Security researchers found a fake add-on for Visual Studio Code that claimed to be a free AI helper for Moltbot, a popular tool. The add-on appeared in the official VS Code store but secretly installed harmful software that let attackers take control of users’ computers. Moltbot does not have an official VS Code add-on, and attackers used its popularity to trick people. Microsoft has now removed the fake add-on.

After installation, the add-on ran automatically whenever VS Code was opened and downloaded harmful files from the attackers. This allowed them to quietly access and control the computer. Researchers also warned that many Moltbot setups are not well protected, leaving chat messages and login details exposed. Since Moltbot can send messages and perform actions for users, attackers could pretend to be them, steal information, or spread more harmful add-ons.

Safety Tips for Users:

• Install extensions only from trusted and verified...

  ---

  January 28, 2026 16:14 (on 1/29/26) |  0 | 1 minute read

Be careful with online quizzes, games, and surveys, as many are designed to collect personal information, not just for fun. Avoid providing details like your name, birthday, email, opinions, preferences, or personal experiences if it isn’t necessary, since this information can be misused. Even seemingly harmless or fun activities can put your privacy at risk, so stick to trusted sites and think before you share.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Discarded devices, documents, or files can still expose your information if not disposed of correctly. Improper disposal can lead to data breaches, identity theft, and privacy violations. Secure disposal is essential for protecting your data.

Risks of Improper Disposal:

• Deleted files can be recovered
• Paper documents can reveal sensitive info
• Old devices may still contain login data
• E-waste can be mined for personal information
• Data leaks can cause fines and reputational damage

What to Do:

• Destroy hard drives before recycling
• Shred sensitive documents
• Use proper software to wipe files
• Log out and factory reset...

  ---

  January 27, 2026 16:01 (on 1/28/26) |  0 | QR Ready | 1 minute read

Regularly refresh your security knowledge to stay prepared for evolving threats. Cyber risks change constantly, and outdated habits can leave gaps in protection. Review security policies, training materials, and alerts on a regular basis. Staying informed helps you recognize risks early and keep company data secure. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Avoid using the same email address for all your accounts. Keep important services like banking and account recovery separate from newsletters and casual sign-ups to reduce the risk of phishing, hacking, or missing critical alerts. This separation helps protect your most sensitive accounts and keeps important messages easy to spot.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Even smart, careful people can fall for scams. Cybercriminals are skilled at taking advantage of trust, urgency, and routine behavior. Be especially wary of unsolicited requests for money, credentials, or personal information. Staying cautious with unexpected messages or requests helps reduce risk. When in doubt, pause and verify before you act. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Use simple security rules to protect yourself: if something feels urgent, pause and take time before acting, since pressure is often used to push bad decisions. If something feels too good to be true, question it carefully, because real opportunities rarely come without effort, risk, or limits. If something feels strange or uncomfortable, trust that instinct and avoid it, as personal safety and awareness matter more than politeness or curiosity.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Cybersecurity researchers are warning about a new scam on LinkedIn where hackers use private messages to trick people into downloading harmful files.

According to security firm ReliaQuest, attackers contact professionals through LinkedIn, build trust, and convince them to download what appears to be a harmless file. In reality, the download secretly installs malicious software on the victim’s computer.

Once opened, the file allows attackers to quietly gain ongoing access to the system, steal sensitive information, and potentially move deeper into company networks—without the victim noticing anything unusual.

Researchers say this method is especially dangerous because most companies focus on protecting email, while social media messages often go unmonitored. This gives attackers an easier way to bypass security defenses.

ReliaQuest noted that the campaign appears widespread and targets users across different industries and regions. The company warned that...

Never install software without proper approval. Unapproved applications can introduce security weaknesses, malicious software, or data leaks into the system. Always follow your organization’s software approval process to ensure tools are safe and compliant. When in doubt, contact your IT team before installing anything. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

In today’s connected world, sharing seems easy—but oversharing, online or in person, can create risks and a digital trail others might exploit. Being mindful isn’t about hiding; it’s about protecting what matters.

Risks of Oversharing:

• Identity theft from personal details
• Hackers guessing passwords or security questions
• Stalking or burglary from location sharing
• Increased phishing and scams
• Sensitive work info jeopardizing your company

Smart Sharing Tips:

• Limit personal details like birthdate, address, or travel plans
• Avoid sharing documents or IDs in photos
• Avoid real info in public bios or usernames
• Regularly...

  ---

  January 20, 2026 16:42 (on 1/21/26) |  0 | QR Ready | 1 minute read