Human In[Security] – Week of 2026-07-06

Today’s Menu (30-second skim)

• How global scammers use U.S. tech to trick people into fake online relationships: Scam teams are using AI and fake identities to build trust fast, then push people into sending money.
• Apple’s Hide My Email bug may expose the real address you meant to keep private: A reported bug in Apple’s privacy tool may reveal the real email address users thought they had hidden.
• FBI seizes network tied to malware that turned home devices into cybercrime tools: Investigators say millions of infected home gadgets were quietly used to help criminals hide their online activity.

1) How global scammers use U.S. tech to trick people into fake online relationships

What happened (plain English): AP News reported that organized scam centers are using American AI tools and popular online platforms to run romance and investment scams at scale. One worker said he had to manage many fake identities at the same time and target people in several countries. The goal was simple: earn trust quickly, keep the conversation going, and make the victim feel special. Once that emotional bond was built, the scammer would often ask for money or steer the person into a fake investment opportunity. In other words, this was not one lonely scammer typing from a basement. It was a system built to trick lots of people at once.

Why it matters to you: This kind of scam works because it feels personal, not because it looks like a crime. A widow, retiree, or anyone feeling isolated could believe they have met someone caring and real, when they are actually talking to a trained team reading from a script. Another common scenario is that the conversation turns from romance to money, with the scammer claiming they can help you invest or urgently need help with a problem. People can lose savings, borrow money, or even send gift cards before they realize the whole relationship was fake.

How to protect yourself (do this):

• Never send money, gift cards, or crypto to someone you have only met online, even if you have talked for weeks.
• If an online friend starts talking about investing, emergencies, or secret help, stop and ask a trusted real-life person what they think.
• Use a reverse image search or ask for a live video chat before trusting someone who seems unusually perfect or moves very fast.

Published: 2026-06-30

Source: AP News

2) Apple’s Hide My Email bug may expose the real address you meant to keep private

What happened (plain English): TechCrunch reported that a researcher says Apple’s Hide My Email feature has a bug that may reveal a user’s real email address. That feature is supposed to create a throwaway address, so websites and strangers do not learn your main one. According to the report, the researcher said he told Apple about the issue earlier and that his limited testing showed the bug working consistently. If true, that means a privacy tool people rely on may not always keep their real inbox hidden. For anyone who uses masked emails to stay private, that is a real problem.

Why it matters to you: Your main email account is often the front door to the rest of your digital life. If your real address leaks, scammers and data brokers can connect it to your name, older accounts, shopping profiles, and password reset links. One realistic scenario is a phishing email that looks more convincing because it lands in the inbox you actually use for important accounts. Another is a wave of spam or account takeover attempts aimed right at the address you were trying to protect.

How to protect yourself (do this):

• Treat any surprise email asking you to log in, confirm a purchase, or reset a password with extra suspicion this week.
• Use strong unique passwords and turn on two-factor authentication for your main email account, because that inbox can unlock everything else.
• Consider checking which services know your real email and remove old accounts you no longer use.

Published: 2026-07-01

Source: TechCrunch

3) FBI seizes network tied to malware that turned home devices into cybercrime tools

What happened (plain English): Krebs on Security reported that the FBI and industry partners seized domains connected to NetNut and the Popa botnet. Researchers said at least two million infected devices were involved, including home gadgets like smart TVs and streaming boxes. Those devices were reportedly turned into residential internet proxies, which means criminals could route their bad traffic through ordinary households. The people using those devices often had no idea anything was wrong. A gadget sitting quietly under your TV may have been helping criminals hide where their traffic was really coming from.

Why it matters to you: Many people think cybercrime starts with a hacked laptop, but cheap home gadgets can be just as risky. One abuse scenario is that criminals use your home connection to hide scams, attacks, or suspicious logins, making their activity look like it came from a normal household. Another is that one compromised device on your Wi-Fi creates more risk for the other phones, tablets, and computers in the house. If a device is old, neglected, or loaded with sketchy apps, it can become the weak link in the room.

How to protect yourself (do this):

• Install updates on smart TVs, streaming boxes, routers, and other home gadgets instead of only updating phones and laptops.
• Avoid cheap or unknown apps and plug-ins on streaming devices, especially anything promising free unlocked content.
• If a device acts strangely or stops getting security updates, replace it rather than leaving it connected to your home network.

Published: 2026-07-02

Source: Krebs on Security

Grandma’s Firewall

This week’s simple rule:

If someone or something online asks for trust before it has earned it, slow down and verify before you reply, click, or pay.

Two scripts you can steal:

• “I’m going to pause and check this another way before I do anything.”
• “I don’t send money, codes, or personal details on the spot. I’ll get back to you after I verify it.”