Good Connection: Uplifting stories for a digital age Creator Playbook Trending Now Say More Look Up Mashable's Best: E-readers, robovacs, laptops, earbuds, smart home and more Switch Off Mashable Voices Mashable Selects Safety Net Versus Gift Ideas For Everyone On Your List All Series Welcome to the age of'credential catfishing' From fake PA students to pretend NFL players, impressive credentials can earn trust before anyone verifies them. Olivia Tauber is the deputy editor of digital culture, covering creators, media, movies, beauty, and more. Based in New York, her work has appeared in The New York Times, Vanity Fair, The Cut, Teen Vogue, Complex, and Interview Magazine. She holds a Master's degree in Journalism from NYU and a Bachelor's from the University of Michigan. She also runs Fan Mail, a weekly pop-culture newsletter.

I wore the world's first HDR10 smart glasses TCL's new E Ink tablet beats the Remarkable and Kindle Anker's new charger is one of the most unique I've ever seen I wore the world's first HDR10 smart glasses TCL's new E Ink tablet beats the Remarkable and Kindle Anker's new charger is one of the most unique I've ever seen ChatGPT can log into your web accounts without you now - but should you let it? OpenAI's agentic ChatGPT Work can sign in to your online accounts without any interaction on your part. Is that a privacy risk? ChatGPT can sign in to your website accounts without your input. The built-in browser uses cookies to store your login credentials.

This material may not be published, broadcast, rewritten, or redistributed. Quotes displayed in real-time or delayed by at least 15 minutes. Market data provided by Factset . Powered and implemented by FactSet Digital Solutions . Mutual Fund and ETF data provided by LSEG . Chinese humanoid robot breaks Usain Bolt's 100m dash record at 9.39 seconds World's first solar-powered ambulance brings healthcare off-grid The scammer at your doctor's office may already know who you are Steve Doocy explores the US Air Force Academy's elite military training Supporting data centers is'perilous' politically: Brian Kilmeade Are American workers really using AI?

Here's how to keep your privates, private Sexortion is an old concept, but the FBI's latest warning about it is new. Long before the internet, people blackmailed others over sexually explicit photos or videos. But this week, the US Federal Bureau of Investigation released a fresh warning around hackers and sexortion--an alert aimed at both adults and children. In its public service announcement, the FBI says sexual exploitation actors have been breaking into "social media and personal accounts" to download any saved explicit content. The stolen images and video then gets spread to criminal forums and marketplaces, often with personal details like name, email, phone number, social media username, and date of birth also shared.

When you purchase through links in our articles, we may earn a small commission. Reusing passwords is the risky kind of shortcut. A password manager lets you do less work while keeping every account better protected. I have a hot take: You're probably lazy with passwords in the wrong way. You plug the same password into every single app, website, and service you don't care about.

Chick-fil-A customers in 10 states and D.C. experienced a data breach where hackers accessed accounts using stolen credentials from other sites through "credential stuffing." The attack exposed names, email addresses, and partial payment details, but wasn't due to Chick-fil-A's security being compromised directly. PCWorld recommends affected users change passwords immediately and use password managers to create unique, strong passwords for preventing future credential stuffing attacks. Sometimes you want a quick bite to eat. So you hop online, create an account for your favorite joint, and get to ordering. But a lot of people make a major mistake while doing this--which some Chick-fil-A customers just found out the hard way. On Wednesday, news broke about a Chick-fil-A data breach, with customers in ten states and the District of Columbia affected.

A Sneaky Hacking Tool Targeting AI Infrastructure Is Lurking in Victims' Blind Spots A new type of malware can worm deep into AI coding systems to steal data and logins--and can flip a "death switch" to destroy files and keep out real users. As AI tools proliferate and become deeply ingrained in software development around the world, new research from the cybersecurity firm Crowdstrike shows how attackers are actively targeting the AI toolchain to steal access credentials, gain deeper access to a target environment, exfiltrate sensitive data, and even destroy target files and systems--all while finding new ways to cover their tracks. Researchers discovered a worm in the wild while investigating AI software supply chain attacks. Adam Meyers, CrowdStrike's senior vice president of counter adversary work, says that the company has not yet attributed the activity to a specific actor, but that it fits into larger evolutions in how attackers like TeamPCP (which Crowdstrike tracks as "Altered Spider") and North Korean groups are targeting the AI software supply chain. "This is one of the campaigns that we've seen showing that this is an emerging attack class," Meyers tells WIRED.

PCWorld reports that Claude AI's new 1Password integration allows secure automation of online tasks like grocery shopping without exposing user passwords. The connector uses separate channels to maintain security, with 1Password handling login credentials while Claude performs website interactions on desktop Mac. Testing showed successful FreshDirect order completion, demonstrating potential for streamlining routine online chores, though social logins and passkeys aren't currently supported.

If you like putting Claude's AI agents to work on personal chores but are concerned about giving them access to your credentials, there's a new solution available. Users can now authorize Claude to complete real-world tasks like booking travel and managing accounts securely with credentials injected directly to the target system on their behalf, 1Password explains. Security has emerged as a big issue when using agents to complete tasks on your behalf. Sharing credentials directly with an agent exposes them to the model, its memory and the systems behind it, which can pose a risk if the model gets hacked . To solve that problem, 1Password built a zero-exposure security framework that allows agents to use stored credentials from your 1Password vault without them reaching the model.

PCWorld reports that Have I Been Pwned added 56 million email addresses and 124 million passwords from infostealer malware targeting Windows PCs. These credentials were stolen directly from infected devices rather than corporate breaches, with users often unaware of the ongoing data theft. Immediate password changes, two-factor authentication, and unique passwords for each service are essential to protect against these prevalent cybercriminal tools. The data breach notification service Have I Been Pwned (HIBP) has added a large number of compromised login credentials to its database. In total, 56.3 million email addresses and 124 million passwords have been added. What makes this dataset notable is its origin. Unlike many previous entries, it does not stem from a single cyberattack on an online service. Instead, HIBP says the information was extracted directly from infected computers and devices.