Fortune reports that AI tools can now copy a person's voice from just a few seconds of audio, and scammers use this to fake calls from a relative 'in trouble.' One California mother wired $5,400 after a call claiming her daughter had been kidnapped, while her daughter was safe at work. Agree on a private family code word, and if you get an urgent call, hang up and call your relative back on a number you know. Report scams at ReportFraud.ftc.gov.

Capcom, maker of Resident Evil and Street Fighter, says hackers accessed more than 11.7 million CAPCOM ID records, including email addresses and IP addresses. Capcom says credit card details were not affected. Gamers should be wary of urgent emails about their account, sign in by typing cid.capcom.com directly, and turn on two-step verification.

A New Mexico judge ordered Meta to pay $25 billion after a jury found Facebook misled users about how it handles their data. Meta says it expects to win on appeal and denies selling users' information. Whatever the outcome, it is a good time to review your Facebook privacy settings, limit who sees your posts, and check which apps and quizzes are connected to your account.

PHP, the software behind many websites including WordPress, Drupal and Joomla sites, released an emergency fix for two serious flaws that attackers are already using. Some sites, including government websites in Europe, went offline while they patched. If your business or organization has a website, ask your web host or IT provider to confirm PHP and your site platform are updated (fixed PHP versions include 8.5.12, 8.4.27, 8.3.36 and 8.2.35).

Depositions filed in a federal lawsuit show TikTok employees raised alarms about minors on TikTok Live and teens getting around parental controls. TikTok calls the reporting misleading, and the case has not gone to trial. If your child uses TikTok, set up Family Pairing together and check in regularly about Live videos and gifts.

Android phones can automatically add your phone number to every Google account signed in on the device, which surprises people who keep separate accounts. Google says this helps with sign-in, account recovery and finding a lost phone. To turn it off, open Settings, then Google, then All services, then Privacy & security, then Phone number verification. Before removing a number from an account, make sure you still have another way to recover it.

ETS, which runs California's state school tests, says someone used stolen login details to copy files about current and former public school students, including names, birth dates, addresses and test scores. Officials say Social Security numbers, passwords and parent information were not involved. Affected families are being notified and offered two years of free identity protection. Watch for scam messages that mention your child or their school, and check any notice through official school or state channels.

CISA urged organizations to patch a critical flaw (CVE-2026-102764) in self-hosted BeyondTrust Remote Support, a tool help desks use to fix computers remotely. Attackers have exploited it since late August. If your organization or IT provider uses it, update right away and review the system for signs of break-in.

At an AARP event with two U.S. Attorneys during Cybersecurity Awareness Month, officials warned about rising government-impersonation, tech support, romance and fake investment scams aimed at older adults. Their advice: hang up when someone pressures you to act right away, call your bank back on a number you already know, and remember the IRS usually writes first. Need help? AARP Fraud Watch Network Helpline: 877-908-3360.

Hackers stole ASOS customers' names, addresses, phone numbers, emails, birth dates and shopping searches. ASOS says passwords and card details were not taken. After any data breach, expect fake refund, delivery or account messages. Don't click links in unexpected messages; go straight to the company's app or website instead.

Common Sense Media tested ChatGPT's teen mode. It refused explicit role-play, but parent alerts for suicide, self-harm and eating-disorder risks did not work as promised. OpenAI disputes the findings. Parents: treat teen modes as one layer of protection, not a guarantee, and keep talking with your kids about how they use AI chatbots.

Medicare Open Enrollment runs October 15 to December 7. The FTC warns that some top search results are paid ads for fake look-alike sites. Clicking them can lead to fake plans or medical identity theft. Type Medicare.gov yourself, check that the address ends in .gov, or call 1-800-MEDICARE (800-633-4227). Free, unbiased help is available from your State Health Insurance Assistance Program (SHIP).