More stories

  • in

    6 ways to protect your passport and other travel docs from cybercriminals – before it’s too late

    Elyse Betters Picaro / ZDNETYou may think that your physical passport, boarding passes, and ID cards are protected from theft as long as you keep them safe and secure. But that’s not necessarily the case. If those documents are scanned or stored in the cloud, they’re just as vulnerable as other types of files. Also: I never travel without these 5 security gadgets and accessories. Here’s whyA new report from NordVPN describes how your travel documents can be accessed and exploited and what you can do to better protect them.How your travel documents end up for sale on the dark webBased on a joint project between NordVPN and international eSIM provider Saily, the report uncovered the following ways that your passport and other travel documents can end up for sale on the dark web. Info-stealers. Are electronic copies of your sensitive travel documents stored or synced on your mobile device? If so, hackers could deploy malware designed to steal those files.Compromised travel sites. Airlines and travel agencies often scan your passport and other files to store them electronically. A criminal who hacks into a vulnerable server or website can access those scans and hawk them on the dark web.Fraudulent travel sites. Criminals can also set up phony websites that look like legitimate airline check-in pages. Using the right phishing techniques, they can trick you into providing personal information and uploading your travel documents.Unsecured cloud storage. Do you ever save your travel documents in the cloud for convenience? If the access isn’t secure or the file permissions are too loose, those documents are easily accessible. In the report, NordVPN cited a trick called Google dorking in which criminals use advanced search queries to track down exposed files.Physical theft. People can lose their physical passports and ID cards or improperly discard their unused boarding passes. In that event, a criminal who finds the documents could scan them and place them for sale on the dark web.How much resale value is built into stolen travel documents? That depends on the document itself. Travel documents are prized by cybercriminals for several reasons, according to NordVPN. The files typically fetch a good price on the dark web. They’re simple enough to use and require little verification. Above all, they contain the personal information criminals can use to commit fraud and identity theft.Scanned passport images usually sell for anywhere from $10 to $200, depending on the quality. Scanned IDs go for around $15. Those figures don’t sound like much, but the prices climb from there. Also: I never travel without this AirTag accessory – and it’s saved me hundreds of dollarsGenuine passports, driver’s licenses, IDs, and permits typically sell from $20 on the low end to $1,800 on the high end. Passports for EU citizens are especially pricey, going for as much as €5,500 (currently more than $6,300). Adding other family members to the package can even earn buyers a 25% discount. Airline loyalty accounts with high-mileage balances can range from $35 to $700. As one example cited by NordVPN, accounts with 1 to 5 million miles will fetch the top price of $700. Also: 7 ways to lock down your phone’s security – before it’s too lateWant to know how to hack into airline and hotel booking systems? Instruction manuals known as “Flight & hotel cracking & booking manuals” can go for $150 to $250 on the dark web. Even reservations made through sites like Booking.com are popular items. Here, criminals will resell pre-booked trips on these platforms at discounts of 40% to 50% off the original price — usually getting around $250 for each deal. More

  • in

    Two new Android 16 security features protect you better – how to switch them on now

    JEFF PACHOUD/Getty Images Although Google’s earlier-than-expected release of Android 16 was missing a few important features, the updated OS does deliver improved security that every Android user would be well-advised to enable. I’ll explain these two key security features and how to find and enable them. Also: Google quietly confirms ChromeOS-Android merger – here’s what it means for […] More

  • in

    I found 5 AI content detectors that can correctly identify AI text 100% of the time

    tolgart/Getty Images How hard is it in 2025  — just three years after generative AI captured the global spotlight — to fight back against AI-generated plagiarism? Also: Anthropic’s AI agent can now automate Canva, Asana, Figma and more – here’s how it works This is a completely updated version of my January 2023 article on AI content detectors. When […] More

  • in

    Eufy’s new smart display could seriously challenge Amazon and Google – here’s how

    Eufy Eufy’s Smart Display E10<!–> is designed to control your Eufy smart home ecosystem, with intelligent features like facial recognition, quad-view live stream, event summaries, and a built-in battery for portability. The 8-inch tablet can be wall-mounted or placed on a desk or tabletop with the included stands. It can be plugged in for continuous […] More

  • in

    How passkeys work: Your passwordless journey begins here

    CollinsChin/Getty Images Over the last few decades, compromised usernames and passwords have typically been at the root of some of the most sensational, damaging, and costly data breaches. An incessant drumbeat of advice about how to choose and use strong passwords and how not to fall prey to social engineering attacks has done little to […] More

  • in

    Someone used AI to impersonate a secretary of state – how to make sure you’re not next

    Andrew Harnik/Getty Images AI has proven itself to be a huge security risk — even US government officials aren’t safe. The Washington Post reported Tuesday that an unknown individual used AI to pose as Secretary of State Marco Rubio and contact “at least five government officials, including three foreign ministers, a US governor, and a member of […] More

  • in

    Can’t quit Windows 10? Here’s how to keep getting security updates after October 2025

    On the page that announced details of the ESU program for commercial customers, a Microsoft spokesperson wrote that details and prices for consumers “will be shared at a later date” on the company’s consumer end-of-support page. Six months later, the company finally revealed that  consumers would be able to sign up for a one-year ESU subscription for $30. Also: The best Windows laptop you can buyAnd if that $30 price tag is too much, the company announced two “free enrollment options” in June. You can enroll a Windows 10 PC for ESU coverage by using Windows Backup to sync your settings to the cloud, or you can use 1,000 Microsoft Rewards points (worth less than $1), which you accumulate by using Bing search services.  For details, see “How to get Windows 10 extended security updates for free: 2 options.”)  The deal comes with two significant restrictions.First, it’s available only for “personal use,” a move that’s obviously designed to discourage business customers from trying to get security updates at a discount. Second, the subscription can’t be renewed after that first year. On Oct. 13, 2026, security updates will stop for good on those consumer PCs.Still, the fact that Microsoft is even offering a consumer option is noteworthy. The Windows 7 ESU program was messy. It was not exactly friendly to small businesses, and there was no option at all for consumers. The difference, of course, is that those customers had a straightforward option to upgrade their Windows 7 PCs to the successor OS, Windows 10, at no cost. Also: Have a Windows 10 PC that can’t be upgraded? You have 5 optionsMicrosoft says the enrollment wizard will start rolling out for consumers in July and should be available to all Windows 10 PCs by the end of August. More