Security News Bites for May 9, 2025
Wrong Number Scam Text Messages
This scam is becoming very popular. You get a text from a number that is not in your phone book trying to engage you. “How is your sore back?” “How are you?” “Sorry, I’m running late” Anything to engage you. Once you are engaged they figure you are invested in the conversation. One scam recently turned into buy me a gift card and scratch the back and send me the numbers type of scam. Just know these are scams and will try to get you to do something/click on a link/buy them something, whatever. Credit: CNBC
Real-ID is Now REAL
As of May 7th, if you don’t have a Real-ID compliant ID card, you are going to have problems getting onto a airplane or getting into a federal building. Only took almost 20 years. If you don’t have a compliant ID you may be able to fly, but you will definitely have to go through extra steps. You should make sure that any employees that travel or have to get into federal buildings have the appropriate IDs. Credit: ABC7
This is Why Paying a Ransom is NOT a Good Plan
Powerschool, the education technology provider used by tens of thousands of school districts, paid a ransom after a ransomware attack. Now the attackers are going after individual school districts, threatening to release their data if the district doesn’t pay up. That wasn’t what was supposed to happen. Credit: The Register
Google Rolling Out On-Device AI Protections to Detect Scams
I have not seen this yet, but I am definitely going to watch for it. It runs on your device, so it should not be a privacy issue, but it will use Gemini Nano, its very light weight AI with Chrome on desktops to detect potentially scammy crap. It will also be rolled out for Chrome on Android later this year. This could be a real win for the average user. Credit: The Hacker News
REAL ID is a Real Bullseye for Every Hacker
I wonder how long it will be before it is compromised? REAL ID was passed in 2005 in the wake of 9/11. 20 years later it is implemented by most but not all states. That should tell you all you need to know. The database is a collection of all state drivers license databases. Something that hackers might, possibly, be interested in? Given that the feds want to fire half of CISA’s staff and cut $500 million out of its budget, I am sure that the data will be safe. Not that their track record was very good before the downsizing. Not to worry. For at least a few weeks. Credit: Cyber News
by 