t offer price tracking for every product, and the option may not appear for every account.

There’s another handy option for Samsung Galaxy and Google Pixel owners. Chrome can actively track prices on supported product pages and alert you when they drop. That means you don’t have to leave a shopping tab open and keep checking it yourself.

Here’s how to get started:

You can find your tracked items under Chrome > three-dot menu > Bookmarks > Tracked products. To manage alerts, go to Chrome > three-dot menu > Settings > Google services > Get price tracking notifications. From there, you can adjust mobile and email notifications. Keep in mind that this feature only works on supported product pages. You’ll also need to be signed into Chrome with your Google Account, enable syncing for tabs and browsing history and turn on Make searches and browsing better.

AI SHOPPING CARTS COULD DRIVE UP YOUR GROCERY BILL

Google introduced Universal Cart in the United States earlier this month. The feature is rolling out across Google Search and the Gemini app, giving shoppers another way to keep track of products without constantly checking different websites. Universal Cart lets you save items from multiple retailers in one place. Once you’ve added a product, Google’s shopping tools can monitor its price and alert you when the cost drops or an out-of-stock item becomes available again. The cart can also identify promotional codes and suggest payment options that may help you save money.

For example, if you’re shopping for a new TV, you can save models from different stores and let Google watch for price changes. When you’re ready to buy, you can complete eligible purchases through Google Pay or finish checkout directly on the retailer’s website. Universal Cart is rolling out in the U.S., so it may not appear in every account immediately. It’s another option worth checking if you already use Google Search or Gemini to shop.

If you don’t see Notify Me or Track price, the feature may be unavailable for your phone, account or shopping website. Start by checking that your apps and browser are updated. On iPhone, Safari Notify Me requires a compatible device with Apple Intelligence enabled. For Google’s shopping tools, make sure you’re signed into your Google Account. Chrome may also require additional browsing or synchronization settings for certain shopping features.

Some product pages simply don’t support tracking. In that case, try another retailer’s listing for the same item. Google’s price-tracking features are available in supported countries, including the United States, although availability varies by product and account.

A lower price can be tempting, especially when a notification pops up while you’re doing something else. However, I wouldn’t rush to check out without checking a few details.

A price alert tells you something has changed. It doesn’t necessarily mean you’ve found the lowest available price.

Price tracking comes with a privacy trade-off worth understanding. Google’s shopping tools use your Google Account to manage tracked products and alerts. Certain Chrome shopping features may also require additional browsing information or settings, including Make searches and browsing better. You should review those options before enabling them.

That setting allows Chrome to share browsing-related information with Google to improve its services. You can review these options under Chrome > 3 dots in the upper right >Settings > Google services. Apple’s Safari Notify Me uses Apple Intelligence to monitor webpages for requested changes. Before enabling either feature, consider whether the convenience is worth the information and permissions involved.

Be careful about clicking price-drop alerts or shopping links from unfamiliar senders. Scammers can create fake sale notifications that lead to fraudulent websites. Strong antivirus software can provide an additional layer of protection by helping detect malicious links, phishing attempts and other online threats. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

I’ve lost count of how many times I’ve looked at something online, decided to wait and then completely forgotten to check whether the price dropped. That’s why I like having my phone do some of the watching for me. With Safari’s Notify Me feature in iOS 27, compatible iPhones can monitor more than just prices. 

Meanwhile, Google’s shopping tools can help Samsung Galaxy and Pixel owners follow prices on supported products, while Chrome offers additional shopping features on compatible devices. My advice is to start with something you actually need, especially a larger purchase where a price drop could save you a meaningful amount. Set up an alert and see what happens. You might save some money without spending your evenings hunting through shopping websites.

Have you ever bought something only to see the price drop a few days later? Would you trust your phone to watch prices for you, or do you prefer hunting for deals yourself? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.

Your phone buzzes. Another political text. This time, it’s an urgent fundraising appeal claiming a campaign desperately needs your help before midnight. You delete it, block the number and get on with your day. Then tomorrow, another one arrives from a completely different number. Sound familiar? I’ve been there, and frankly, I’m fed up with it.

On “The CyberGuy Report” podcast, I sat down with George Weiner, founder of PACspam.org and head of the digital agency Whole Whale. George got so frustrated with the relentless political texts that he created a free tool to help people figure out who’s sending them. Our conversation revealed why blocking numbers often gets you nowhere, how political fundraising has become a lucrative business and what you can do to fight back.

FIVE DATA BROKER OPT-OUT MYTHS THAT LEAVE RETIREES EXPOSED

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

You would think blocking a phone number would send a pretty clear message. Apparently, political texting operations don’t always take the hint. I asked George why texts from the same political groups kept showing up after I blocked their numbers. “Well, you block one number, and you’ve only blocked one number,” Weiner explained.

He introduced me to a technique called snowshoeing, which allows an organization to spread its messages across multiple phone numbers. A single campaign or political action committee (PAC) may use many different numbers to reach the same people. So, even after you block one sender, another number can deliver the next fundraising appeal.

For George, this frustration became personal. As a father of three, he worries about missing an important call from his children’s school. “That could be the school, right? That could be an emergency,” he explained. Instead, his phone often interrupts him with another fundraising appeal. He tried replying STOP, reporting messages and registering for the National Do Not Call Registry. Yet the interruptions continued. “I have done it all, and I still get these messages,” Weiner said. That raises a question I’ve been asking for years. How did these organizations get our phone numbers in the first place?

You might assume a campaign needs your permission before adding your number to its texting list. Unfortunately, political outreach operates under rules that leave plenty of room for unsolicited messages. Weiner explained how phone numbers can circulate through political donor and voter databases. Campaigns may also combine registration information with commercially available data to identify potential supporters. Furthermore, organizations can purchase or exchange contact lists, allowing your information to reach groups you’ve never heard of.

Voter registration records vary by state, and phone numbers aren’t necessarily public in those records. However, organizations can match voter information with other databases to build detailed contact profiles. Political donations can create additional exposure. As we’ve previously reported, federal political contribution records can reveal personal information, including your name and address, when disclosure requirements apply. Once your number enters this fundraising network, tracking every organization that holds it becomes extremely difficult.

Here’s something from my conversation with George that really caught my attention. There’s a substantial amount of money flowing through the political texting business, and the people sending these messages have financial reasons to keep doing it. Weiner pointed to approximately $65 million spent on political texting services during the 2024 election cycle, based on his analysis of Federal Election Commission records. He also believes 2026 spending could exceed that amount, although a final election-cycle total isn’t yet available.

George also highlighted how much money individual political messaging vendors receive. According to PACspam’s analysis of FEC records covering December 2008 through May 2026, reported payments totaled $17 million for Switchboard, $14.4 million for Mothership Strategies and $10.6 million for Message Digital. These figures span multiple election cycles and reflect reported payments to political messaging vendors, which may include services beyond texting.

“There is money to be made,” Weiner told me. He explained that fundraising operations can keep paying to send messages as long as the donations they generate justify the expense. Even a small percentage of people responding with money can make another round of texts financially worthwhile. Some appeals claim a donation deadline is approaching or suggest a candidate faces an immediate financial emergency. Others use provocative headlines designed to make you react before thinking.

Weiner also raised concerns about how much money some PACs actually direct toward candidates. He pointed to investigations suggesting that certain organizations spend heavily on fundraising while relatively little reaches the candidate being promoted. PACs operate under different rules, however, and not all are established to make direct candidate contributions. That’s why it’s important to investigate where your donation will go. And this problem crosses political lines. Weiner stressed that organizations associated with different political parties use these tactics. The repeated pleas for money, he believes, can end up alienating the very voters campaigns want to reach. That brings us to an interesting way to investigate who’s behind the messages.

George created PACspam.org to give people more information about the organizations filling their phones with unsolicited political messages. “Our phones don’t have to live like this,” Weiner said while explaining why he built the tool. The free service analyzes political fundraising texts and attempts to identify the committee behind them. It can examine fundraising links and use public campaign finance information to help trace the organization responsible. PACspam also helps document complaints and tracks repeat offenders using information connected to FEC-registered committees. Its public leaderboard focuses on texting behavior rather than political affiliation. Meanwhile, its FEC Texting-Spend Explorer lets visitors investigate campaign spending on texting services. In some cases, PACspam can also help identify the texting technology provider that delivered the message. That last part is particularly interesting because those technology companies may serve multiple political organizations.

Rather than contacting only the committee asking for money, Weiner suggests contacting the texting platform when it can be identified. “They do answer,” Weiner told me when I asked whether these companies respond to complaints. He described receiving a response from the legal department of a texting provider. That company explained how he could request placement on its own do-not-contact list. The approach could be more useful than blocking one phone number because it targets a provider that may handle messages for multiple political organizations. Still, one company’s removal list won’t necessarily apply to competing platforms. Of course, results can vary. An organization may use another platform, and some messages don’t contain enough information to identify the sender. Still, contacting a texting provider offers another avenue to pursue.

DEM FUNDRAISING GIANT ACTBLUE ACCUSED OF FRAUDULENT DONATION ‘COVER-UP’ IN EXPLOSIVE REPORT

Getting started requires only a political text you’ve received. Here’s what to do.

PACspam can prepare complaint information and help document unwanted political messages, but it doesn’t automatically send those complaints on your behalf. It also cannot guarantee that your number will disappear from political texting lists. I also asked George an important privacy question. What happens to the information people submit? “We’re not collecting your number. I just want that message,” he said. According to Weiner, you don’t need an account to use PACspam. Whole Whale also says uploaded screenshots are processed and discarded, while personal messages aren’t displayed publicly. Those are the service’s stated privacy practices, so I still recommend removing identifying details before submitting anything.

Here’s where things get frustrating. The Federal Communications Commission treats political texts differently depending on how they’re sent. Political messages sent through an automatic telephone dialing system generally require prior express consent before reaching your cellphone. However, messages sent manually through peer-to-peer texting systems can fall outside those restrictions. That helps explain why so many campaign texts can reach people who never specifically requested them.

The National Do Not Call Registry generally doesn’t cover political outreach either. So, registering your number may reduce some telemarketing calls without stopping political fundraising appeals. The FCC also says political campaigns should honor opt-out requests when recipients reply STOP. For robotexts covered by federal consent rules, revocation requests must generally be honored within 10 business days. However, an opt-out from one sender won’t necessarily remove your number from other political organizations’ databases.

You may not be able to eliminate every political text, but several steps can reduce the interruptions and help protect your information.

If you receive a message from a legitimate political campaign or organization, replying STOP can unsubscribe you from that sender’s messages. However, be selective. If the text looks suspicious or contains an unfamiliar fundraising link, avoid responding. Scammers sometimes impersonate political organizations, and engaging with suspicious messages may confirm that your number is active.

Your smartphone already has tools that can help move unwanted messages out of your main inbox. Here’s where to find them.

On iPhone running iOS 27:

Unknown senders can move into a separate folder, reducing interruptions. If needed, tap Allow Notifications to choose which categories of unknown messages can still alert you. Availability varies by region.

On Google Pixel or Samsung Galaxy using Google Messages:

Google Messages can flag suspicious texts and move some of them into the Spam & blocked folder. Menu options may vary by device and app version. Remember to review your filtered messages occasionally so important texts don’t get overlooked.

FCC ROBOCALL CRACKDOWN COULD CHANGE PHONE PRIVACY

Blocking individual numbers can reduce messages from persistent senders, even though other numbers may still get through.

On an iPhone, open the unwanted conversation, tap the sender’s icon, select Info and choose Block Contact. On an iPhone, reporting a message as spam doesn’t automatically block the sender. You need to block the contact separately if you want messages from that number stopped.

On Google Messages, touch and hold the unwanted conversation, then tap Block. You can also select Report spam before confirming.

For additional guidance, see our guide to blocking phone numbers and texts.

You can forward unwanted political texts to 7726, which spells SPAM on a telephone keypad. This alerts your wireless carrier and can help its spam detection efforts. For suspected violations of federal calling or texting rules, you can also submit a complaint through the FCC Consumer Complaint Center. If the text appears to be a scam, report it to the Federal Trade Commission at reportfraud.ftc.gov/. Keep a screenshot of the suspicious message if you may need it for your report.

One of George’s strongest recommendations involves political donations. If you want to support a candidate, find that candidate’s official website yourself rather than following a link in an unsolicited text. During our interview, George warned that donating through unfamiliar political fundraising texts can encourage additional solicitations. He described how a successful donation might lead organizations to think, “We got one, let’s send twice as many messages.” His recommendation was straightforward: Give through the candidate’s official website instead of an unsolicited fundraising link. That helps you verify who is receiving your money. However, even donating directly can lead to additional campaign messages, so review the site’s privacy disclosures and contact preferences.

Additionally, consider limiting how widely your phone number appears online. Data brokers can collect and resell personal information, and removing your details from covered sites may reduce future exposure. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Keep in mind that commercial data removal services cannot erase legally required public campaign finance records. They also can’t guarantee removal from every political organization’s contact database.

What struck me most about my conversation with George is how much money is being made from messages that so many of us desperately want to stop. We block numbers and ask to be removed, yet the texts keep coming. And the organizations making money from this system have little incentive to change it. I appreciate that George decided to do something about it. His PACspam tool offers a way to investigate who’s behind these messages and push back through official complaint channels. I’d love to see political organizations become more accountable for how they use our personal information. After all, supporting a candidate shouldn’t mean giving every fundraising operation unlimited access to your phone. Want to hear exactly how George is fighting back? Listen to my full interview with George Weiner on The CyberGuy Report podcast. We dig deeper into the political texting business, the companies behind it and what you can do when blocking numbers fails. And if you’re ready to reduce even more unwanted messages, head to CyberGuyLive.com for my free Sick of Spam? class replay. You’ll get practical advice for reducing robocalls, unwanted texts and junk email, along with a free spam-stopping checklist.

Should political campaigns have to get your permission before sending fundraising texts, and should the companies profiting from those messages face consequences when you repeatedly ask them to stop? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.

Ever notice that websites keep asking you to verify your identity when you’re using a VPN? Whether you’re checking your bank account, signing into email or shopping online, those repeated security checks can get frustrating. Your VPN may be part of the reason.

A VPN changes the IP address websites see, which can sometimes trigger additional verification requests. Fortunately, a dedicated IP address may help reduce those interruptions while keeping your VPN protection enabled. Here’s what you need to know.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

YOUR BANK MAY STOP TEXTING YOU SIX-DIGIT CODES

First, let’s set the record straight: A VPN generally does not interfere with how your passkeys or two-factor authentication codes work. Time-based authenticator codes are generated on your device and can work without an internet connection. Passkeys use cryptographic keys to verify your identity during a sign-in, while push notification approvals require a network connection. A VPN can usually work alongside all of these methods. What it does change is the public IP address websites see. When you connect through a VPN server, websites and apps see that server’s IP address instead of your usual public IP address.

That’s the whole point. But it’s also why banks, email providers, and financial apps sometimes get nervous. These services use your IP address as one of many signals to decide whether a login looks legitimate. If you always log into your bank from roughly the same location and the same address, and suddenly your account is being accessed from a different city or a different country, the system flags it. Not because your VPN broke anything, but because from the app’s point of view, someone new just walked in the door.

One common trigger is a VPN connection that uses shared IP addresses. Your public IP address may change when you reconnect or switch servers, although some VPN connections can keep the same address across multiple sessions. For a bank or workplace login portal that recognizes your usual login patterns, an unfamiliar IP address or location can raise a red flag.

The second trigger is shared IP addresses themselves. When hundreds of users connect through the same VPN server, they all appear to be coming from the same address. Websites and security systems recognize these addresses as VPN traffic and treat logins from them with extra suspicion. That means more CAPTCHAs, more verification steps, more temporary lockouts. Neither of these is a flaw in your VPN. It’s doing exactly what it’s supposed to do. But if you’re regularly logging into sensitive accounts, those extra security checks can get frustrating fast.

One potential solution is a dedicated IP address. Instead of sharing an IP address with other VPN customers, you receive a fixed address reserved for your use. Each time you connect to that dedicated VPN location, websites see the same public IP address. This consistency may help reduce unnecessary CAPTCHAs and security checks, especially on services that consider your usual login location.

However, a dedicated IP doesn’t guarantee that a bank or website will recognize your connection as trusted. Security systems also evaluate your device, account activity and other risk signals.

Some VPN providers offer dedicated IP addresses as part of their subscription plans or as a paid add-on. These services let you maintain a consistent IP address while keeping your internet traffic encrypted through the VPN. However, privacy protections vary by provider, so check how your dedicated IP is assigned and whether it can be linked to your account.

There is also an important trade-off. Because only you use your dedicated IP, websites may find it easier to associate repeated visits with the same address. Shared VPN addresses can provide greater privacy against IP-based tracking by mixing your traffic with other users.

For people who frequently encounter login interruptions, a dedicated IP may provide a more consistent browsing experience without giving up VPN encryption.

For the best VPN software, see my expert review of the best VPNs for browsing the web privately on your Windows, Mac, Android and iOS devices at CyberGuy.com.

ANTI-SCAM SETTINGS ON IPHONE, PIXEL AND GALAXY YOU SHOULD CHECK

If you’re still running into extra verification requests, here are five things worth trying.

Some VPN server IP addresses trigger more security checks than others. Try connecting to a server closer to your actual location. This may help reduce verification requests, although websites can still recognize VPN traffic.

Some VPN services offer split tunneling, which lets you choose which apps use the VPN connection. For example, you might allow your banking app to connect directly to the internet while keeping other apps protected by the VPN. Just remember that apps bypassing the VPN will expose your regular public IP address. Feature availability varies by provider and device. Only bypass the VPN for sensitive apps when you’re using a network you trust.

If your six-digit authentication codes aren’t working, your device’s clock could be the problem. Time-based codes depend on accurate time settings. Make sure your phone’s date and time are set to automatic. If codes still fail, confirm you’re selecting the correct account in your authenticator app.

Some websites offer a “Don’t ask again on this device” option after you verify your identity. Selecting it can reduce repeated security checks on your personal computer or phone. Make sure your browser allows cookies for those websites, since private browsing or automatically clearing cookies can cause them to forget your device. Never use this option on a shared or public computer.

A VPN can trigger extra security checks, but that doesn’t mean every authentication request is legitimate. If your phone asks you to approve a login you didn’t initiate, deny it. Someone could be trying to access your account. Check your recent account activity for unfamiliar sign-in attempts. If you spot anything suspicious, change your password and review your account’s security settings.

HOW TO FIND COMPROMISED PASSWORDS ON IPHONE AND ANDROID

I like the extra privacy a VPN provides, but I can understand how repeated security checks could get frustrating. A VPN generally works alongside passkeys and two-factor authentication without interfering with their underlying security. However, changing IP addresses and shared VPN connections can prompt websites to request additional verification. A dedicated IP may reduce those interruptions by giving websites a more consistent connection to recognize. It won’t eliminate every security check, but it can make frequent logins more convenient. The most important thing is to keep your authentication protections enabled, even when an extra verification step feels inconvenient.

Have you ever been locked out of an account while using a VPN, or found a solution that smoothed things out? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.

Take a look inside your wallet. There is a good chance at least one piece of plastic in there does little more than display a barcode. Maybe it is your library card. Perhaps it is a gym membership, grocery rewards card or another card you pull out every once in a while. Until now, getting some of those cards onto an iPhone could depend on whether the organization offered its own digital pass. Apple is changing that with iOS 27.

The latest iPhone software lets you create your own pass in Apple Wallet from a physical card, photo or screenshot. Samsung Galaxy and Google Pixel owners have similar options, which means you may be able to leave a few more plastic cards at home. Here is how to turn a membership card into a digital pass on all three phones.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

HOW TO SEARCH ANYTHING ON IPHONE, GALAXY AND PIXEL

Apple added the ability to create your own passes in Wallet with iOS 27. This comes in handy when a membership or loyalty card has a barcode or QR code, but the organization never gave you an “Add to Apple Wallet” button. Apple specifically points to library cards and gym memberships as examples.

If you have an Apple Intelligence-compatible iPhone, you can create a pass from a photo or screenshot containing the barcode or QR code. Apple Intelligence recognizes the code and can give you the option to add it to Wallet.

Apple Intelligence on iOS 27 requires a supported device, including the iPhone 15 Pro, iPhone 15 Pro Max or iPhone 16 family and later compatible models. Availability can also depend on your language and region. However, Apple also gives you a manual way to create a pass directly inside Wallet.

First, make sure the barcode or QR code is clearly visible. A blurry photo could make the code difficult for your iPhone to recognize or for a scanner to read later. On a compatible iPhone, Apple Intelligence can recognize the barcode or QR code in a photo or screenshot and offer to create a Wallet pass.

On a compatible iPhone running iOS 27 or later:

Pro tip: After you create the pass, you can tap View Original Photo to see the image you used.

You can also build a pass yourself in iOS 27. This gives you another option when you want to add the information manually.

Once you’ve created a pass, you can customize its appearance or change the information it contains. You can also add or remove fields if you want different details displayed.

HERE’S SOME TIPS ON HOW TO ORGANIZE PHOTOS WITH KEYWORDS ON YOUR PHONE

Samsung Galaxy owners already have a similar option through Samsung Wallet. Samsung says almost any membership card with a barcode can be stored in the app.

On a Galaxy phone running the latest available Samsung software:

Samsung also supports participating memberships that are already built into Wallet. Once you need the card, open Samsung Wallet and select the membership. The barcode can then appear on your screen for a cashier or compatible reader to scan. Menu names can vary slightly depending on your Galaxy model and Samsung Wallet version.

Google Wallet can save passes from images when they contain a barcode or QR code. Google specifically lists library cards, gym passes and parking passes as examples.

On a Google Pixel running the latest software:

When you need the card, open Google Wallet and select the pass. You can then scan its barcode or QR code at the reader.

Tip: Google also lets you return to the original image you used to create the pass. Open the pass and tap the More button in the upper-right corner to find the original image.

You may also see Everything else under Add to Wallet. Google uses this option for creating other types of passes from a photo. Select Everything else, accept the consent terms if prompted, then take a photo or choose one from your phone. Google will preview the information it detects so you can review and manually edit it before tapping Add.

Start with cards whose main purpose is giving a business or organization a barcode or QR code to scan. A library card is an obvious candidate. Gym memberships and store loyalty cards may work well, too. Parking passes and other simple barcode-based credentials can also be good candidates, depending on how the organization verifies them.

The easiest test is to look at the physical card. If the person behind the counter normally scans a static barcode or QR code printed on it, there is a reasonable chance a digital version can work. Keep the physical card until you have successfully tested the digital version. Some scanners may have trouble reading a phone display, and some organizations may require the original card.

There is an important limit here. Creating a digital pass from a photograph does not turn every card in your wallet into an official digital credential. Do not assume you can photograph a driver’s license, credit card, secure workplace badge or another sensitive credential and use the resulting image as an official replacement.

Some digital credentials require verification from the organization that issued them. Payment cards also have separate security and enrollment requirements. Event tickets deserve extra caution. Many ticketing services now use barcodes that refresh or change to prevent fraud. A screenshot of one of those codes may fail at the gate. Whenever an issuer provides an official Add to Apple Wallet, Add to Google Wallet or Samsung Wallet option, use that instead.

YOUR PHONE SAYS IT’S UPDATED. CHECK OTHER SETTINGS, TOO

I like this iOS 27 addition because it fixes a surprisingly annoying limitation. I have had plenty of cards with perfectly usable barcodes that could not go into Apple Wallet simply because the organization behind them never created a digital pass.

Now Apple is giving iPhone owners more control over that process. Samsung and Google already offer useful ways to accomplish something similar, so this is one of those rare phone features that can help you regardless of which of the big three you carry.

I would start with the low-risk stuff. Put your library card or gym membership on your phone and see how it goes. If it saves you from carrying another card around every day, great. Just remember that a photo-based pass and an official digital credential are very different things. Your phone can replace more of your wallet than it used to, but I would not empty the whole thing yet.

If your phone could replace every card in your wallet tomorrow, which physical card would you be most nervous about giving up for good? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.

Artificial intelligence can write your emails, research complicated questions and even handle tasks while you’re away. But what happens when an AI system takes an action nobody intended? Philadelphia police recently got an unexpected answer.

An AI model developed by Anthropic submitted a fabricated eyewitness tip about an unsolved murder through a Philadelphia police website. The submission happened during automated testing, and the model apparently believed it was generating an example interaction. Fortunately, the tip was flagged as spam before reaching investigators. However, the incident raises an uncomfortable question about what happens when AI agents interact with websites and public services without adequate safeguards.

AG BLANCHE REJECTS CALLS FOR NEW AI LAWS AFTER ROGUE AGENTS TARGET US GOVERNMENT WEBSITES

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

The incident involved PhillyUnsolvedMurders.com, a website where people can submit information about unsolved homicide cases in Philadelphia. On July 18, 2026, an AI model submitted a tip claiming to have information about a killing. According to Anthropic’s October 9 report, the model was Claude Haiku 4.5. It had been assigned to generate and perform example tasks on randomly selected webpages. During one test, Claude encountered a page about an unsolved homicide that included a police department tip form. Rather than simply demonstrating how someone might use the form, Claude filled it out with invented information and submitted it.

Here’s what the model wrote: “I may have information regarding this case. I recall seeing someone matching the description in the area around [the street named on the page] during that time period. Please contact me if this information is relevant.” There’s a particularly troubling detail here. The website contained no description of the perpetrator. Claude invented that reference while presenting itself as someone who might have witnessed something relevant to the investigation. The model also left the name and contact fields blank, which the website permitted. It then submitted the tip. Fortunately, the police department’s spam filtering caught the submission before it could reach detectives.

Anthropic’s explanation reveals how a relatively simple oversight can lead to an unintended action. Claude had been instructed never to log in, create accounts, enter personal information, make purchases or submit anything destructive. However, those restrictions did not explicitly prohibit submitting online forms. As a result, the model completed the tip form as part of its assigned task.

Anthropic says the available transcript suggests Claude was generating example content rather than intentionally trying to mislead law enforcement. However, the company acknowledges that determining a model’s intentions requires further analysis. That qualification is important. The evidence does not establish that Claude deliberately set out to deceive investigators. Instead, the incident shows how an AI system can carry out an action that its developers never intended, even while apparently attempting to complete its assigned task. Because Claude had access to the live internet during testing, it was able to submit the fabricated tip directly to a police website.

According to the Philadelphia Police Department’s October 9 statement, the submission was flagged as spam and never forwarded to its Real-Time Crime Center for investigative review or distribution. After Anthropic briefed police on October 8, department personnel located the submission in the website’s tip records and confirmed that the corresponding email remained in spam. Police also reported no evidence of unauthorized access to department systems or compromised police data. The department emphasized that all crime tips undergo human review before investigators act on them. Even when a tip appears credible, detectives must assess the information and look for supporting evidence. That process provides another layer of protection against fabricated submissions.

While that is reassuring, the timeline raises additional concerns. The submission occurred on July 18, 2026, at 11:27 p.m. According to Philadelphia police, Anthropic discovered the incident on September 28 and notified the department on October 7. Police met with company representatives the following day. That means more than two months passed before Anthropic discovered the false submission. The department called the two-month delay in detecting and reporting the incident to the city “unacceptable” and urged technology companies to strengthen their safeguards.

AI AGENT HACKS GYM SYSTEM TO MOVE UP WAITLIST

Think about what could have happened if the fabricated tip had reached detectives. Investigators might have spent time chasing information that had no legitimate source. An innocent person could potentially have faced unnecessary scrutiny. Neither outcome occurred here. However, the incident raises serious concerns for law enforcement agencies that depend on public tips. Police departments regularly receive information from witnesses, neighbors and people who believe they may know something about a crime. Those submissions can help investigators uncover new evidence, especially in cases that have remained unsolved for years.

Now consider how easily an AI system can generate convincing text and submit it through a public website. Without adequate safeguards, automated submissions could overwhelm investigators or make legitimate leads harder to identify. There’s also a legal question. Pennsylvania law generally prohibits knowingly providing false information to law enforcement. However, the law’s application to AI-generated submissions and the people or companies responsible for them would require separate legal analysis. The available evidence does not establish that Anthropic or its employees committed a crime.

Meanwhile, Philadelphia officials are also considering a broader response. The department said Mayor Cherelle L. Parker’s administration will explore regulatory protections with state and federal partners to address incidents involving AI systems. Police are coordinating with the city’s Law Department and technology officials as they continue reviewing what happened.

The Philadelphia incident was one of several cases described in Anthropic’s October 9 report, titled “Investigating unintended model actions in our evaluations and internal use.” The company identified four categories of unexpected behavior involving Claude models interacting with outside websites and systems.

In one case, Claude exploited a software flaw on a university server to run commands after a scientific analysis tool stopped working. The model examined the website, found a vulnerable script and used it to complete the calculation. Another model found ways to access publicly available information that normally required a fee or an access token. Anthropic also observed models using URL-shortening services to work around limits designed to restrict certain web requests.

And the Philadelphia case was not the only example involving an online form. Anthropic reported that some models submitted real forms when they were supposed to use practice versions or stop before final submission. These incidents occurred during evaluations and internal use. Anthropic said the incidents had minimal impact and, to its knowledge, did not involve customer data or its own internal systems.

Following its investigation, Anthropic announced additional safeguards designed to prevent AI models from interacting with outside systems in unintended ways. The company said it has stopped running certain evaluations, moved others into offline environments and rebuilt some tests to avoid contacting live websites. It also expanded restrictions on live internet access to all internal evaluations until it can confirm that its security and monitoring systems reliably detect this behavior.

Additionally, Anthropic strengthened restrictions on tools that allow Claude to retrieve information from websites. The company developed automated systems to identify and block unexpected actions. According to Anthropic, those systems blocked every incident described in its report when the company tested them against the previously identified cases. However, that result does not guarantee the safeguards will catch every future problem. Anthropic acknowledged that further work is needed to improve how its models handle ambiguous instructions and unexpected obstacles.

GRANDMOTHER SUES AFTER ALLEGED AI FACIAL RECOGNITION ERROR LED TO MONTHS IN JAIL, EXPERTS SOUND ALARM

You might be wondering what an incident involving a police website has to do with your own use of artificial intelligence. The connection is that AI agents are increasingly capable of performing actions instead of simply providing answers. Depending on the tools and permissions available, they can browse websites, complete forms and interact with connected services.

That’s incredibly useful when everything works as intended. However, an agent can misunderstand instructions or continue pursuing a task when it should stop. For example, you might ask an AI assistant to research travel arrangements. If that assistant has permission to complete bookings, a misunderstanding could potentially result in an unwanted reservation. The Philadelphia case shows why AI agents need clear instructions and firm limits, especially when they can submit information to police departments, government agencies or other organizations. We reached out to Anthropic for additional comment, but the company did not respond before our deadline.

You don’t need to abandon AI agents because of this incident. However, I recommend keeping control over actions that could affect your accounts or other people.

These precautions cannot eliminate every risk. However, they can help reduce the consequences of an unexpected action.

What concerns me most about this incident is where the AI decided to act. We’re talking about an unsolved murder involving real victims and families still waiting for answers. A model generated a fabricated eyewitness account and submitted it through a police website. Fortunately, the department’s safeguards prevented that information from reaching investigators. But I find it troubling that Anthropic didn’t discover the incident until more than two months later. I see tremendous potential in AI agents, and I’ve written about how they can save us time by taking over frustrating tasks. However, this incident shows why giving AI the ability to act independently requires careful oversight. Anthropic deserves credit for publishing details of what went wrong and explaining its response. At the same time, companies developing these systems need to demonstrate that their safeguards work before allowing their models to interact with sensitive services such as police departments and government agencies. We should expect better detection, faster disclosure and clear accountability when something goes wrong.

If an AI system submits false information to police or another government agency, who should be held responsible: the company that developed it, the people operating it or nobody if the action was unintended? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.

Your iPhone probably holds more personal information than your wallet. Think about the passwords you’ve saved, the photos you never intended to share and the private notes you keep handy. Now, security researchers have uncovered a more aggressive version of spyware designed to get its hands on that information.

The threat is called P7 DarkSword, and researchers at mobile security company iVerify discovered it while investigating an infected iPhone. According to their Oct. 8, 2026, report, the spyware can collect sensitive information and communicate with attackers who can issue additional commands remotely.

That sounds alarming, and it should get your attention. However, the research does not establish that every iPhone is vulnerable. Here’s what researchers discovered and how you can better protect your device.

YOUR PHONE SAYS IT’S UPDATED. CHECK OTHER SETTINGS, TOO

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

P7 DarkSword is a newly identified variant of DarkSword, an existing iPhone spyware family. Researchers at iVerify discovered it while investigating a suspicious infection in August 2026. Their security system had flagged unusual activity on a customer’s device. After examining the phone with the customer’s permission, the team discovered that the spyware behaved differently from versions they had previously encountered.

The researchers also searched for related malicious code using the Validin threat intelligence platform. Eventually, they identified another version of the spyware hosted on suspicious infrastructure. Their analysis revealed that the attackers had modified the code to make it more capable and harder to investigate. The name P7 comes from a prefix the attackers used in their programming code. While that detail won’t mean much to most iPhone owners, the changes behind it are concerning. The spyware now performs more data collection directly on the infected phone and gives attackers additional control over what happens next. Apple told CyberGuy that DarkSword originated from sophisticated mercenary spyware developed at considerable expense. After the spyware leaked, the technology became available to common criminals.

Once attackers successfully compromise a vulnerable device, P7 DarkSword can reach information that most people would consider deeply private. Researchers identified several capabilities in the spyware’s code.

For someone who keeps sensitive documents or financial information on an iPhone, the potential exposure is serious. However, these findings describe the spyware’s capabilities. They do not establish that attackers successfully stole every type of information from the device involved in the investigation.

One particularly troubling feature is how frequently the spyware can contact its operators. According to iVerify, P7 DarkSword uses a command-and-control system that can check for instructions every 15 seconds. Attackers can change that interval remotely. This allows the spyware to receive new instructions after the initial infection. For example, an attacker could direct it to collect additional files or examine information stored on the device. The malware also supports commands that scan the phone’s file system and execute JavaScript inside its running environment.

Researchers found that the spyware injects its communication component into SpringBoard, a core iPhone system process responsible for the Home Screen and other interface functions. The attackers also removed some diagnostic logging and reduced certain activities that could reveal the infection during an investigation. These changes make the spyware harder for security researchers to examine. However, iVerify did not establish that the malware is completely undetectable.

APPLE AIRDROP, ANDROID QUICK SHARE FLAWS PUT PHONES AT RISK

DarkSword is associated with an iOS exploit chain that attackers can use to compromise vulnerable devices through malicious web content. Security researchers have linked the P7 variant to distribution through malicious advertisements and compromised websites, sometimes called watering-hole attacks.

That means someone using an outdated, vulnerable iPhone could encounter malicious content while browsing the web, potentially without realizing anything unusual happened. However, these attacks depend on exploitable security weaknesses. Installing Apple’s security updates protects against the known vulnerabilities used by earlier DarkSword attacks. The original iVerify investigation focuses primarily on how P7 operates after infection. It does not fully reconstruct how the customer encountered the malicious content. That’s why the exact circumstances of that particular infection remain unclear.

Earlier DarkSword attacks targeted iPhones running iOS 18.4 through iOS 18.7. Apple told CyberGuy that it patched the underlying vulnerabilities in 2025, before DarkSword first leaked. The company also released a security update in March 2026 for older devices that could not install newer versions of iOS. According to Apple, iPhones running the latest available updates for iOS 15 through iOS 27 remain protected against the known DarkSword exploits.

Researchers also identified exploit components associated with iOS 18.7 in the newer P7 investigation. However, they have not confirmed that the spyware can compromise fully updated iPhones. As of October 2026, iOS 27 is Apple’s current major iPhone software generation. However, the latest available update depends on your iPhone model. Devices that have not received available security updates may remain exposed to known vulnerabilities.

The research is a reminder that even sophisticated phone security can face serious threats. Fortunately, there are steps you can take to reduce your exposure. Start with these protections, especially if you’ve been putting off a software update.

Apple regularly releases updates that fix vulnerabilities attackers can exploit. Checking for updates is especially important if you haven’t updated your iPhone recently.

To check your current version and install updates:

Next, go to Settings > General > Software Update > Automatic Updates and enable Automatically Install. This helps your phone receive future security fixes without relying on you to remember.

On iOS 27, Apple also offers Background Security Improvements. These provide additional protections between major software updates.

This setting adds another layer of protection against newly discovered security problems.

Avoid opening unexpected links in text messages or emails, especially when they pressure you to act quickly. Malicious web content has played a role in previously documented iPhone attacks, so this is a sensible precaution. Consider using strong antivirus software that offers malicious website blocking, phishing protection and scam-link warnings. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com. These features can help you avoid dangerous content before you open it. However, iPhone security apps cannot perform the same deep malware scans available on computers. They also cannot guarantee detection or removal of sophisticated spyware like P7 DarkSword. That’s why keeping iOS updated remains essential.

HOW TO FIND COMPROMISED PASSWORDS ON IPHONE AND ANDROID

If you believe someone may specifically target you with sophisticated spyware, Apple’s Lockdown Mode offers stronger security protections. It restricts certain website technologies, messaging features and device connections to reduce opportunities for attackers. Apple designed this feature for people facing unusually advanced threats. Most iPhone owners won’t need it because some everyday features become limited. According to Apple, security researchers confirmed that the known DarkSword exploits do not work on devices with Lockdown Mode enabled.

To turn it on:

For more on targeted attacks, read our article about Apple’s spyware warnings reaching iPhone users in 110 countries.

Because P7 DarkSword can target keychain and cryptocurrency wallet information, pay attention to unusual activity in your sensitive accounts. Apple recommends protecting your iPhone with a passcode, using a strong password and two-factor authentication (2FA) for your Apple Account and installing apps from the App Store. Use a reputable password manager to generate and securely store strong, unique passwords for every account. Review alerts from financial services. Keep in mind that a password manager cannot protect credentials if sophisticated spyware has already compromised your device. If you have credible evidence that your iPhone was compromised, change important passwords using another trusted device. Also, contact your financial institutions if you notice unauthorized transactions. Cryptocurrency users should seek trusted wallet-security assistance before moving funds. These steps can limit damage after an account compromise, although they cannot remove sophisticated spyware from an infected phone.

Advanced spyware may operate without obvious symptoms. Your iPhone could appear to work normally, so a healthy battery or the absence of strange pop-ups cannot prove that your device is clean. If you receive what appears to be an Apple threat notification, verify it by signing in directly at account.apple.com, rather than clicking links in the message. Apple provides additional information about recognizing and responding to these alerts on its threat notification support page. Then seek assistance from a qualified mobile security specialist. A routine security app scan may not detect an advanced infection.

If you have strong reason to suspect spyware, avoid using that phone for sensitive activities until you’ve received guidance. From a separate trusted device, secure important accounts and review recent sign-ins. You should also preserve any genuine Apple threat notifications or suspicious messages. For a potentially targeted attack, contact a specialist before erasing your iPhone. Resetting the device can destroy evidence investigators may need, and it may complicate efforts to determine what happened.

What concerns me most about this discovery is how much information attackers could potentially collect from a single phone. We trust our iPhones with some of our most private information, often without thinking twice about where we store it. P7 DarkSword shows how dangerous that access could become if attackers successfully exploit a security weakness. It’s also troubling to see expensive mercenary spyware leak into the hands of common criminals. Apple says the vulnerabilities behind these known attacks were patched before the spyware leaked, which is reassuring for people who keep their devices updated. I would check your iPhone’s software version today, especially if you haven’t updated it recently. And if you use your phone for financial transactions or store sensitive personal information, take a few minutes to review your account security.

Do you trust your iPhone to keep your personal information safe, or does discovering spyware like DarkSword make you question how secure your phone really is? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.

The cyberattack targeting French supermarket freezers and causing millions of dollars in losses last week should be an ominous warning to American businesses, cybersecurity experts told Fox News Digital.

Unknown hackers took over the refrigeration in hundreds of supermarkets across France, raising temperatures above 100 degrees Fahrenheit overnight, causing massive spoilage. It could happen here, and it isn’t just grocery stores that need to be on guard, John Walsh, senior vice president at the Germany-based software company IGEL, told Fox News Digital.

“Think about if we don’t have water for seven days, or if they attack freezers and we don’t have food,” Walsh said. “That’s a tough situation for people to live through, and it could create a lot of economic and social unrest. We’re seeing that we’re vulnerable and that attacks are taking systems down.”

At IGEL, Walsh works with governments and companies who build and deploy critical infrastructure — such as Siemens and Rockwell — to bolster their operational security.

FRENCH SUPERMARKETS FACE MILLIONS IN LOSSES AFTER CYBERATTACK HITS REFRIGERATORS NATIONWIDE

As was the case in France, where Danish commercial refrigeration system manufacturer Danfoss highlighted that many of its affected fridges were legacy systems that no longer receive updates, much of the U.S.’s critical infrastructure is also in need of retooling, Walsh said.

“A primary obstacle in [operational technology] environments — whether in food manufacturing, pharmaceuticals, oil, or utilities — is that facilities operate assets that are 15 to 20 years old,” Walsh said. “These systems are expensive, fragile, and essential to ongoing operations.”

FBI OVERHAULS TECH BACKBONE TO COUNTER AI THREATS FROM FOREIGN ADVERSARIES, REDUCE RESPONSE TIMES, PATEL SAYS

Decision makers at the companies Walsh works with don’t want to go through the hassle of taking key systems offline in order to upgrade and secure them further, operating under a “if it’s not broken, don’t fix it” mindset,” he said.

But critical infrastructure, like almost every aspect of American society, is becoming increasingly integrated with technology and embedded into digital infrastructure, forcing cybersecurity firms to fundamentally shift strategies.

BILL GATES SOUNDS ALARM ON AI-POWERED CYBERATTACKS, WARNS OF ‘NEGATIVE SURPRISES’ WITHIN A YEAR

“One of the big things we have to consider is that we’re moving from a thought process of security to resilience,” Walsh said.

As AI helps hackers become more sophisticated, it’s no longer wise to attempt to completely shut them out of key systems, Walsh said. System operators are better off assuming the hackers are already there.

AN AI CYBERATTACK COULD TURN OFF AMERICA’S LIGHTS BEFORE WASHINGTON EVEN UNDERSTANDS WHY

“Security is kind of like, ‘I feel I can trust that things are okay.’ Resilience is where you make the assumption the attacker is present—where, when the attacker is present, you control the blast radius,” Walsh said.

A so-called Trojan horse could already be inside America’s electrical grid and other critical infrastructure, just waiting for the adversary to activate it, he said.

“They’ve demonstrated taking it down, which to some degree is them practicing, honing their skills, and honing their methodologies against real targets while sending a message,” Walsh said.

IRANIAN HACKERS ATTACKED OUR WATER SYSTEMS. HERE ARE 5 THINGS OUR LEADERS NEED TO DO NOW

Policy experts are grappling with how to make recommendations to lawmakers, given that so many things we depend on in our everyday lives are connected to the internet.

“I am shocked that appliances have access to the internet,” Amy Kremer, the chair of Humans First, told Fox News Digital.

MAJOR US GROCERY CHAINS HIT BY CYBERSECURITY INCIDENT

“I understand the convenience, but at the same time, you are going to have potential problems with it. That should be a concern to all Americans — not just appliances, but things like your Nest thermostat and other devices in your house that could be hacked into,” she continued.

“As we learn every single day, it’s capable of more and more. It’s great that we have technology — it’s changed the world and made it a much smaller place where we interact and communicate with each other all the time. But with that also comes vulnerabilities,” Kremer added.

WATER CYBERATTACK HITS AT LEAST 7 STATES

America’s critical infrastructure is indeed vulnerable to these types of threats, Walsh said, citing previous examples, including a 2026 coordinated cyberattack on Minnesota’s water systems.

“Think about if you were to try to disrupt the U.S. economy or begin to do terrorism-type activities. What would you do? You’d go after water and wastewater. You’d go after the food supply. Exactly what occurred here, but at a larger scale,” Walsh said.

FIRST ON FOX: TEXAS BECOMES TESTING GROUND FOR NEW DEFENSE AGAINST ATTACKS ON AMERICA’S WATER SYSTEMS

“We’re definitely more vulnerable, they’re definitely targeting us, and citizens, government, and the international community need to get governance in place to push industries to implement these protections,” he said.

Walsh also warned that this could be just the beginning, claiming a recent string of hacks could be indicative of hackers honing their skill sets as they prepare for bolder attacks.

“I do think that what we’re beginning to see is a pattern across the U.S., France, and the UK. We see the adversary—potentially a geopolitical adversary—basically practicing their art and demonstrating their art in different locations,” he warned.

Fox News Digital contacted Danfoss for further comment.

When you visit a doctor or hospital, you expect your medical information to stay private. After all, your health records can reveal some of the most personal details about your life. Now, a massive cyberattack involving Oracle Health is raising serious questions about how well that information is protected.

Nearly 20 million people reportedly had their personal and medical information compromised in a cyberattack involving older Cerner systems. The attack dates back to early 2025, but new details about its reach are still emerging. For patients, the concern goes well beyond stolen passwords. Hackers may have obtained Social Security numbers, diagnoses and even medical images.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

MEDICAL IDENTITY THEFT FOLLOWS YOU INTO THE DOCTOR’S OFFICE

The Oracle Health data breach appears to be much larger than earlier patient notifications suggested. According to figures reported in filings with the Texas Attorney General, the personal and medical information of approximately 19.9 million people was compromised in a cyberattack involving legacy Cerner systems. The Texas Attorney General’s official data breach portal published Cerner’s entry on October 2, 2026. It lists 2,992,244 affected Texas residents. The nationwide figure reported in connection with the filing is 19,929,149 people.

Oracle has not separately confirmed the nationwide total in a public statement. Still, the reported scale would place this incident among the largest healthcare data breaches in U.S. history. The attack involved older systems belonging to Cerner, an electronic health records company Oracle acquired in June 2022 for approximately $28.3 billion. The business now operates as Oracle Health. Cerner’s technology helps hospitals and healthcare providers manage patient information. As a result, unauthorized access to those systems can expose records belonging to patients across multiple healthcare organizations.

The trouble began in early 2025. Oracle started notifying affected healthcare customers in March after discovering unauthorized access involving older Cerner systems. According to Oracle’s customer communications, the company became aware of the incident around February 20, 2025. Investigators found evidence suggesting that an attacker used stolen customer credentials to access a legacy server sometime after January 22. The attacker then copied information to a remote server.

The server had not yet been migrated to Oracle Cloud. However, investigators have not publicly established that the server’s age caused the breach. The precise way the attacker obtained the stolen credentials also remains unclear. This raises an uncomfortable question. How much sensitive patient information remains on older healthcare systems, even after a major technology company takes ownership?

The attacker allegedly tried to turn the stolen information into a multimillion-dollar payday. According to earlier BleepingComputer reporting, an individual using the name “Andrew” contacted affected hospitals and demanded cryptocurrency payments. The attacker reportedly threatened to leak or sell stolen patient information unless the victims paid.

The individual also allegedly created public websites about the breach to increase pressure on healthcare organizations. At the time, researchers had not established a connection between the attacker and a known ransomware or extortion group. For hospitals, that creates a difficult situation. Even if an organization pays, there is no guarantee the criminal will delete the stolen records or refrain from selling copies. Meanwhile, patients may have no idea their information is being used as leverage.

What personal and medical information was stolen?

A sample breach notification filed with California regulators provides a closer look at the information potentially exposed.

Depending on the patient, the compromised records may have included:

The exact information exposed can vary from person to person. However, the combination of personal identifiers and medical details makes this incident particularly troubling. Unlike a stolen credit card, you cannot simply cancel your medical history and request a replacement. Your diagnoses, treatment records and past prescriptions can remain sensitive for years.

Criminals could potentially use that information to create convincing medical scams, impersonate patients or commit identity theft. They may also combine medical details with other stolen information to make fraudulent calls and emails appear more credible.

FAKE PATIENT PORTAL SCAM CAN STEAL YOUR LOGIN AND INFECT YOUR PC

State breach filings offer a clearer view of the attack’s scale. The Texas attorney general’s October 2, 2026, filing lists 2,992,244 affected residents in Texas alone. Other state notifications show how widely the incident spread. Oregon reported 1,978,661 affected residents, while South Carolina identified 283,903. Washington also reported 69,238 people whose information was compromised.

These figures represent portions of the overall incident and should not be added to the nationwide total of nearly 20 million. Meanwhile, filings with Oregon regulators identify January 22 through April 1, 2025, as the reported breach period, with February 20 listed as the discovery date. These disclosures show how complicated healthcare breach reporting can become. Patients in different states may receive notifications at different times, while the full impact can take months or longer to emerge.

Unfortunately, healthcare organizations have become attractive targets for cybercriminals. Medical records contain information that can support identity theft and fraud long after an initial attack. One of the biggest examples came in 2024, when attackers targeted Change Healthcare, a subsidiary of UnitedHealth Group. That breach ultimately affected approximately 192.7 million people.

The Oracle Health incident appears smaller by comparison. Still, a reported 20 million affected individuals represents an enormous amount of sensitive information. The incident also raises questions about how healthcare organizations protect records stored on older systems. Those systems can remain essential to daily operations, even as companies upgrade their technology. In this case, investigators identified stolen credentials as the reported access method, rather than a publicly confirmed vulnerability in the legacy server. We reached out to Oracle Health for comment, but did not hear back before our deadline.

You may have never heard of Cerner, even if your hospital uses its technology. That makes it harder to know whether your records were involved. However, there are practical steps you can take now to reduce the risk of identity theft and medical fraud.

Check your mail for notices from Cerner, Oracle Health or a healthcare provider you have visited. The notification should explain what information may have been exposed and whether any protective services are available. You can also contact your hospital’s privacy office directly. Avoid clicking links in unexpected messages claiming you need to verify your medical records.

A credit freeze can help prevent criminals from opening new credit accounts using your identity. You can request one for free through Equifax, Experian and TransUnion. You’ll need to contact all three bureaus separately. A freeze will not prevent every form of identity theft, but it can block an important route criminals use.

Review your health insurance explanation of benefits statements for appointments, treatments or prescriptions you do not recognize. Also, look for unfamiliar providers or incorrect information in your medical records. Contact your insurer and healthcare provider if something looks suspicious. Medical identity theft can lead to fraudulent bills and inaccurate patient records, so catching problems early is important.

A healthcare breach can create opportunities for phishing emails and malicious attachments. Strong antivirus software can help detect malware, suspicious downloads and some dangerous links before they cause harm. Keep your devices updated and avoid downloading files from unexpected healthcare messages. Antivirus protection cannot undo the Oracle Health breach, but it can help defend against attacks that follow it. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

THE SCAMMER AT YOUR DOCTOR’S OFFICE MAY ALREADY KNOW WHO YOU ARE

Someone who knows your doctor’s name or recent treatment details may sound legitimate over the phone. Criminals could use stolen information to impersonate healthcare workers, demand payments or ask you to confirm your Social Security number. Hang up and call the provider using a number from its official website or your insurance card. Never assume a caller is legitimate simply because they know something about your medical history.

Use unique passwords for healthcare portals and enable two-factor authentication (2FA) wherever available. A password manager can help you create and store strong passwords without reusing them. If you suspect your account credentials were compromised, change the affected password immediately. Remember, changing a password will not retrieve stolen medical records, but it can help protect your accounts from additional unauthorized access.

If your Social Security number was exposed, an identity theft protection service may help you monitor for suspicious activity involving your personal information. Some services also offer alerts and assistance with recovery. Review any free monitoring offered through your breach notification before purchasing a separate plan. Keep in mind that monitoring services cannot guarantee prevention of identity theft or detect every form of medical fraud. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com

What concerns me most about the Oracle Health breach is how little control patients have over where their medical information ends up. You can be extremely careful with your passwords and avoid suspicious links, yet your most sensitive records may still sit on a server you never knew existed. The fact that this attack involved a legacy server makes the situation even more frustrating. Investigators have identified stolen credentials as the reported access method, but we still don’t know exactly how those credentials were compromised. When a company acquires a healthcare technology provider, protecting the information already stored in those systems should be a priority. Patients deserve to know that their records remain secure throughout technology upgrades. And consider the timing. The attack dates back to early 2025, yet its potential scale is becoming clearer in October 2026. That’s a long time for people to remain uncertain about what happened to their information. Healthcare organizations need to do a better job protecting patient records and communicating clearly when something goes wrong.

Would you trust a hospital with your most personal medical information if you knew it was stored on older technology, and should healthcare companies face tougher consequences when millions of patient records are exposed? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy Newsletter

Copyright 2026 CyberGuy.com. All rights reserved.