German cybersecurity firm Nebty identified DoppelCart, a fraud operation running over 119,000 fake e-commerce domains, mostly on the .SHOP TLD, with more than 105,000 sites still active. The shops clone 44,182 real brands using copied catalogs and branding, luring shoppers with steep discounts, then harvest card numbers, security codes, and personal details via checkout forms that stream data to attackers in real time.
bleepingcomputer.com
· 2026-09-08
Jury selection begins in a long-running federal case against Huawei Technologies, which faces charges including wire and bank fraud, trade secret theft, and violating U.S. sanctions on North Korea. Prosecutors also allege Huawei equipment helped Iran surveil protesters during 2009 demonstrations. Huawei has called the government's case 'demonstrably false' and previously sought to have it dismissed as vague and overreaching.
fastcompany.com
· 2026-09-08
Michele Spagnuolo, the Google engineer charged with commodities fraud, wire fraud and money laundering over Polymarket bets made using the alias 'AlphaRaccoon,' has filed a motion to dismiss. His lawyers argue the wagers, which reportedly netted him over $1.2 million including a correct bet on singer D4vd, are informal gambling rather than regulated financial swaps, and that U.S. authorities lack jurisdiction since he is a non-U.S. citizen.
yro.slashdot.org
· 2026-09-03
Immigration and Customs Enforcement has published documents outlining plans to award a contract worth up to $5 million for building a national database of voter registration and voting history records. The contract, managed by Homeland Security Investigations, would require the winning company to pull publicly available voter files from all 50 states, including data on which federal elections people voted in. ICE says the contractor won't initially be asked to collect party affiliation data, but that could change if a contracting officer directs it in writing.
wired.com
· 2026-09-02
Consumer group Which? created a fake Booking.com listing for 10 Downing Street, complete with a bogus review mentioning Larry the cat, to test the platform's fraud detection. The listing remained live for two months before Booking.com removed it, despite obvious signs it was fraudulent.
bbc.co.uk
· 2026-09-02
Security researchers are flagging a fresh wave of email scams that no longer follow the old telltale patterns like poor grammar or suspicious links. These updated schemes are polished, convincing, and designed to slip past users who rely on outdated advice from corporate IT departments.
fastcompany.com
· 2026-08-31
Rupert Young, an MIT alum now serving as chief product officer at MaxMind, traces his analytical approach to cybersecurity back to a childhood hobby of cataloguing stamps given to him by his grandfather. His company's GeoIP tool identifies user location through IP addresses, helping businesses verify currency settings, detect suspicious login activity, and prevent fraud.
technologyreview.com
· 2026-08-25
A developer released GlassBox, a Show HN project that runs live in a browser to capture the same fingerprinting signals used by tracking and anti-fraud scripts, then displays them to the user instead of hiding them. Users can also paste a JSON report from another browser or session to compare fingerprints, and GlassBox scores similarity to indicate whether the two reports likely come from the same machine, engine family, or browser.
glassbox.codecanary.org
· 2026-08-24
Christine Hunsicker, former CEO of clothing-rental startup CaaStle, has been sentenced to five years in prison after being convicted of orchestrating roughly $300 million in investor fraud. Her defense argued a brain injury from a falling mirror erased her memory and judgment during the years the fraud occurred, but prosecutors pointed to incriminating search history and inflated revenue figures as evidence of deliberate deception.
futurism.com
· 2026-08-23