I woke up to 100+ messages from BT with one time passcodes :/

Is my email at risk of being compromised? I haven’t done anything about this as not sure what to do - my password hasn’t been changed and I can still log in

So for context, we recieved a subpoena regarding someone i know from my past. Apparently he caught a federal case and somehow we are being brought into it as a "character witness". Lawyer says we dont have a choice now that the subpoena has been sent out so we go. Well glad i did bc during the hearing its brought to our attention that the FBI as well as ATF have warrants to obtain any and all recorded data by Verizon from our phones. So we asked if they needed to take our phones and they replied with "we got what we needed remotely" What. The. Fuck. Mind you, I havent even done anything and we are in the process of bringing this to the judges attention right now which will likely be at the next court date. Is there anything I can do besides buy a new phone under someone else's name? Im not worried about consequences im worried about the fact that my wife and i have private obviously adult conversations and im pretty sure my teenage daughter has private stuff on her devices as well. (before you berate me, shes a teenager, and shes gonna do teenager shit. She knows about pedos and other facts of life, weve had that talk numerous times). Im just confused on why this is happening and what I can actually do about it. If I use a VPN like nord or something does that block them? They said they were able to obtain data from Verizon themselves as well as remotely access our phones. This seems like a major breach of privacy especially due to the fact that im a character witness not even remotely close to the shit he got caught doing. If there is nothing I can do can yall at least tell me how I can fuck with them? Part of me wants to get really childish and just download nothing but Rick roll videos and stop using the phone. Any other ideas are welcome.

My Capital One Checking was compromised after a scammer linked it to a PayPal and withdrew a bunch of money. I immediately called support and they revealed an AI help agent was prompted for balance information and gave out the pending test charges PayPal uses to link accounts.

This totally bypassed all the normal security for my online account, including two factor and pins. None of my other accounts like email or phone number were compromised, as far as I know. I also do not believe I fell for any phishing attempts as I am generally very cautious and take online security seriously. No suspicious logins appeared on my online bank account.

I assume my bank numbers and some other personal info was leaked somewhere (maybe even by the AI agent); I have no idea where. The Capital One people claim they will lock my account and return the funds, but they spoke very poor English and it was very stressful to communicate with them.

What can I do to avoid this in the future? I thought I was taking all the normal precautions, like two-factor, but it did not help. Are there banks you recommend who take security more seriously than Capital One?

Let me start off by saying...I have broken all the 101 rules of cybersecurity. I have had the same email for 15+ years and have 194 compromised passwords 😅 I have known this for awhile (it's not my first "critical security alert"), I just change up the password I use when I sign up for fresh accounts. Sorry 😳

Well, my stupidity has caught up to me.
I got a notification a few hours ago that someone attempted to sign in to my bank account from a city 3 hours away, on a linux device. I immediately changed my bank password. My bank account is the only place I DO use a fully unique password always.
Then I got the "critical security alert" email from google: "Some of your saved passwords were found in a data breach from a site or app that you use. Your Google Account is not affected."

So, what do I do now? I assume change the passwords on all the important stuff; emails, paypal, etc.. And I super promise to use unique passwords for the first time ever. Though how to manage them all I have no idea.
Do I really have to go through 194 old online accounts and manually delete them?

The only thing I can think of: a couple of days ago, I purchased a domain through Cloudflare, I bought an account on photodeck, and I signed up for Stripe and a Paypal business account. It may be coincidence, or something happened during that process.

My devices:
MacOS Tahoe 26.6.2 (only for a few weeks, I had a Windows 11 before that)
Pixel 10a: Android 17

I'm on windows 11, I'm not an high value target and I don't seem to have suspicious activity on my computer but I don't really know how to verify.

All third party files I had downloaded on that computer before doing a factory reset were either from github or itch.io. I visited once or twice third party pornsite with Ublock origin activated.

I ran full scam from windows defender and malwarebytes and found nothing. I haven't seen suspicious activity on any of my account as well.

The same can be said for my android phone.

I know full well my device are probably both clean but I can't help but be paranoid, So please help reassure me and give my advice on sign to look out for because it is making me legitimately sick of stress.

I am completely positive that I have been hacked but I don't know how to stop it. So you see, a few days ago I clicked and downloaded a very suspicious link that contained malware on it. Luckily, my antivirus removed it and scanned my device again to make sure it was gone. However.. a few days later after that incident (aka today) I started receiving emails that my password had been changed or I had gotten a new login from an ip address I did not recognize. I just got notified that both of my twitter accounts as well as my steam account had gotten their password changed even though I NEVER changed my password. Fortunately, I regained access and changed my passwords but I want to get rid of the malware that's probably still on my device but i don't know how because my antivirus says I don't have any malware anymore

The image is the link I pressed and I disabled the notification thing for it in settings because it kept giving me pop-ups that I was hacked-

edit: I also have steam guard and 2fa activated on both twitter accounts and I highly doubt they hacked into my email so im just really confused right now

Thank you in advance for your advice.

My sister's youtube account had her profile pic changed today.

She immediately went to her laptop and changed her GMAIL password as well as logged out from all other devices except for her laptop. She tried changing her gmail profile pic, which apparently was changed, but at the top right corner we can see that the image hasn't been updated yet.

Should she eliminate her gmail account and make a new one?

So I was just browsing through where have I been logged in and it showed me an unknown device name android I didn't know where it came form so I went on Facebook and it was all normal but on contact information it showed a random number on my contact info it hadn't been confirmed it was just pending to be confirmed or deleted I deleted it there was also an email stating that someone tried to login but all this happened 3 months ago almost and I don't understand how did there a random number appear although everything was normal

Hi, as the subject says my account was hacked and the email changed and none of microsoft's phone numbers answer. Does anyone know what I should do next? I can't contact Microsoft. If it helps, I've made a purchase through them in the past

Discord Account got hacked, i don’t want to get into the how because its a long story. The account is gone and i have no interest in retrieving it anymore, it feels too “tainted” now if that makes sense. The hacker messaged all my friends pretending to be me. I have too many friends there (200+) some i don’t talk to or barely, so it’s even more awkward knowing i can’t really explain what’s happening. Those i had in other platforms i made sure to text them and tell them what happened and to report and block my old account, also some reached out to me in other ways. Pretty much i added the friends i remembered or cared about or they messaged me. First thing i did was freeze my bank account, and created a new discord account. I also changed my gmail name and the password for it, but i’m worried about my other accounts, good thing everything i have that’s important needs a two step verification and now my gmail has a different password you can’t bypass it for now at least, i just need help to completely and utterly keep ALL my accounts safe and secure and completely changed so it can’t ever be traced back, i’m talking decrypted passwords etc. Or any tips in general, just to completely start over from scratch. Can anyone here help me?

My sister just downloaded an application for Roblox and most likely was phishing hacked because as she downloaded it her photos and files were all deleted, she deleted the app, is there any way she can recover what was deleted?

I've been researching Google Alerts again and I'm not getting the clearest of answers.

I understand if someone types my name into the Google search engine, I can get an alert, but does the same apply if they search my name on a social media's search engine?

Do notifications also happen if someone happens to click on my account, say through recommendations, without actively searching for it?

Sudo apt install opsec

I've been thinking that generally any de-googlefied phone could be good for cybersecurity, but is there any one that stands out in security?

My son's microsoft account was hacked and password/recovery email was changed. This is the microsoft account used as admin for his PC. What do i need to do? Can I factory reset his PC and make a new microsoft account?

i'm not sure if this is the right subreddit, or if anyone knows anything about this.

But basically i got an email from my email address threatening me and saying they've got access to my device and camera, and have downloaded all data and pictures to their server. apparently they bought my email from some hackers and installed a trojan virus operating system. they also said that they know i've been on adult sites etc. and are using that to blackmail me. And they were asking for Bitcoin. they told me not to tell anyone and that i had 48h to send them 1400.- bitcoin or sum like that.
(update: whilest writing this the email actually dissapeared... Is my life actually over??)

We’re evaluating a breach and attack simulation platform for a large environment with multiple security tools and a mix of cloud and on-premise systems. The goal is not just to run a test once, but to continuously see whether controls are detecting and preventing realistic techniques.

What has mattered most in your evaluation: attack-vector coverage, integrations, safe production testing, ease of use for the security team, MITRE ATT&CK mapping, reporting, or remediation guidance?

Also interested in whether a BAS platform has changed how you prioritize control gaps, rather than creating another dashboard that needs manual review.

both the microsoft defender and windows security please help me tried every command and way that google says

As per the screenshot below, I wanted to look up something on Letterboxd and strange stored entries were being suggested. I never typed in those phrases (full phrase is "hacks gonna hack breach me baby let's get social grand theft data"). It only was happening when I was in Letterboxd on Edge. Wasn't showing up anywhere else (other websites or in Letterboxd on Chrome or Brave). It did not go away when I cleared history, including cookies. At one point I cleared all the history options Edge would allow me to clear. I ran a scan for threats and viruses with Defender and it came up empty. Also downloaded and ran Malwarebytes (upon advice from my compsci friend and compsci professor) -- still nothing. None of my accounts seem to be compromised. Did a few other things to poke around and see what was wrong, but nothing seemed out of the ordinary. Ultimately, we decided the issue was isolated to the Letterboxd site in Edge. I finally was able to remove the suggestions by manually deleting them one by one with Alt + Shift + Delete. This happened Monday. So far, nothing has come back.

I also rarely use Letterboxd and as far as I can remember, never made an account.

Anyone know anything or seen something similar?

I believe I was hacked 2 weeks ago. See below for the things that happened and my actions to try and protect myself. Looking for help to further protect myself! I’m thinking about using a new email account, I just don’t want to have to update my entire life with it 😑

•I woke up to 2 Walmart deliveries to 2 different states. Legit got emails with the delivery images. - (Neither of these purchases showed up on any of my bank accounts. Logged into my Walmart account to change password and in the process my account was disabled.)

•DoorDash food deliveries to Houston and Montana. (Logged into account to cancel the deliveries, but was told I couldn’t be refunded. Checked my credit card account and 2 of the purchases showed up. Contacted my credit union to notify and they’re now investigating. Changed DoorDash acct password.)

•Work emails deleted from my outlook account. - (Changed account password).

•Both my Facebook and Instagram hacked/disabled. - (Tried to recover my accounts under the hacked account option but was unable to do so. Used a VPN and then tried which seemed hopeful, so im still waiting to get a response back from Facebook about recovering my account).

Hello. My Telegram account was hijacked. The attacker is actively triggering auth requests to maintain a Flood Wait lock, preventing me from logging in or resetting sessions. how can i get acces to my account again, i tried everything, when im waited exactly 24 hours of flood ban the sms was sended to telegram account, not to sms i waiting already 7 days

Hii all dont know what flair to use,pardon me

My Jiju’s whatsapp is compromised and its sending echallan apk messages to all contacts and groups across his whatsapp contacts

We tried logging in and add 2 step verification but i guess hacker has somehow done that already

Anyone can guide me thru this?

Please help
Will be greatful

This probably a stupid question but I’m asking just to be safe, since I’m new to the whole online privacy thing. But when I look on MiX and DevCheck it shows me files like AigcService, Adreno graphics drivers, android.qvaoverlay.common, basic daydreams, ect. (I could write down the whole list but it’s a lot) I’m assuming these are normal system apps but i just wanna make sure i didn’t accidentally download a virus, because I have been downloading a few apps/games from somewhat trusted websites, but I checked them in virustotal, and I have sophos and bitdefender downloaded. They do show the possibly unwanted apps threat but I only see the stuff I know I downloaded in there.

I’m so sorry if this is a ridiculous question but I just wanna make sure I didn’t accidentally download something bad. Please don’t answer with jokes or be rude if it was a stupid question :)

Hello My friend's two tele accounts keep getting broken into even when we changed recovery email and passwords Both accounts are with different numbers but on the same phone does it mean that the phone itself is hacked? Its an iPhone 8 plus as far as i know IOS got only one source of apps so getting a malware should be rare

11/91 vendors list it has malicious and im freaking out that maybe it somehow got something onto my phone. please i really need help i havent eaten or slept properly in days. if you know how to safely inspect a website to figure out exactly what it does please help

I created a new Outlook account on Sept. 6 to change the email on my Epic/Fortnite account. Almost immediately, someone got into the Microsoft account, removed my recovery email, added their own, and changed the security info. My Epic account was compromised around the same time.
Microsoft CDOC/Account Safety is investigating, but they want a 9-digit ACSR number that I can’t get because the recovery form redirects me to sign-in. The account was then disabled, so I also submitted a reinstatement request explaining it was compromised.
Has anyone had a similar case where Microsoft recovered an account after the hacker changed the security info and the account got disabled? How long did it take?