Normal view

There are new articles available, click to refresh the page.
Before yesterdayMain stream

You Can't Trust Hackers, and Other Data Breach Verification Tales

By: Troy Hunt
22 January 2025 at 22:14
You Can't Trust Hackers, and Other Data Breach Verification Tales

It's hard to find a good criminal these days. I mean a really trustworthy one you can be confident won't lead you up the garden path with false promises of data breaches. Like this guy yesterday:

You Can't Trust Hackers, and Other Data Breach Verification Tales

For my international friends, JB Hi-Fi is a massive electronics retailer down under and they have my data! I mean by design because I've bought a bunch of stuff from them, so I was curious not just about my own data but because a breach of 12 million plus people would be massive in a country of not much more than double that. So, I dropped the guy a message and asked if he'd be willing to help me verify the incident by sharing my own record. I didn't want to post any public commentary about this incident until I had a reasonable degree of confidence it was legit, not given how much impact it could have in my very own backyard.

Now, I wouldn't normally share a private conversation with another party, but when someone sets out to scam people, that rule goes out the window as far as I'm concerned. So here's where the conversation got interesting:

You Can't Trust Hackers, and Other Data Breach Verification Tales

He guaranteed it for me! Sounds legit. But hey, everyone gets the benefit of the doubt until proven otherwise, so I started looking at the data. It turns out my own info wasn't in the full set, but he was happy to provide a few thousand sample records with 14 columns:

  1. customer_id_
  2. first_name
  3. last_name
  4. FullName
  5. gender
  6. email_address_
  7. mobile_country_
  8. mobile_number_
  9. dob
  10. postal_street_1_
  11. state_
  12. postal_code_
  13. city_
  14. account_status

Pretty standard stuff, could be legit, let's check. I have a little Powershell script I run against the HIBP API when a new alleged breach comes in and I want to get a really good sense of how unique it is. It simply loops through all the email addresses in a file, checks which breaches they've been in and keeps track of the percentage that have been seen before. A unique breach will have anywhere from about 40% to 80% previously seen addresses, but this one had, well, more:

You Can't Trust Hackers, and Other Data Breach Verification Tales

Spot the trend? Every single address has one breach in common. Hmmm... wonder what the guy has to say about that?

You Can't Trust Hackers, and Other Data Breach Verification Tales

But he was in the server! And he grabbed it from the dashboard of Shopify! Must be legit, unless... what if I compared it to the actual full breach of Dymocks? That's a local Aussie bookseller (so it would have a lot of Aussie-looking email addresses in it, just like JB Hi-Fi would), and their breach dated back to mid-2023. I keep breaches like that on hand for just such occasions, let's compare the two:

You Can't Trust Hackers, and Other Data Breach Verification Tales

Wow! What are the chances?! He's going to be so interested when he hears about this!

You Can't Trust Hackers, and Other Data Breach Verification Tales

And that was it. The chat went silent and very shortly after, the listing was gone:

You Can't Trust Hackers, and Other Data Breach Verification Tales

It looks like the bloke has also since been booted off the forum where he tried to run the scam so yeah, this one didn't work out great for him. That $16k would have been so tasty too!

I wrote this short post to highlight how important verification of data breach claims is. Obviously, I've seen loads of legitimate ones but I've also seen a lot of rubbish. Not usually this blatant where the party contacting me is making such demonstrably false claims about their own exploits, but very regularly from people who obtain something from another party and repeat the lie they've been told. This example also highlights how useful data from previous breaches is, even after the email addresses have been extracted and loaded into HIBP. Data is so often recycled and shipped around as something new, this was just a textbook perfect case of making use of a previous incident to disprove a new claim. Plus, it's kinda fun poking holes in a scamming criminal's claims 😊

MasterCard DNS Error Went Unnoticed for Years

22 January 2025 at 10:24

The payment card giant MasterCard just fixed a glaring error in its domain name server settings that could have allowed anyone to intercept or divert Internet traffic for the company by registering an unused domain name. The misconfiguration persisted for nearly five years until a security researcher spent $300 to register the domain and prevent it from being grabbed by cybercriminals.

A DNS lookup on the domain az.mastercard.com on Jan. 14, 2025 shows the mistyped domain name a22-65.akam.ne.

From June 30, 2020 until January 14, 2025, one of the core Internet servers that MasterCard uses to direct traffic for portions of the mastercard.com network was misnamed. MasterCard.com relies on five shared Domain Name System (DNS) servers at the Internet infrastructure provider Akamai [DNS acts as a kind of Internet phone book, by translating website names to numeric Internet addresses that are easier for computers to manage].

All of the Akamai DNS server names that MasterCard uses are supposed to end in “akam.net” but one of them was misconfigured to rely on the domain “akam.ne.”

This tiny but potentially critical typo was discovered recently by Philippe Caturegli, founder of the security consultancy Seralys. Caturegli said he guessed that nobody had yet registered the domain akam.ne, which is under the purview of the top-level domain authority for the West Africa nation of Niger.

Caturegli said it took $300 and nearly three months of waiting to secure the domain with the registry in Niger. After enabling a DNS server on akam.ne, he noticed hundreds of thousands of DNS requests hitting his server each day from locations around the globe. Apparently, MasterCard wasn’t the only organization that had fat-fingered a DNS entry to include “akam.ne,” but they were by far the largest.

Had he enabled an email server on his new domain akam.ne, Caturegli likely would have received wayward emails directed toward mastercard.com or other affected domains. If he’d abused his access, he probably could have obtained website encryption certificates (SSL/TLS certs) that were authorized to accept and relay web traffic for affected websites. He may even have been able to passively receive Microsoft Windows authentication credentials from employee computers at affected companies.

But the researcher said he didn’t attempt to do any of that. Instead, he alerted MasterCard that the domain was theirs if they wanted it, copying this author on his notifications. A few hours later, MasterCard acknowledged the mistake, but said there was never any real threat to the security of its operations.

“We have looked into the matter and there was not a risk to our systems,” a MasterCard spokesperson wrote. “This typo has now been corrected.”

Meanwhile, Caturegli received a request submitted through Bugcrowd, a program that offers financial rewards and recognition to security researchers who find flaws and work privately with the affected vendor to fix them. The message suggested his public disclosure of the MasterCard DNS error via a post on LinkedIn (after he’d secured the akam.ne domain) was not aligned with ethical security practices, and passed on a request from MasterCard to have the post removed.

MasterCard’s request to Caturegli, a.k.a. “Titon” on infosec.exchange.

Caturegli said while he does have an account on Bugcrowd, he has never submitted anything through the Bugcrowd program, and that he reported this issue directly to MasterCard.

“I did not disclose this issue through Bugcrowd,” Caturegli wrote in reply. “Before making any public disclosure, I ensured that the affected domain was registered to prevent exploitation, mitigating any risk to MasterCard or its customers. This action, which we took at our own expense, demonstrates our commitment to ethical security practices and responsible disclosure.”

Most organizations have at least two authoritative domain name servers, but some handle so many DNS requests that they need to spread the load over additional DNS server domains. In MasterCard’s case, that number is five, so it stands to reason that if an attacker managed to seize control over just one of those domains they would only be able to see about one-fifth of the overall DNS requests coming in.

But Caturegli said the reality is that many Internet users are relying at least to some degree on public traffic forwarders or DNS resolvers like Cloudflare and Google.

“So all we need is for one of these resolvers to query our name server and cache the result,” Caturegli said. By setting their DNS server records with a long TTL or “Time To Live” — a setting that can adjust the lifespan of data packets on a network — an attacker’s poisoned instructions for the target domain can be propagated by large cloud providers.

“With a long TTL, we may reroute a LOT more than just 1/5 of the traffic,” he said.

The researcher said he’d hoped that the credit card giant might thank him, or at least offer to cover the cost of buying the domain.

“We obviously disagree with this assessment,” Caturegli wrote in a follow-up post on LinkedIn regarding MasterCard’s public statement. “But we’ll let you judge— here are some of the DNS lookups we recorded before reporting the issue.”

Caturegli posted this screenshot of MasterCard domains that were potentially at risk from the misconfigured domain.

As the screenshot above shows, the misconfigured DNS server Caturegli found involved the MasterCard subdomain az.mastercard.com. It is not clear exactly how this subdomain is used by MasterCard, however their naming conventions suggest the domains correspond to production servers at Microsoft’s Azure cloud service. Caturegli said the domains all resolve to Internet addresses at Microsoft.

“Don’t be like Mastercard,” Caturegli concluded in his LinkedIn post. “Don’t dismiss risk, and don’t let your marketing team handle security disclosures.”

One final note: The domain akam.ne has been registered previously — in December 2016 by someone using the email address um-i-delo@yandex.ru. The Russian search giant Yandex reports this user account belongs to an “Ivan I.” from Moscow. Passive DNS records from DomainTools.com show that between 2016 and 2018 the domain was connected to an Internet server in Germany, and that the domain was left to expire in 2018.

This is interesting given a comment on Caturegli’s LinkedIn post from an ex-Cloudflare employee who linked to a report he co-authored on a similar typo domain apparently registered in 2017 for organizations that may have mistyped their AWS DNS server as “awsdns-06.ne” instead of “awsdns-06.net.” DomainTools reports that this typo domain also was registered to a Yandex user (playlotto@yandex.ru), and was hosted at the same German ISP — Team Internet (AS61969).

Texas National Guard deputized to make immigration arrests

3 February 2025 at 06:39

President Donald Trump's administration has reached a deal to grant the Texas National Guard new authority to make immigration arrests this weekend.

Texas Gov. Greg Abbott referenced the deal on social media, saying it would "boost manpower for border security." Under the agreement, Texas National Guard troops would be able to arrest illegal immigrants so long as there is a U.S. immigration officer or Border Patrol agent present. U.S. Customs and Border Protection did not immediately respond to a request for comment from Fox News Digital.

Abbott said the deal was "effective immediately" as of Sunday night.

The deal is only the latest front in Trump's nationwide blitz against illegal immigration. Immigration and Customs Enforcement (ICE) and other border security groups have leaned into their deportation efforts since Trump gained office.

TRUMP FOE LETITIA JAMES SLAMMED FOR POST-NYC ICE RAID COMMENTS: ‘GET ON THE SAME PAGE’

Trump's 2024 campaign promised to curb illegal immigration that flourished under the Biden administration. The 47th President promised to deport migrants, including those who had long rap sheets or ties to gangs or terrorist organizations.

On the first day of his second term, Trump issued ten executive orders aimed at overhauling U.S. immigration law and policy. Less than a week back in the Oval Office, Trump touted that he is keeping his promises.

"Within hours of taking the oath of office, I declared a national emergency at our southern border. I sent active duty troops on the border to help repel the invasion. Tom Homan is leading the charge. You know that. We like Tom Homan. Doing a great job," Trump said at a recent rally.

CLICK HERE FOR MORE IMMIGRATION COVERAGE

"We immediately halted all illegal entry and began sending every border trespasser and violator back to the places from which they came. I signed an order that will designate the cartels as foreign terrorist organizations. It's a big deal, it's a big deal. Biden didn't want to do that," he added. "Biden didn't know he was alive. He didn't want to do it."

Federal officials deported some 7,300 illegal immigrants in the opening week of Trump's administration alone.

Fox News' Sarah Rumpf-Whitten contributed to this report

Wisconsin man accused of impersonating US Border Patrol agent twice in one week

2 February 2025 at 18:29

A Wisconsin man has been charged with identity theft and impersonating a peace officer after prosecutors say he was caught posing as a U.S. Border Patrol agent twice in one week.

According to the Waukesha County District Attorney's Office, prosecutors charged 34-year-old Hank Glembin of New Berlin with two counts of identity theft and two counts of impersonating a peace officer after he claimed to be a U.S. Border Patrol agent on two occasions in January.

In the complaint, obtained by FOX 6 Milwaukee, on Jan. 25, a Muskego police officer was responding to a deer that had been struck by a truck when Glembin pulled up and asked the officer if she needed assistance.

The officer then asked Glembin if he was with the Muskego Department of Public Works and declined Glembin's offer of help, according to the complaint. Glembin then told the officer, "I'm off duty right now. I'm with Border Patrol."

COUPLE WITH FAKE FIRE TRUCK BUSTED FOR IMPERSONATING FIREFIGHTERS NEAR PALISADES FIRE IN LOS ANGELES: SHERIFF

Glembin was reportedly wearing a black hat with "CBP" stitched in yellow, a green duty vest over a black jacket, and khaki pants, according to the officers' notes in the complaint. 

Prosecutors said the officer also noted that Glembin had "DHS, CBP-BPA, and Agent H.D. Glembin" visible on his clothing. In addition to the fake logos on his clothes, the officer noted that Glembin had a handcuff case and a gun, which "appeared legitimate," attached to his belt. Glembin also had a white light mounted on one shoulder and a red light mounted on his other shoulder, the complaint read. 

VIRGINIA WOMAN ARRESTED AFTER IMPERSONATING A NURSE AND WORKING AT MULTIPLE CALIFORNIA HOSPITALS: POLICE

According to the complaint, the officer said Glembin then pulled out an ID card that read "Department of Homeland Security" along with his image. Despite the officer telling Glembin that public works would take care of the dead deer, he dragged it into the ditch "unprompted."

Through further investigation, prosecutors said police confirmed Glembin's uniform was "not consistent" with those worn by U.S. Border Patrol agents.

It was also uncovered that Glembin approached a New Berlin police officer during a traffic stop days later on Jan. 29. 

HOUSTON MAN ARRESTED FOR IMPERSONATING POLICE OFFICER AFTER ATTEMPTING TO PULL OVER REAL DEPUTIES

The complaint detailed that Glembin approached the officer, wearing the same uniform as reported by the other officer during the first encounter on Jan. 25, and told the officer he had just "gotten off duty" and offered help.

The officer noted that he noticed "Border Patrol Unit" on the back of Glembin's vest when he walked away.

New Berlin police then spoke to a U.S. Customs and Border Protection special agent who confirmed that Glembin was not a federal agent and that the agency was aware of his impersonation, according to the complaint. 

Glembin was taken into custody later that evening and investigators determined Glembin was not who he claimed to be and that all his gear was fraudulent, FOX 6 reported.

Prosecutors said Glembin admitted while in custody that he was not a Border Patrol agent but said he wanted to pursue becoming one.

Glembin also allegedly admitted to approaching both officers in Muskego and New Berlin while wearing fake uniforms and gear and showing off his fake credentials. 

Glembin is due for a hearing on Feb. 13 and was issued a $2,000 signature bond by the court, according to court records. 

Fox News Digital reached out to the Waukesha County District Attorney's Office but did not immediately receive a response.

White House, Karoline Leavitt call out actress Selena Gomez for clip of her crying over Trump deportations

1 February 2025 at 16:04

Multiple social media accounts attached to the Trump administration slammed actress Selena Gomez for posting a video of herself crying over deportations of illegal immigrants.

Both the official White House X account and press secretary Karoline Leavitt called out the "Only Murders in The Building" star after she wept on Instagram in response to the ICE raids that the Trump administration ordered

"Kayla Hamilton, Jocelyn Nungaray, and Rachel Morin were murdered by illegal aliens. Their courageous mothers had something to say to @SelenaGomez and those who oppose securing our borders," the White House account posted on Friday, along with a clip of the aggrieved mothers blasting the pop star.

MSNBC ANCHOR CORRECTS HER CORRESPONDENT ON-AIR: THEY'RE 'UNDOCUMENTED IMMIGRANTS'

Gomez uploaded a now-deleted video of her crying to her Instagram page on Monday, where she lamented the nationwide U.S. Immigration and Customs Enforcement (ICE) raids targeting illegal immigrants who have committed crimes in the United States. 

"All my people are getting attacked, the children. I don’t understand. I’m so sorry. I wish I could do something, but I can’t," she said to her 422 million Instagram followers

"I don’t know what to do. I’ll try everything, I promise."

Gomez’s video was slammed by conservatives on social media, as well as by prominent Trump administration officials like border czar Tom Homan, who responded to the celebrity from Fox News Channel’s "Hannity" on Monday.

"We got a half a million children who were sex trafficked into this country, separated from their families, put in the hands of criminal cartels to be smuggled into the country. This administration can't find over 300,000. Where's the tears for them?"

TRUMP’S ICE NABS CHILD SEX OFFENDERS AMONG 530+ ILLEGAL IMMIGRANTS CAUGHT IN SINGLE DAY

In the clip shared by the White House account, the mothers of the victims – Tammy Nobles, Alexis Nungarary, and Patty Morin – asked why Gomez wasn’t crying for the victims of illegal immigrants.

"What about our children who were brutally murdered and raped and beat to death and left on the floor by these illegal immigrants?" Nobles, the mother of Hamilton, asked Gomez. 

Nungaray was featured saying, "Seeing that video it’s hard to believe that it’s actually genuine and real because she’s an actress."

Later in the clip, she added, "My daughter was a child. There’s many other children whose lives were taken due to people who cross here illegally."

"I just feel like it’s a ruse to deceive people and garner sympathy for lawlessness," Morin said, later adding, "No one has stood up except for us mothers to cry out about our children."

As noted by Mediaite, Leavitt shared the clip to her official government account on Friday night, tagging Gomez’s account to make sure she saw it. 

Fox News Digital’s Alexander Hall contributed to this report.

ICE crackdown sees 7,400 illegal migrants arrested in 9 days

1 February 2025 at 11:18

Immigration and Customs Enforcement (ICE) has arrested more than 7,400 people in nine days across several states amid its aggressive crackdown on illegal immigration since the new Trump administration came into office. 

ICE officers have been seen carrying out raids of homes, work sites, and other establishments, while deportations have also ramped up, with the Trump administration also vowing to send the most violent migrants to Guantánamo Bay.

According to a compilation of daily totals of arrests, as of Jan. 31, ICE has so far arrested 7,412 people who the agency says are in the country illegally. The agency says that nearly 6,000 ICE detainers have been placed on individuals.

NYC RESIDENTS PRAISE ICE RAIDS AFTER VIOLENT GANG MEMBER CAPTURED

ICE has posted nine daily arrest totals to X and has also posted details from various raids across sanctuary cities like New York City, Chicago and Boston where they have scooped up illegals accused of sex crimes against minors, rapes, guns and drug offenses, while violent gang members belonging to Tren de Aragua and MS-13 have also been taken off the streets. 

Border czar Tom Homan has said the administration is currently only targeting violent illegal aliens while Homeland Security Secretary Kristi Noem, who oversees ICE, says federal immigration authorities are arresting the "worst of the worst" in raids. She says the streets are now safer as a result.

Many of the ICE raids have been carried out alongside other federal agencies such as the Drug Enforcement Agency (DEA) and the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) and the Federal Bureau of Investigation (FBI).

Noem joined an immigration enforcement raid in New York City Tuesday morning in which officers picked up Anderson Zambrano-Pacheco, 26, an alleged ringleader of the violent Tren de Aragua gang. Zambrano-Pacheco is the same man caught on camera in a viral video showing heavily armed men kicking down an apartment door at an apartment complex in Aurora, Colorado, last summer.

Luis Adolfo Guerra Perez, 19, a Guatemalan citizen and MS-13 gang member, was arrested by ICE in Massachusetts last week. He was facing state gun charges and had previously been ordered to be deported before he was released by a Boston court.

ICE has published details of more than 60 cases while the White House X account has posted details of at least 20 others.

NOEM SAYS 'WORST OF THE WORST' ARRESTED IN NYC RAID TARGETING CRIMINAL ILLEGAL IMMIGRANTS

However, for the vast majority of the 7,412, details on their criminal histories are not yet available.

The arrests total come as Secretary of Defense Pete Hegseth confirmed that the "worst of the worst" criminal migrants will be temporarily housed at Guantánamo Bay detention camp and that "all options will be on the table" for military action against the cartels.

Hegseth made the announcement in an interview with "Fox and Friends" on Friday and it came on the heels of an announcement made by President Donald Trump on Wednesday that he will be instructing the Pentagon to prepare Guantánamo Bay to detain 30,000 "criminal illegal aliens."

"Today I'm also signing an executive order to instruct the Departments of Defense and Homeland Security to begin preparing the 30,000-person migrant facility at Guantánamo Bay," Trump said. "Most people don't even know about it."

It was later learned that Trump signed a presidential memorandum, not an executive order, on the matter.

News of the arrests has been generally well-received by locals living in these areas. 

Ramses Frías, a local Queens activist who’s voiced concerns over a crime crisis gripping his neighborhood, which is partially represented by Rep. Alexandria Ocasio-Cortez, D-N.Y., said the raids have also been warmly received by the community.

"Many residents, from immigrants to citizens, welcome ICE coming in and taking the criminals out of these communities," Frías, a city council candidate, told Fox News Digital. "They welcome law and order and want safe streets."

However, not everyone agreed with the raids and Mayor Brandon Johnson recently "reaffirmed" his commitment to keep Chicago a sanctuary city, as did Boston Mayor Michelle Wu. 

Apple's iOS vulnerability exposes iPhones to stealthy hacker attacks

1 February 2025 at 10:00

Generally, iPhones are considered more secure than Android devices. 

Apple’s closed ecosystem and strict App Store policies limit the risk of malware, and its centralized software updates ensure better security. In contrast, Android’s openness allows users to install apps from various sources, and updates are often rolled out at different times, making it more vulnerable to attacks. 

However, iPhones aren’t immune to security flaws. Hackers occasionally find ways to exploit them, as seen in Apple’s latest advisory. The company recently discovered that a vulnerability in iOS had been exploited for over a year. While a fix has now been released, reports suggest that hackers may have already targeted high-value individuals.

GET SECURITY ALERTS, EXPERT TIPS — SIGN UP FOR KURT’S NEWSLETTER — THE CYBERGUY REPORT HERE

Apple has uncovered hackers exploiting a vulnerability in iOS that appears to have been lingering for more than a year. The vulnerability is a "zero-day" flaw, meaning criminals may have already exploited it, according to the latest security advisory from the company. Zero-day flaws like this are especially dangerous because they are exploited before developers can issue fixes. Apple confirmed this marks its first zero-day patch of 2025. The vulnerability affects iPhones dating back to 2018’s XS model, as well as newer iPads, Macs, and even the Vision Pro headset.

The vulnerability, tracked as CVE-2025-24085, resides in Apple’s Core Media framework, a software layer responsible for processing multimedia files. A "use after free" memory corruption error enabled hackers to manipulate the system into executing unstable code, granting them elevated privileges to bypass security protocols. Apple’s advisory suggests hackers weaponized the flaw through malicious apps disguised as legitimate media players. These apps likely abused the Core Media framework by triggering corrupted files, enabling attackers to infiltrate devices.

The attacks reportedly targeted iOS versions predating 17.2, released in December 2023, meaning the vulnerability may have been active since late 2022. Security experts speculate that hackers focused on high-value individuals — such as activists, executives or journalists — to avoid detection. The prolonged stealth of the campaign underscores the challenges of identifying sophisticated, narrowly tailored exploits.

This underscores the critical need for you to update your devices to iOS 17.2 or later, as these versions include essential fixes to safeguard against this actively exploited vulnerability.

HOW TO PROTECT YOUR IPHONE & IPAD FROM MALWARE

In response, Apple has released fixes across its ecosystem, including iOS 18.3, macOS Sequoia, watchOS, tvOS and VisionOS. You should update your devices as soon as possible to stay protected. To install the update on your iPhone or iPad:

Pro Tip: I recommend you click Update Now and also turn on Automatic Updates to stay covered in the future.

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

While Apple has patched this issue, it’s a reminder that staying on top of updates is key. Hackers are always looking for security gaps, so keeping your software up to date is one of the best ways to stay safe.

SCAMMERS FOUND A SNEAKY WAY TO BYPASS YOUR IPHONE'S SAFETY FEATURES

Protecting your iPhone requires proactive security measures. By following these seven essential steps, you can significantly reduce the risk of cyber threats and keep your personal information secure.

1. Keep your iPhone updated: I can’t say this enough. Updating your iPhone regularly is one of the most effective ways to protect it from security threats. Apple frequently releases updates that fix vulnerabilities, including critical zero-day flaws. 

2. Download apps only from the App Store: To minimize the risk of installing malware, only download apps from the official App Store. Apple’s strict app review process helps prevent malicious apps from being published, but some threats can still slip through. Always verify app details, check reviews and be cautious about app permissions before installation.

3. Enable lockdown mode for extra protection: For those of you who may be at higher risk, such as journalists or executives, Lockdown Mode provides an additional layer of security. This feature limits certain device functionalities to prevent sophisticated cyberattacks. It can be turned on via SettingsPrivacy & SecurityLockdown Mode and is especially useful for those concerned about targeted threats.

4. Enable message filtering: Use your device's built-in filtering options to sort messages from unknown senders. This feature allows you to automatically sort messages from unknown senders, easily filter unread messages and manage your message inbox more efficiently. Here are steps:

GET FOX BUSINESS ON THE GO BY CLICKING HERE

5. Stay cautious of phishing attacks and install strong antivirus software: Phishing remains one of the most common tactics used by hackers. Be cautious when receiving unsolicited messages or emails on your iPhone, especially those with suspicious links or attachments. Always verify the sender before opening anything. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.

6. Review your security and privacy settings: Regularly reviewing your iPhone’s security settings can help you maintain strong protection. You should also review app permissions in Settings > Privacy & Security to restrict access to sensitive data, such as location or contacts. Enable Face ID or Touch ID for secure access and turn on two-factor authentication (2FA) for Apple ID and other accounts. 2FA adds an extra layer of security to your accounts by requiring a second form of verification, such as a text message or authentication app, in addition to your password. This significantly reduces the risk of unauthorized access, even if your password is compromised.

7. Invest in personal data removal services: By reducing your online footprint, you make it harder for cybercriminals to obtain your contact information, potentially preventing them from sending you deceptive phishing texts and emails in the first place. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for data removal services here.

This iOS vulnerability is a serious reminder of the importance of staying up to date with software updates. If you’re using an iPhone from 2018 or later, make sure you’ve updated to iOS 17.2 or later as soon as possible. Hackers exploited a hidden flaw for over a year, using fake media apps to gain access to devices. While Apple has now patched the issue, the fact that it remained undetected for so long is concerning. 

Do you think companies like Apple are doing enough to protect you from cyber threats?  Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you'd like us to cover.

Follow Kurt on his social channels:

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2025 CyberGuy.com. All rights reserved.

Colombian president urges illegal immigrants in US to return home days after diplomatic spat

31 January 2025 at 18:06

Colombian President Gustavo Petro is urging Colombian nationals in the U.S. illegally to return home, promising to provide loans to those who return, days after being embroiled in a diplomatic controversy with the U.S.

"I ask undocumented Colombians in the US to immediately leave their jobs in that country and return to Colombia as soon as possible," Petro said on X.

"Wealth is produced only by working people.

COLOMBIA PRESIDENT WELCOMES FIRST FLIGHTS OF DEPORTED MIGRANTS AFTER LOSING PUBLIC SPAT WITH TRUMP 

"The Department of Social Prosperity … will seek to provide productive loans to returnees who enroll in its programs," he said. "Let's build social wealth in Colombia."

Petro had initially refused Sunday to take U.S. deportation flights carrying Colombian nationals, saying the U.S. cannot "treat Colombian migrants as criminals." 

The Trump administration, in response, announced the immediate suspension of visa issuance and travel sanctions on government officials. President Donald Trump warned he would slap 25% tariffs on all goods from Colombia.

"Measures will continue until Colombia meets its obligations to accept the return of its own citizens," Secretary of State Marco Rubio said. "America will not back down when it comes to defending its national security interests."

A VICTORY FOR TRUMP'S 'FAFO': HOW THE WHITE HOUSE STRONG-ARMED ONE-TIME CLOSE ALLY COLOMBIA OVER IMMIGRATION

At first, Petro retaliated with his own 25% tariffs on U.S. goods. Petro insisted he would not accept the return of migrants who were not treated with "dignity and respect" and who had arrived shackled or on military planes. 

But the White House later said Colombia's president had caved "to all of President Trump’s terms, including the unrestricted acceptance of all illegal aliens from Colombia returned from the United States, including on U.S. military aircraft, without limitation or delay," 

CLICK HERE FOR MORE IMMIGRATION COVERAGE

On Tuesday, two Colombian air force planes carrying deportees arrived in Bogotá. 

On Friday, State Department spokesperson Tammy Bruce confirmed that visa processing in Bogotá had resumed.

"Our commitment to work together with Colombia to advance our mutual interests remains steadfast," she said.

Fox News' Michael Dorgan contributed to this report.

Manhunt underway for woman linked to killing of Vermont Border Patrol agent: report

30 January 2025 at 20:48

A manhunt is underway for a 32-year-old woman suspected of buying the handguns used in the killing of a Vermont Border Patrol agent last week, according to a report. 

Law enforcement agencies in several states are searching for Michelle J. Zajko, who is considered "armed and dangerous," Albany’s Times Union reported, citing police records. 

U.S. Border Patrol Agent David "Chris" Maland was gunned down near the Canada-Vermont border Jan. 20, and, four days later, Teresa Youngblut, 21, was taken into custody.

"The United States Attorney’s Office District of Vermont has charged Youngblut with assault on a federal law enforcement officer," the FBI’s office in Albany said at the time. "Our hearts remain with our partners at U.S. Border Patrol Swanton Sector as they mourn this tremendous loss." 

GUN USED IN VERMONT BORDER AGENT SHOOTOUT LINKED TO DOUBLE MURDER SUSPECT, PROSECUTORS SAY

Maland was shot and killed during a traffic stop of Youngblut between Newport and Orleans, Vermont. Her passenger, Felix Bauckholt, was also armed but was fatally shot by federal agents after Youngblut opened fire. 

Zajko allegedly bought .40-caliber and .380-caliber handguns in February 2024 in Mount Tabor, Vermont, that were used in Maland’s shooting, the Times Union reported, citing court documents. 

GERMAN NATIONAL SUSPECT IDENTIFIED IN KILLING OF US BORDER PATROL AGENT IN VERMONT

Zajko is also considered a "person of interest" in a double murder in Pennsylvania and another murder in California, prosecutors revealed, without naming her. 

Maland, a Minnesota native and U.S. Air Force veteran, worked as a Border Patrol agent at the U.S. Customs and Border Protection’s Newport Station. He spent nine years in the military and 15 working for the federal government. 

He was also a K-9 handler and previously served as a Border Patrol agent in Texas near the southern border, Maland's family told The Associated Press. 

"On January 20, 2025, at approximately 3:00 pm, an on-duty, uniformed United States Border Patrol (USBP) Agent initiated a stop of a blue 2015 Toyota Prius Hatchback with [a] North Carolina license plate ... to conduct an immigration inspection as it was driving southbound on Interstate 91 in Coventry, Vermont," an FBI criminal complaint obtained by Fox News states.

"The registered owner of the vehicle, Felix Baukholt, a citizen of Germany, appeared to have an expired visa in a Department of Homeland Security database. Youngblut was driving the Prius, and Baukholt was the lone passenger in the Prius.  

CLICK HERE TO GET THE FOX NEWS APP

"Between approximately 3:00 pm and 3:15 pm, agents reported gunshots at the scene," the affidavit added. "Supervisory Border Patrol Agent Cameron Thompson was notified of the incident and responded to the scene of the stop, arriving at approximately 3:35 pm. 

"He spoke with two of the Border Patrol Agents involved in the incident. They described that both Baukholt and Youngblut possessed firearms and that Youngblut drew and fired a handgun toward at least one of the uniformed Border Patrol Agents without warning when outside the driver's side of the Prius." 

Fox News Digital has reached out to the FBI's Albany office. 

Fox News' Greg Norman contributed to this report. 

Illegals get more than they bargained for as FBI joins Trump DHS' criminal alien crackdown: photos

30 January 2025 at 19:05

EXCLUSIVE: The FBI is on the ground working alongside agents from the Department of Homeland Security (DHS) and other law enforcement bodies conducting a nationwide crackdown on criminal aliens ordered by President Donald Trump, photos obtained by Fox News Digital reveal.

"I've talked to every single one of our special agents in charge of all 55 of our divisions," acting FBI Director Brian Driscoll told Fox News Digital on Thursday. "I know that every single one of them has reached out to their DHS counterparts to offer assistance and support. So we here at the FBI are really leaning forward to assist DHS the best that we can, to stand shoulder-to-shoulder."

The FBI's presence bolsters Immigration and Customs Enforcement, Customs and Border Protection and other partner agencies with the bureau's vast resources, including tactical teams and its intelligence network. 

VP VANCE DOUBLES DOWN ON WHITE HOUSE GOAL TO GET CRIMINAL MIGRANTS OFF THE STREETS

Those resources worked alongside DHS agents in New York City earlier this week, helping identify and capture dozens of "the worst of the worst" suspects, including a 25-year-old suspected Tren de Aragua gang member.

He is believed to have been involved in a violent incident in Colorado before police found him Monday in a Bronx apartment across the street from a school.

MIGRANT TDA GANG MEMBER BREAKS OFFICER'S ARM AS 10 INDICTED IN MASSIVE GUNS, DRUG RUNNING OPERATION: POLICE

And they extend across the country.

In El Paso, Texas, the FBI, Homeland Security Investigations, ICE and agents from its Enforcement Removal Operations wing were seen on the ground as part of a mission that led to the capture of a suspect accused of running a stash house for human smugglers.

CHINESE MIGRANTS FLOOD SOUTH FLORIDA VIA BOAT AS AUTHORITIES SEEK HELP WITH CUBAN SMUGGLERS

"Our best chance to protect Americans, whether it's from the threats posed by groups like ISIS or in our efforts to dismantle groups like Tren de Aragua, the best way to do that is to put our heads together, our tools together, our efforts together with DHS, but also with all of our United States intelligence community and law enforcement partners around the country," Driscoll said.

In a series of targeted raids in Chicago, the FBI provided not just intelligence and tactical SWAT team members, but also legal experts to help round up illegal immigrants with suspected criminal ties.

In New York, they provided "advanced tactical support" and helped set up a crisis management coordination center covering the whole city.

"We are and will remain postured to support DHS the best that we can over here at the FBI," Driscoll said.

Operations across the country over the past seven days have netted roughly 5,500 suspected criminal aliens, according to figures released by ICE.

Top Senate Intelligence Dem grills Gabbard if Edward Snowden is 'brave': 'Very troubling'

30 January 2025 at 11:34

Virginia Sen. Mark Warner, the top Democrat on the Senate Intelligence Committee, grilled President Donald Trump's DNI nominee Tulsi Gabbard over her previous remarks praising whistleblower Edward Snowden. 

"Until you are nominated by the president to be the DNI, you consistently praised the actions of Edward Snowden, someone, I believe, jeopardized the security of our nation and then, to flaunt that, fled to Russia," Warner asked of Gabbard on Thursday morning. 

"You even called Edward Snowden and I quote here, ‘a brave whistleblower.’ Every member of this committee supports the rights of legal whistleblowers. But Edward Snowden isn't a whistleblower, and in this case, I'm a lot closer to the chairman's words where he said Snowden is, quote, ‘an egotistical serial liar and traitor' who, quote, ‘deserves to rot in jail for the rest of his life.’ Ms. Gabbard is simple, yes or no question. Do you still think Edward Snowden is brave?"

'WARRIOR WHOSE VOTE CANNOT BE BOUGHT': HUNDREDS OF VETS POUR OUT IN SUPPORT OF TULSI GABBARD FOR DNI

Gabbard pushed back that Snowden "broke the law" and does not agree with his leak of intelligence.

TRUMP APPOINTS TULSI GABBARD AS DIRECTOR OF NATIONAL INTELLIGENCE: ‘FEARLESS SPIRIT’

"Mr. Vice Chairman, Edward Snowden broke the law. I do not agree with or support with all of the information and intelligence that he released, nor the way in which he did it. There would have been opportunities for him to come to you on this committee, or seek out the IG to release that information. The fact is, he also, even as he broke the law, released information that exposed egregious, illegal and unconstitutional programs that are happening within our government," Gabbard responded. 

In 2013, Snowden was working as an IT contractor for the National Security Agency when he traveled to Hong Kong to meet with three journalists and transferred to them thousands of pages of classified documents about the U.S. government’s surveillance of its citizens. 

"I'm making myself very clear. Edward Snowden broke the law. He released information about the United States government," Gabbard continued as she defended her position. 

"If I may just finish my thoughts, Senator," Gabbard continued, as Warner spoke over her. "In this role that I've been nominated for, if confirmed as director of national intelligence, I will be responsible for protecting our nation's secrets. And I have four immediate steps that I would take to prevent another Snowden-like leak."

Gabbard has previously lauded Snowden, including during an appearance on "The Joe Rogan Experience" podcast in 2019. 

DEMOCRATS TRASH TULSI GABBARD AFTER TRUMP TAPS HER FOR DNI POST

"If it wasn’t for Snowden, the American people would never have learned the NSA was collecting phone records and spying on Americans," she said on "The Joe Rogan Experience" podcast at the time.

Gabbard appeared before the Senate Intelligence Committee on Thursday morning as part of her confirmation process to serve as the second Trump administration's director of national intelligence. 

Fox News Digital's Morgan Phillips contributed to this report. 

Ransomware Review December 2024: FunkSec’s Meteoric Rise and the Growing Threat of RaaS

30 January 2025 at 11:43

Written by: Ekrem Çelik, Cybersecurity Researcher

Welcome to the December 2024 ransomware update, where we highlight the latest trends, threat actors, and developments in the ransomware ecosystem to keep CISOs and third-party risk managers informed and prepared.

The Black Kite Research & Intelligence Team (BRITE) tracked 535 ransomware incidents in December 2024. While it didn’t surpass the record-breaking 595 victims in November, December still proved to be a significant month. Of these incidents, an overwhelming 244 were in the United States and 27 in Canada, highlighting North America’s ongoing struggle as a primary target for ransomware attacks.

Top Threat Actors in December 2024

1. FunkSec Emerges as a Major Player with 87 Victims

December marked a turning point in the ransomware landscape as FunkSec dethroned RansomHub to become the leading threat actor with 87 victims. What makes FunkSec’s rise particularly remarkable is that it is a relatively new group in the ecosystem. Their operations have not been limited to ransomware; the group has been actively selling admin access and super access for various companies, offering a troubling range of services to their buyers. FunkSec primarily targeted the information sector and public administration industries this month, demonstrating a calculated focus on critical and data-heavy sectors. Their rapid ascent highlights their aggressive strategies and growing influence in the ransomware ecosystem.

FunkSec Ransom Note

2. RansomHub Maintains Stability with 57 Victims

After dominating the leaderboard since July, RansomHub dropped to the second spot with 57 victims in December. Despite losing its leadership position, RansomHub maintained its reputation as a consistent player in the ransomware space, continuing to target high-value organizations globally.

Akira Surges with 46 Victims

The Akira group surged to the third position this month with 46 victims, showcasing one of its most active and aggressive months of the year. Akira’s operations this month highlighted their ability to capitalize on vulnerabilities and expand their victim pool, signaling their intent to climb higher in the ransomware hierarchy.

They Hate Being Forgotten: Clop (Cl0p) Is Back Again

The Clop group added a chaotic twist to the month. Exploiting the CLEO vulnerability in December, they initially promised to release victim data “within 48 hours.” Then they postponed to December 30, only to announce they were “taking a holiday break” and would publish data after their return.

Clop’s statement about CLEO victims

In total, Clop announced 66 victims, but BRITE believes the actual number is higher. Their erratic behavior has left many wondering if the group is losing its grip or simply playing for attention. Regardless, Clop’s actions remind us of the unpredictable nature of threat actors and the challenges of staying ahead of them.

One thing is clear: Clop, despite its chaotic actions, refuses to be forgotten and remains a noteworthy player in the ransomware ecosystem.

LockBit 4.0 Introduces RaaS Pricing Model for Just $777

LockBit, once the industry leader, seems to be struggling to reclaim its former prominence. December saw the launch of LockBit 4.0, a move that many interpreted as an attempt to stay relevant. Along with this update, the group introduced a Ransomware-as-a-Service (RaaS) pricing model for just $777, making their tools accessible to smaller players in the ecosystem.

Payment page for access to the LockBit panel

This shift has raised eyebrows across the cybersecurity world. Is it a sign of innovation or desperation? Many believe this move reflects LockBit’s declining influence after facing increased law enforcement pressure and internal challenges.

What stands out most is that LockBit’s struggles highlight a harsh reality: nothing in the ransomware world is unbreakable. Even the strongest groups can fall, showing how unpredictable and tough this space can be.

At the same time, their collapse shows how much it affects the whole ecosystem. It’s also a reminder of how hard it is to keep a group running steadily and stay on top in such a challenging environment.

RaaS Revolutionized Cybercrime in December 2024

The rise of Ransomware-as-a-Service (RaaS) has been one of the defining trends of December.

  • LockBit’s pricing model set off a ripple effect, inspiring other groups like FunkSec to adopt similar strategies.
  • Smaller threat actors are now able to access sophisticated ransomware tools at lower costs, democratizing cybercrime and complicating defense efforts.
Example RaaS sharing

RaaS not only increases the number of attacks but also lowers the barrier for entry, making it easier for less experienced actors to enter the game. This trend, if it continues, could make 2025 an even more challenging year for cybersecurity professionals.

2024: A Record-Breaking Year for Ransomware

2024 was a record-breaking year for ransomware. As groups continue to grow, tactics evolve, and victims are added to the lists, we can expect more records to be set in the coming months.

At Black Kite, the BRITE team remains committed to tracking threat actors in real time, analyzing their movements, and staying aware of emerging threats. As we enter 2025, staying one step ahead has never been more critical.For weekly updates on emerging cyber threats, please follow our Focus Friday blog series and LinkedIn account.



Learn more about the rising ransomware attacks in the full 2025 Healthcare Ransomware Report — accessible instantly, no download required.




The post Ransomware Review December 2024: FunkSec’s Meteoric Rise and the Growing Threat of RaaS appeared first on Black Kite.

Democrats press Army secretary nominee if ‘readiness’ affected by southern border deployments

30 January 2025 at 14:39

Democrats sounded off about the White House sending U.S. troops to the southern border, but Army secretary nominee Daniel Driscoll insisted that he did not believe it would affect readiness. 

"Is there a cost in terms of readiness?" Sen. Jack Reed, D-R.I., the top Democrat in the Senate Armed Services Committee, asked Driscoll during his confirmation hearing on Thursday. 

"The Army has a long, 249 history of balancing multiple objectives," Driscoll said. "If this is important to the commander-in-chief, the Army will execute it." 

"I think border security is national security," he went on. "We’ve had soldiers at the border for a number of years, and the Army stands ready for any mission."

Sen. Elissa Slotkin, D-Mich., also voiced concerns about sending the military to the U.S. border.

"We're seeing now active duty military, Army, be sent to the border, being sent on missions right now to support DHS," she said. "But according to our Constitution, the US military active duty cannot perform law enforcement roles." 

ARMY SEC NOMINEE QUESTIONS WHETHER MILITARY PILOTS SHOULD TRAIN NEAR DC AIRPORT

Slotkin, a former CIA agent, said she was concerned that without proper training an incident could occur that would turn public opinion against the nation’s armed forces. 

"I'm deeply concerned that active duty troops are going to be forced into law enforcement roles, and we're already hearing stories that really, really touch right on the line," she said.  

"They're not properly trained. There's going to be an incident," she said. "Someone's going to get hurt, there's going to be some sort of blow up, and suddenly we're going to have a community that’s deeply, deeply angry at uniformed military who were just told to go and drive those DHS vehicles through that building, perform support for somebody." 

Slotkin asked Driscoll if he would follow an order from President Donald Trump or Defense Secretary Pete Hegseth if it "contravened with the Constitution." 

"I reject the premise that the president or the secretary would ask for an order like that, but I will always follow the law," Driscoll said. 

HEGSETH SHARES DETAILS ON BLACK HAWK CHOPPER TRAINING FLIGHT

Slotkin shot back: "Your predecessor, Army Secretary [Mark] Esper, had this exact thing that he wrote about in his book, 82nd Airborne Army was asked to come in and clean up a peaceful protest in Washington, DC. So I reject your rejection that this is theoretical."

"We’re counting on you to protect the integrity of a non-political military that is not trained in law enforcement roles." 

Immediately upon taking office, Trump declared a national emergency at the southern border and 1,500 active duty troops — 1,000 Army personnel and 500 Marines — deployed to the southern border. 

There already were 2,500 U.S. service members stationed at the southern border. The troops were ordered there in May 2023 during the Biden administration under Title 10 authorities approved by former Defense Secretary Lloyd Austin and are planned to be there until the end of fiscal year 2025, according to a U.S. Northern Command spokesperson. 

"Whatever is needed at the border will be provided," Hegseth said Monday, hinting at the possibility of additional deployments in the coming weeks.

Trump also signed an executive order designating drug cartels in Latin America as foreign terrorist organizations, granting the military greater authority to interdict them. 

Gabbard says 9/11 likely could have been prevented if not for intelligence 'stovepiping'

30 January 2025 at 13:03

Tulsi Gabbard, President Donald Trump's director of national intelligence (DNI) pick, said the attack on Sept. 11 likely could have been prevented if not for government "stovepiping," where government officials deliver intelligence directly to high-ranking officials without broadening communications. 

"There's a general consensus that there was a massive intelligence failure," Republican Sen. Roger Wicker said during Gabbard's hearing regarding 9/11. "This caught us all by surprise, even though the the World Trade Center had been attacked earlier. Do you think stovepipeing was a problem in our intelligence failure?"

"There's no question about it, senator," Gabbard said before Wicker asked her to elaborate. 

"Senator, when we looked back at the post-9/11 reporting and the post-assessments that were made, it was very clear, that there was stovepiping of information and intelligence that occurred at many levels, at the highest, but also at the lowest levels," she said. 

'LIES AND SMEARS': TULSI GABBARD RAILS AGAINST DEM NARRATIVE SHE'S TRUMP'S AND PUTIN'S 'PUPPET'

"Information that was collected by the FBI, information that was collected by the CIA was not being shared. It was almost ships passing in the night where if there was an integration of those intelligence elements and information being shared, it is highly likely that that horrific attack could have been prevented," she said. 

TENSION BUILDS AROUND TULSI GABBARD’S CONFIRMATION WITH KEY GOP SENATORS UNDECIDED

Wicker pressed if the intelligence community could face another "stovepipe" issue in the future if plans to trim the DNI office of redundant jobs and increase efficiency, as Gabbard has said she will do, is put into effect. 

"And that's the reason, really, your position was created," Wicker told Gabbard after she said 9/11 likely could have been prevented. "There's been some discussion this morning, I again, have not been able to listen in, but I understand there's been some discussion about reforming the office of DNI, to eliminate redundancy and increase effectiveness. Do you worry that in doing so, we might be getting back to the same problem that we had in 2001?"

WASSERMAN SCHULTZ SPARKS BACKLASH FOR CLAIMING TULSI GABBARD IS A RUSSIAN ASSET

"The problem that we had in 2001, senator, remains at the forefront of my mind. And as you said, this is exactly why the ODNI was created. Given my limited vantage point not being in this seat, I am concerned that there are still problems with stovepiping that need to be addressed. And in some cases, my concern would be that unnecessary bureaucratic layers may be contributing to that problem. This is where coming in and being able to really take a fresh look, given my experience and my background, will be essential to making sure that the ODNI is accomplishing the reason why it was created in the first place," she responded. 

Gabbard was elected to the U.S. House representing Hawaii during the 2012 election cycle, serving as a Democrat until 2021. She did not seek re-election to that office after throwing her hat in the 2020 White House race. 

She left the Democratic Party in 2022, registering as an independent, before becoming a Republican this year and offering her full endorsement of Trump amid his presidential campaign before Trump named her his DNI pick.

She appeared before the Senate Intelligence Committee on Thursday as part of the last leg of her confirmation process. Fox News Digital reported ahead of the hearing that Gabbard does not currently have a majority of its members' votes, which are necessary to move to the full Senate, according to a senior Intel Committee aide. 

Fox News Digital's Julia Johnson contributed to this report. 

Gabbard sheds light on Assad visit, expresses shock intelligence community showed no interest at the time

30 January 2025 at 12:30

Director of national intelligence nominee Tulsi Gabbard shed further light on her 2017 meeting with then-Syrian dictator Bashar al-Assad, a trip that has come under the microscope since President Donald Trump nominated the former congresswoman. 

"There is not a great deal in the public record about what you and Syrian dictator Bashar al Assad discussed for so long in January of 2017. And I think there's a great deal of interest from the American people about what was discussed in that meeting. So what did you talk about? And did you press Assad on things like his use of chemical weapons, systematic torture and the killing of so many Syrians?" Sen. Martin Heinrich, D-N.M., asked Gabbard on Thursday. 

Gabbard, when she served in the U.S. House, traveled to Syria in 2017, when she met with the dictator, whose government was overthrown years later in 2024. The visit has become a focal point of Democrats' criticism of the DNI nominee, arguing the visit casts doubt on her worldview and judgment. 

'LIES AND SMEARS': TULSI GABBARD RAILS AGAINST DEM NARRATIVE SHE'S TRUMP'S AND PUTIN'S 'PUPPET'

"Yes, senator, I, upon returning from this trip, I met with people like then-Leader Nancy Pelosi, and Steny Hoyer, talked to them and answered their questions about the trip," Gabbard, who served in the U.S. House representing Hawaii from 2013 to 2021, responded. 

TENSION BUILDS AROUND TULSI GABBARD’S CONFIRMATION WITH KEY GOP SENATORS UNDECIDED

"And quite frankly, I was surprised that there was no one from the intelligence community or the State Department who reached out or showed any interest whatsoever in my takeaways from that trip. I would have been very happy to have a conversation and give them a back brief. I went with former Congressman Dennis Kucinich, who had been there many times before and who had met with Assad before. A number of topics were covered and discussed. And to directly answer your question, yes. I asked him tough questions about his own regime's actions. The use of chemical weapons and the brutal tactics that were being used against his own people."

Former Speaker of the House Nancy Pelosi also met with Assad in 2007, despite then-President George W. Bush's criticism of the visit at the time. 

WASSERMAN SCHULTZ SPARKS BACKLASH FOR CLAIMING TULSI GABBARD IS A RUSSIAN ASSET

"Were you able to extract any concessions from President Assad?" Heinrich asked Gabbard. 

"No, and I didn't expect to, but I felt these issues were important to address," she continued. 

"Just in complete hindsight, would you, would you view this trip as, good judgment?" the Senate lawmaker continued. 

"Yes, senator. And I believe that leaders, whether you be in Congress or the president of the United States, can benefit greatly by going and engaging boots on the ground, learning and listening and meeting directly with people, whether they be adversaries or friends," Gabbard said. 

Gabbard is appearing before the Senate Intelligence Committee on Thursday as part of her nomination process to serve as director of national intelligence under the second Trump administration.

'Lies and smears': Tulsi Gabbard rails against Dem narrative she's Trump's and Putin's 'puppet'

30 January 2025 at 11:51

Director of National Intelligence nominee Tulsi Gabbard slammed the Democratic narrative that she is a puppet for U.S. and world leaders, saying she is loyal to only God, the Constitution and her own conscience in her opening remarks before the Senate Intelligence Committee on Thursday. 

"Before I close, I want to warn the American people who are watching at home. You may hear lies and smears in this hearing that will challenge my loyalty to and my love for our country," Gabbard said.

"Those who oppose my nomination imply that I am loyal to something or someone other than God, my own conscience and the Constitution of the United States. Accusing me of being Trump's puppet, Putin's puppet, Assad's puppet, a guru's puppet, Modi's puppet, not recognizing the absurdity of simultaneously being the puppet of five different puppet masters," she continued. 

Gabbard appeared before the Senate Intelligence Committee on Thursday as part of her confirmation process to serve as director of national intelligence during President Donald Trump's second term. 

TENSION BUILDS AROUND TULSI GABBARD’S CONFIRMATION WITH KEY GOP SENATORS UNDECIDED

"The same tactic was used against President Trump and failed," she continued of the accusations against her. 

"The American people elected President Trump with a decisive victory and mandate for change. The fact is, what truly unsettles my political opponents, is I refuse to be their puppet. I have no love for Assad or Gadhafi or any dictator. I just hate al Qaeda. I hate that we have leaders who cozy up to Islamist extremists, minimizing them to so-called rebels."

TRUMP APPOINTS TULSI GABBARD AS DIRECTOR OF NATIONAL INTELLIGENCE: ‘FEARLESS SPIRIT’

Gabbard was elected to the U.S. House representing Hawaii during the 2012 election cycle, serving as a Democrat until 2021. She did not seek re-election to that office after throwing her hat in the 2020 White House race. 

Gabbard left the Democratic Party in 2022, registering as an independent, before becoming a member of the GOP this year and offering her full endorsement of Trump amid his presidential campaign before Trump named her his DNI pick. 

WASSERMAN SCHULTZ SPARKS BACKLASH FOR CLAIMING TULSI GABBARD IS A RUSSIAN ASSET

"If confirmed as director of national intelligence, I will continue to live by the oath that I have sworn at least eight times in my life, both in uniform, as and as a member of Congress. I will support and defend our God-given freedoms enshrined in the Constitution of the United States against all enemies, foreign and domestic. And I will bear true faith and allegiance to the same," she said. 

How to organize, protect and streamline your inbox with an email alias

30 January 2025 at 10:00

Almost everything you do online asks for your email. If you have been using the same one for a while, chances are hundreds or even thousands of services have it. They send promotional messages, social media alerts, newsletters and more, turning your inbox into complete chaos. You can tame this madness using an email alias.

An email alias helps declutter your inbox by organizing emails based on their purpose. For example, you can create specific aliases for shopping, newsletters or work and set up filters to sort these messages into separate folders automatically. 

Aliases also help manage spam. If an alias starts receiving too many unwanted messages, you can disable it without affecting your main email.

Let’s dive into how to create an email alias on different platforms, including Gmail, Outlook and iCloud. 

I’M GIVING AWAY THE LATEST & GREATEST AIRPODS PRO 2

Gmail doesn’t allow you to create a completely separate alias, but it offers workarounds using "+ addressing" or by adding dots to your existing email address. However, these methods don’t prevent an unscrupulous sender from seeing your primary address, so exercise caution when using them with untrusted correspondents. Follow the steps below to get started.

Use your existing Gmail address and add a "+" followed by any keyword before "@gmail.com."

Example: If your email is yourname@gmail.com, you can use:

No additional setup is needed, just start using this alias when signing up for services or sharing your email.

Gmail ignores dots (.) in email addresses, so you can create variations of your email:

Example: If your email is yourname@gmail.com, you can use:

All variations will deliver emails to your main inbox automatically.

MASSIVE SECURITY FLAW PUTS MOST POPULAR BROWSERS AT RISK ON MAC

Outlook.com allows you to create additional email addresses (aliases) that are linked to your primary account. Emails sent to an alias will arrive in your primary inbox, and you can send messages using the alias as well.

If your primary email is johnsmith@outlook.com, you can create an alias like john.smith123@outlook.com. Emails sent to john.smith123@outlook.com will still go to johnsmith@outlook.com, but you can choose to send emails using either address.

Steps to create an alias:

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

Once added, you can send emails using your alias by selecting it in the From field when composing a new message.

Important limitations to note:

HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET

Apple allows you to create up to three email aliases through iCloud. These aliases can be used for specific purposes, helping you manage your inbox effectively. Here’s how to create one:

It's important to note that you can still create up to three email aliases through iCloud. Remember that while these aliases provide some flexibility, they do not create separate Apple IDs or completely hide your primary iCloud email address.

BEWARE OF ENCRYPTED PDFS AS THE LATEST TRICK TO DELIVER MALWARE TO YOU

While many email providers offer basic alias functionality, most have significant limitations. Gmail's "+" addressing and dot tricks, Outlook's linked aliases and Apple's iCloud aliases all provide some flexibility, but they often fall short of true privacy protection.

For those of you seeking comprehensive email privacy and robust alias management, my No. 1 pick for private and secure email platforms contains no ads, no tracking and powerful privacy features like password-protected email and unlimited disposable email addresses. See my review of the best secure and private email services here.

Protecting your inbox from scammers requires a combination of smart practices and proactive tools. Using email aliases is an effective first step. By creating specific aliases for different activities, such as shopping, subscriptions or work, you can track where spam is coming from and deactivate problematic aliases as needed. Below are some other steps to take.

1. Avoid sharing your primary email address publicly on forums, social media or other platforms to minimize exposure. Most email providers offer robust spam filters, so ensure they are enabled and customize them as needed

GET FOX BUSINESS ON THE GO BY CLICKING HERE

2. Invest in personal data removal services. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for data removal services here.

3. Enable two-factor authentication on all your email accounts to add an extra layer of security.

4. Be cautious of suspicious links and attachments. Never click on links or download attachments from unknown senders, as these could be phishing attempts.

5. Use strong antivirus software to protect against potential malware that might come through spam emails. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.

6. Regularly update your email password and make it strong and unique, avoiding common words or easily guessable combinations. Consider using a password manager to generate and store complex passwords.

These steps will provide a more comprehensive approach to protecting your inbox from scammers and reducing unwanted emails.

SUBSCRIBE TO KURT’S YOUTUBE CHANNEL FOR QUICK VIDEO TIPS ON HOW TO WORK ALL OF YOUR TECH DEVICES

Taking charge of your inbox doesn’t have to be overwhelming. By implementing the tips and tools mentioned above, you’ll create a more secure, efficient and manageable email experience. Whether you’re battling spam or organizing your digital life, email aliases and secure services are great things to put into place.

Which email platform do you use most often, and how do you organize your messages there? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you'd like us to cover.

Follow Kurt on his social channels:

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2025 CyberGuy.com. All rights reserved.

Tension builds around Tulsi Gabbard’s confirmation with key GOP senators undecided

30 January 2025 at 04:00

Tulsi Gabbard doesn't currently have enough votes to advance out of the Senate Select Committee on Intelligence, Fox News Digital has learned. 

The former Democrat representative's nomination to be director of national intelligence (DNI) under President Donald Trump is in danger as she lacks enough Republican support on the committee, sources confirmed.

Before heading to the Senate floor for a confirmation vote, Trump's picks all have hearings and their nominations are voted on at the committee level. Gabbard's confirmation hearing will take place at 10 a.m. Thursday.

SCOOP: KEY GOP SENATOR WHO HESITATED ON PETE HEGSETH PUSHES KASH PATEL FOR FBI

So far, no Trump nominees have failed to advance out of their respective committees. 

A senior Intel Committee aide confirmed to Fox News Digital that Gabbard does not currently have a majority of its members' votes, which are necessary to move to the full Senate. 

According to the source, half of the Republicans on the coveted committee are not sold on Trump's DNI pick. 

A Senate source familiar told Fox News Digital, "Some members are undecided."

"Not true that [they] are NOs," they clarified. 

The source confirmed that the undecided senators in question are Republicans. 

'SQUEEZED BY RISING COSTS': DEMOCRAT JACKY ROSEN LEADS BIPARTISAN BILL TO ADDRESS CHILDCARE AFFORDABILITY

A spokesperson for Gabbard told Fox News Digital in a statement, "Anonymous sources are going to continue to lie and smear to try and take down the President’s nominees and subvert the will of the American people and the media is playing a role in publishing these lies. That doesn’t change the fact that Lt. Col. Gabbard is immensely qualified for this role and we look forward to her hearing."

The senior committee aide shared that the reasons for GOP uncertainty include her previous Section 702 stance, her past meeting with former Syrian President Bashar al-Assad and her past defense of Edward Snowden.

"It’s about judgment," they said. 

Gabbard will likely need every Republican vote to move past the committee, assuming Democrats will vote against her. 

DOGE CHAIR JONI ERNST TAKES ON FOOD STAMPS IN NEW BILL TO HOLD STATES 'ACCOUNTABLE'

Sen. Tom Cotton, R-Ark., serves as chair of the committee alongside other Republican members Jim Risch of Idaho, Susan Collins of Maine, John Cornyn of Texas, Jerry Moran of Kansas, James Lankford of Oklahoma, Mike Rounds of South Dakota, Todd Young of Indiana and Ted Budd of North Carolina.

Lankford recently came out in support of Gabbard after she reversed her position on a controversial intelligence gathering tool known as Section 702 of the Foreign Intelligence Surveillance Act.

Neither the White House nor Cotton's office provided comments to Fox News Digital in time for publication. 

Fox News Digital reached out to multiple Republican Senate offices for comment. 

SENATE TO KICK OFF RFK JR, KELLY LOEFFLER CONFIRMATION HEARINGS FOR TOP TRUMP POSTS

As Gabbard's confirmation fate hangs in the balance, there is reportedly a push by some Trump-aligned Republican senators to waive the committee's rules in order to open the vote on Gabbard's nomination, as Politico reported. This would mean each senator's vote is accessible to the public. 

The Intel Committee's rules stipulate that the vote is conducted in a closed meeting and a tally is released afterward. The vote is expected to go forward in a closed manner, in accordance with the rules.

❌
❌