Earlier this month, Canvas, a major learning‑management system used by thousands of colleges and universities, disclosed a security incident involving unauthorized access to certain user data. While the investigation is ongoing, the breach has already triggered a wave of higher education‑themed phishing attacks across the country. Within days after the breach, universities across the country […]
Travel Scams Target Users of Booking Websites As the warmer months approach and people begin planning their summer getaways, cybersecurity experts are warning travelers about a growing wave of scams targeting hotel and reservation platforms. A recent breach at Booking.com has led to a surge in “reservation hijacking” attacks, in which criminals impersonate hotels and contact guests […]
Beware of FIFA World Cup Ticket Scams The FIFA World Cup is set to bring massive excitement to the NYC area this summer as fans from around the world flock to catch world‑class soccer matches. With global attention shifting toward the region, the surge in travel, ticket demand, and local celebrations is already creating a […]
Stay vigilant online! FIT’s 2026 Cybersecurity Training is now live! This training equips our employees with essential cyber security training to identify and combat threats and protect personal and institutional data. This mandatory training for faculty and staff is updated annually and is available through our vendor, Knowbe4. The training is 30 minutes long, and you […]
The IRS is once again warning taxpayers about a rise in increasingly sophisticated tax scams heading into the 2025 filing season. Recent activity shows a continued surge in phishing and mobile smishing attempts that impersonate the IRS. These messages often claim that an account has been locked, unusual activity has been detected, or a refund […]
As people rush to return gifts and track refunds after the holidays, scammers move in quickly, exploiting the high volume of legitimate returns. January is consistently one of the busiest months for return fraud, and this year’s tactics are more convincing than ever. One of the most common methods involves fake refund or return-issue messages, […]
Under Armour, a popular sports apparel company, is investigating a major data breach that exposed approximately 72 million customer records. The Everest ransomware group claimed responsibility for the ransomware event in November 2025, but late last week, the stolen information appeared on the breach-monitoring website Have I Been Pwned (HIBP). The exposed data includes email […]
The holidays should bring cheer and celebration, but for cybercriminals, they’ve become an opportunity, and AI is arming them with smarter, more deceptive tactics. One of the most common schemes this year involves fake delivery alerts. Scammers send text messages claiming your Amazon or FedEx package is delayed, complete with realistic branding and order numbers. […]
An old phishing campaign is resurfacing, targeting Google Calendar users by embedding fake events into their calendars. These events often appear automatically, making them harder to detect. They typically contain malicious links or attachments and can bypass email filters for this reason. Attackers use urgent language such as “Final Notice: Payroll Acknowledgment Required” and may […]
October marks National Cybersecurity Awareness Month, a collaborative initiative led by government and industry to promote cybersecurity awareness and empower individuals and organizations to protect themselves online. While cybersecurity may seem like a familiar topic, the threat landscape continues to evolve rapidly. Staying vigilant and informed is more important than ever. In 2025, cybercriminals are […]