Gain valuable insights from industry leaders as they provide their perspectives on navigating the evolving digital landscape, addressing emerging cyber threats and trending topics that affect us all.

Brand & Social Media Manager

Leadership Perspectives

Your smartphone isn’t just a device — it’s your digital life in your pocket. It holds your identity, finances, messages, photos and connections. And that’s exactly why it’s one of the most valuable targets for scammers today.As attacks grow more sophisticated, your phone has become both the key to convenience and the key that criminals want most. Working with our partners at the <a href="https://www.idtheftcenter.org/" title="idetheftcenter.org" target="_blank">Identity Theft Resource Center</a> (ITRC), we’re sharing what you can do to stay ahead.

<h2>1. Why smartphones are under attack</h2>Everything in one place. Your phone holds it all — emails, banking apps, social media, passwords, and even the codes that protect your accounts. If a scammer gains control, they can do more than compromise a single login — they can unlock your entire digital life.Always on, always connected. Smartphones travel with us across networks —<a href="https://us.norton.com/blog/privacy/public-wifi" title="Norton Blog: Public Wi-Fi" target="_blank"> public Wi-Fi</a>, Bluetooth, cellular. That constant connectivity expands your exposure and gives scammers more opportunities to strike.Built on trust. We trust what our phones show us: texts, pop-ups, alerts, and notifications. Scammers exploit trust by blending into the everyday experiences we rely on — an “account locked” text, a “package delivery” notice, a security alert that feels routine.The SIM factor. Many accounts still tie security codes to your phone number. Through <a href="https://us.norton.com/blog/mobile/sim-swap-fraud" target="_blank" title="Norton Blog: SIM Swapping">SIM swapping</a> or “port-out” scams, attackers can hijack that number, intercept authentication codes, and reset passwords — all without needing access to your phone itself.That’s why your phone isn’t just a target. It’s a launchpad for deeper compromise across your entire online footprint.&nbsp;<h2>2. Common mobile scam tactics (and how they work together)</h2>Scammers don’t just pick one tactic anymore — they blend them for maximum impact. Below are some of the most popular mobile scam tactics.&nbsp;Robocalls and spoofed caller IDs You get a call that looks local — maybe even familiar. The caller claims to be from your bank, a government office, or a tech support line. The goal? To pressure you into sharing information or taking immediate action.Smishing (SMS phishing) Text messages that look urgent — “Your account is locked,” “Confirm delivery,” “Claim your refund” — push you to click links or respond. Those links often lead to fake login pages designed to steal your information or install <a href="https://www.avast.com/c-malware" target="_blank">malware</a>.SIM swaps and number hijacking By posing as you, scammers convince your carrier to transfer your phone number to a new SIM card. Once they control it, they can intercept calls, messages, and even two-factor authentication codes.Fake or malicious apps Some apps disguise themselves as harmless tools — a flashlight, photo editor, or game — but quietly request access to your contacts, camera, or text messages. Others are clones of legitimate apps that install malware when downloaded.Voice phishing and deepfake Audio With generative AI, scammers are now using cloned voices or synthetic recordings to<a href="https://us.norton.com/blog/emerging-threats/what-are-deepfakes" target="_blank"> impersonate people you know</a> — or authority figures you’d normally trust. A familiar-sounding voice asking for a “quick favor” can be enough to trick even the cautious.“One-Ring” and callback scams You see a missed call from an unknown or international number. Calling back connects you to premium-rate lines or automated systems designed to keep you on the line — and charge you for it.Often, these scams overlap — a fake app might prompt an SMS confirmation, or a <a href="https://us.norton.com/blog/emerging-threats/smishing" target="_blank">smishing message</a> might direct you to a malicious download. The goal is to create a believable chain of trust that leads to compromise.&nbsp;<h2>3. Red flags that something’s off</h2>Keep an eye out for these warning signs:<ul><li>Unsolicited calls or texts demanding immediate action</li><li>Messages with typos, poor grammar, or odd formatting</li><li>Links that don’t match official domains</li><li>Apps requesting permissions they don’t need</li><li>Alerts that your SIM or number is being activated elsewhere</li><li>Suspicious short codes or incomplete phone numbers</li><li>Caller IDs that mimic legitimate contacts</li><li>Offers or prizes that feel “too good to be true”</li><li>Pressure to act right away or risk losing access</li></ul>When in doubt, take a step back and verify directly through official websites, phone numbers, or apps.&nbsp;<h2>4. How to protect yourself</h2>Lock down your phone and mobile account<ul><li>Use a <a href="https://www.avast.com/random-password-generator" target="_blank">strong passcod</a>e or biometric lock</li><li>Enable full-disk encryption</li><li>Ask your carrier to add a number lock or port freeze</li><li>Use an authentication app instead of SMS-based codes whenever possible</li><li>Set a unique PIN or passphrase with your mobile provider</li></ul>Harden apps and permissions<ul><li>Download only from trusted app stores</li><li>Review app permissions regularly and remove unnecessary ones</li><li>Avoid sideloading or third-party app installations</li><li>Use <a href="https://us.norton.com/products/norton-360-for-mobile">mobile security software</a> to detect suspicious behavior</li><li>Delete apps you no longer use</li></ul>Stay skeptical and verify<ul><li>Don’t tap links in unexpected messages</li><li>Contact organizations directly through official channels</li><li>Block and report suspicious senders or numbers</li></ul>Keep everything updated<ul><li>Regularly update your operating system and apps</li><li><a href="https://us.norton.com/products/norton-vpn" target="_blank">Use a VPN</a>, like Norton, when on public wi-fi</li><li>Avoid connecting to unsecured networks</li><li>Back up your data securely so recovery is easy if something happens</li></ul>Monitor and alert<ul><li>Turn on alerts for SIM changes, new logins, and suspicious activity</li><li>Use identity monitoring tools, like<a href="https://lifelock.norton.com/" target="_blank"> LifeLock</a>, to spot leaked credentials early</li><li>Review bank and credit accounts regularly</li><li>Consider<a href="https://lifelock.norton.com/learn/credit-finance/credit-freeze" target="_blank"> freezing credit </a>if you notice unusual activity</li></ul>&nbsp;<h2>5. If you think you’ve been targeted</h2><ol><li>Contact your carrier to freeze or reverse any SIM or porting requests.</li><li>Change passwords and log out of all active sessions.</li><li>Notify your bank or credit provider and request fraud protection.</li><li>Report the incident to the Identity Theft Resource Center, the FTC, your state attorney general, or local law enforcement.</li><li>Use identity restoration services to help clean up any fraudulent activity.</li><li>Stay alert — scammers often follow up with new attempts after a successful breach.</li></ol>&nbsp;<h2>Why this matters&nbsp;</h2>At Gen, in collaboration with the Identity Theft Resource Center (ITRC), we’re tracking an unmistakable trend: mobile scams are scaling fast — powered by automation, AI, and social engineering that feels increasingly personal.“At the Identity Theft Resource Center, we've seen firsthand the negative impact when a phone compromise leads to email account takeover, individuals being locked out of their social media accounts, or losing access to personal photos and documents,” said Mona Terry, COO &amp; Head of Victim Services at the Identity Theft Resource Center. “These attacks don't just steal money; they steal identities and peace of mind. That's why we're here. If you've been targeted, we provide free, one-on-one assistance to help you navigate recovery, secure your accounts, and reclaim your digital life.”Your phone is now the front line of digital trust. Protecting it means protecting your identity, finances, and peace of mind.&nbsp;

With insights from Gen and the Identity Theft Resource Center, discover why mobile scams are escalating — and what you can do to stay protected.

Why Your Phone Is a Target for Scammers

Recently, Ian Bednowitz, General Manager of LifeLock at Gen, testified before the U.S. House Committee on Financial Services on the growing impact of AI-driven fraud and the urgent need to strengthen consumer protection.

Later, other Gen team members also visited Washington, D.C., including Leyla Bilge, Global Head of Scam Research, Chad Angle, Senior Director of Reputation Defender, and Kim Allman, Senior Director of Corporate Responsibility &amp; Public Policy. Together, they met with Congressman Shreve, Chairman of the Congressional Stop Scams Caucus, and members of the Global Anti-Scam Alliance (GASA) to discuss the latest trends in scam prevention and the importance of public-private partnerships in protecting consumers.At Gen, we believe protecting consumers from fraud is not just a corporate responsibility — it’s a shared mission that calls for innovation, collaboration, and policy that keeps pace with technology.

Below are five key takeaways from our time on Capitol Hill and why they matter for the future of consumer cyber safety.<h3>1. Fraud is no longer isolated</h3>Fraud has moved far beyond lone hackers. Today’s scams are orchestrated by organized, global criminal networks operating like businesses — with call centers, scripts, and coordinated infrastructure.These groups use AI, automation, and breached personal data to launch high-volume, highly targeted campaigns. From romance and investment fraud to impersonation and “pig butchering” schemes, scams have become professional, scalable, and faster than ever.According to the Global Anti-Scam Alliance, U.S. consumers reported $16.6 billion in fraud losses in 2024 — a 33% increase year over year. Our very own threat intelligence confirms that scams continue to grow in scale, sophistication, and speed.<h3>2. AI is both a threat and a solution</h3>AI is reshaping the fraud landscape from both sides. In criminal hands, it enables industrialized deception — from flawless phishing pages and cloned voices to realistic deepfakes that can fool even cautious consumers.But AI also powers the defense. At Gen, we’re using it to detect, respond, and protect faster through innovations such as:<ul><li>Norton Scam Protection, which detects scams in real time</li><li><a href="https://us.norton.com/feature/ai-scam-protection" target="_blank">Deepfake Protection</a> in Norton 360 Mobile, which flags manipulated audio and video content</li><li>Machine learning systems that identify fraud patterns, impersonation attempts, and synthetic identities before harm occurs</li></ul>These technologies are designed not just to block threats, but to give consumers the confidence and awareness to act safely in the moment.<h3>3. The numbers tell a human story</h3>The latest Gen <a href="https://www.gendigital.com/blog/insights/reports/threat-report-q2-2025" target="_blank">Threat Report</a> revealed:<ul><li>+21% increase in data breaches</li><li>+340% surge in financial scams</li><li>2× rise in sextortion activity</li></ul>Behind each number is a person affected — older adults losing life savings, young consumers facing financial fallout, and families blindsided by criminals who move fast and convincingly.Fraud doesn’t discriminate, but it impacts groups differently. That’s why Gen focuses not just on detection, but also on recovery and resilience — through <a href="https://lifelock.norton.com/" target="_blank">identity restoration</a>, dark web monitoring, and education that reduces the risk of repeat targeting.<h3>4. Consumer protection must go beyond technology</h3>AI-powered defenses are essential, but technology alone isn’t enough. Protecting consumers requires a whole-of-society approach that pairs innovation with education, empathy, and real-world recovery.Gen supports an “All of the Above+” approach that includes:<ul><li>Clear, accessible education on scams and AI deception</li><li>Breach notifications that guide real action, not just legal compliance</li><li>Reducing stigma so victims can report and recover faster</li><li>Reliable identity restoration tools that support long-term recovery</li></ul>We also invest in nonprofit partnerships and awareness programs that meet consumers where they are — especially during high-risk moments like major data breaches or scam surges.<h3>5. Fraud prevention is a bipartisan priority</h3>One message from Capitol Hill was clear: protecting Americans from digital fraud is not a partisan issue.Leaders across the political spectrum share a commitment to defending consumers and restoring trust in the digital economy. Policy and partnership will both be critical — ensuring enforcement keeps pace with evolving threats and collaboration among government, industry, and civil society remains strong.As Ian emphasized in his testimony, fraud is a systemic threat to both families and trust in digital life. Tackling it requires collective action.<h3>Looking Ahead</h3>At Gen, our mission is to protect and empower consumers across every stage of their digital lives.We’re proud to contribute our technology, insights, and expertise to support smarter policy and stronger protections. Our conversations in Washington reinforce what we see every day: that AI can be used to deceive, but also to defend — and the future of digital trust depends on how we choose to use it.We thank the House Committee on Financial Services and Congressman Shreve for their leadership, and we look forward to continuing our collaboration with policymakers, industry, and community partners to help keep consumers safe in an AI-driven world.

Gen leaders met with U.S. lawmakers to advance consumer protection and discuss how AI, fraud, and public-private collaboration can strengthen digital trust

Fighting AI-Powered Scams: How Gen Is Working with U.S. Lawmakers to Protect Consumers

Cyber Safety Chief Technology Officer

With AI, that future is now. At Gen, we’re introducing the use of AI Avatars – or as we call them, Digital Twins –&nbsp;to create smart and fast ways to share information and connect in new ways.&nbsp;But we’re also clear-eyed. The sophistication of this technology can be astounding. Even misleading. Because not everyone will use this technology for good. So, while we’re all in on the responsible use of AI, we’re also committed to fighting back against the wave of AI-powered scams popping up across the digital world.&nbsp;Digital Twins vs. Deepfakes&nbsp;First, let’s break down the difference between a digital twin and a deepfake. A digital twin is a virtual version of a real person, built with full consent and transparency. Think of it as a communication tool – one that lets us show up in more places, reach more people and share what matters, more clearly and faster.&nbsp;A <a href="https://www.avast.com/c-deepfake" target="_blank" rel="noreferrer noopener">deepfake</a>, on the other hand, is designed to mislead people often with the intent of scamming them. It looks like someone you trust, but it’s not.&nbsp;We’re drawing a clear line between the two. At Gen, we use AI avatars to inform, connect and educate. Not to deceive. And we believe that transparency should be the foundation for any trusted AI-powered interaction. That’s why you’ll see a disclaimer on any AI avatar videos we create.&nbsp;

Using AI Avatars for Good&nbsp;My personal digital twin will share real cybersecurity tips from me. That’s not just cool tech; it’s a real way we’re using AI to make information more accessible, consistent and immediate.&nbsp;Instead of flying across time zones or waiting on schedules, an avatar lets us communicate important updates quickly. That means faster security awareness, better reach and less friction.&nbsp;AI is powerful. But “with great power comes great responsibility.” That’s why we have guardrails around synthetic media usage like:&nbsp;<ul><li>Only create digital versions of people with full consent.</li><li>Make it easy for viewers to know when they’re seeing an AI-generated persona.</li><li>Be vocal about calling out misuse when we see it. We’ll share findings in our threat reports or even through upcoming Deepfake Detection features in our products.&nbsp;</li></ul>Because we don’t just want to build cool things; we want to build the right things.&nbsp;What We’re Seeing in the Wild&nbsp;While we’re building digital twins with care, we’re also tracking how scammers are misusing similar technology to do the opposite.&nbsp;In our <a href="https://www.gendigital.com/blog/insights/reports/threat-report-q1-2025" target="_blank" rel="noreferrer noopener">Q1/2025 Threat Report</a>, we detailed a rise in deepfake scams. We saw AI-generated people posing as financial experts, executives or even family members. These videos look polished, polished; they sound convincing, but they’re designed to trick people into installing malware or handing over money.&nbsp;In one case, a group called CryptoCore used deepfakes and hijacked YouTube accounts to promote fake investments. The result? Millions of dollars were lost across thousands of incidents.&nbsp;That’s not innovation. That’s abuse. And it’s why we’re doubling down on both education and prevention.&nbsp;How We’re Protecting People&nbsp;We’ve built tools like <a href="https://us.norton.com/products/genie-scam-detector" target="_blank" rel="noreferrer noopener">Norton Genie</a> to help spot scams in real time, even the sophisticated ones. Genie flags suspicious content fast, giving people clarity when things look iffy. It’s simple, smart and built for today’s threats.&nbsp;And soon, we’re taking that protection even further with Norton deepfake detection. This new capability will detect fraudulent AI-generated content in YouTube videos by analyzing audio streams for signs of synthetic speech and facial manipulation that may indicate a scam. Initially, Norton’s deepfake detection will work on Microsoft Copilot+ PCs on Windows, protecting people from financial scams, including investment, crypto and giveaway scams. Norton’s technology works quickly and quietly in the background, helping people spot deceiving videos and scam messages on the fly, without their private data ever leaving the device.&nbsp;We’re also helping people spot red flags on their own:&nbsp;<ul><li>If something sounds too good to be true, pause.</li><li>Check the source. Do they exist outside the video? Are they verified?</li><li>Be wary of urgent instructions about crypto wallets, downloads or personal info.</li><li>Use trusted protection. Our security tools block shady links, fake updates and sketchy sites.&nbsp;</li></ul>The more people know, the harder it becomes for scammers to succeed.&nbsp;Let’s Build a Future Worth Trusting&nbsp;Here’s the good news: while this technology is evolving fast, so are we.&nbsp;At Gen, we believe that AI can be a force for good when used with intention. We’re already seeing how digital twins can improve education, accessibility, and communication. And we’re excited about what’s next.&nbsp;We’re still early in this journey. There’s a lot to figure out collectively. But we know this for sure: trust isn’t built by accident. It’s built by design. And if something doesn’t feel right online? Trust your instincts and your tools.&nbsp;At Gen, we’re committed to keeping people informed, protected, and empowered as the digital world keeps evolving. AI is here to stay. And we’re committed to making sure it works for us, not against us.&nbsp;

Transparency is key to building trust in today's digital world

AI-generated personas: Meet Gen cyber safety CTO's digital twin

AI isn’t just transforming the way we work and create; it’s rewriting the rules of love. And with wedding season in full swing and romance blooming like it’s algorithmically timed, there’s no better moment to ask: is love still real or just really good code? Whether it’s the app that lands you your next first date or the chatbot playing digital wingman, artificial intelligence has officially entered the chat ... and the relationship.&nbsp;To dig into this digital love story, I spoke with two of our very best: Leyla Bilge, Global Head of Scam Research, and Michal Salát, Director of Threat Intelligence. Their findings? Let’s just say swiping right could cost more than you thought.&nbsp;<h2>Swipe Right on AI (But Maybe Don’t)&nbsp;</h2>Dating apps used to be a place where you nervously sent “hey” at 2 a.m. Now? They’re a minefield of algorithmically crafted romance scams. According to the latest Norton Cyber Safety Insights Report – Online Dating (NCSIR), 48% of people have used a dating app and many are flirting with more than they bargained for.&nbsp;Leyla didn’t mince words: 1 in 4 daters have been targeted by scams, with romance scams topping the list at 37%. AI is making it even easier to fake a spark — think photorealistic avatars and love-bombing bots fluent in emotional manipulation.&nbsp;And here's the kicker: 56% of dating app users say they'd use AI to write a pick-up line. Sure, it’s efficient — but is it authentic?&nbsp;But wait, there’s more (and it gets weirder).&nbsp;<h2>Can You Really Fall in Love with Code?&nbsp;</h2>Turns out, some folks are ditching messy human connections altogether in favor of AI-generated soulmates. Yep, you can now build your own virtual lover.&nbsp;“There are websites that allow you to create your own friend or spouse or partner with all the kinks that you want. Plus, there are already reports of people falling in love with these AI personas,” said Michal.&nbsp;While it might feel like a safe emotional sandbox, Leyla warns there’s a dark undercurrent:&nbsp;“When people start talking to AI, they might feel satisfied with that relationship for the time being. But in the end, they build nothing and are completely alone in life.”&nbsp;Temporary companionship... or long-term isolation? As AI starts mimicking our deepest emotional patterns, that line gets dangerously blurry.&nbsp;<h2>Disconnecting at Home&nbsp;</h2>AI’s reach goes beyond your love life. It’s quietly rewriting the script on family and friendships, too.&nbsp;Michal pointed out how chatbots, voice assistants and AI-infused games are subtly replacing real conversations. That bedtime story from Grandma? Now it’s Alexa with a bedtime timer. That math help from Dad? An AI tutor’s got it.&nbsp;“People used to interact with their kids much more, sharing stories passed down for generations. Now, we don’t do that anymore, and in the process, we risk losing everything, especially our heritage," said Leyla.&nbsp;“If you talk to your kids and tell them the stories of your past, you’re getting to know each other and the family heritage. If I was interacting rather with a computer program, I would never know,” added Michal.&nbsp;The fallout is already visible:&nbsp;“Kids now spend hours doing homework with a ‘friend’, an AI model, rather than with a parent, as they would have five or ten years ago,” Michal observed.&nbsp;That subtle shift: human bonds quietly outsourced to machines. This may be the biggest relationship threat yet.&nbsp;<h2>AI: The Master of Deception&nbsp;</h2>Let’s not forget AI’s talent for trickery. From dating profiles to full-blown personas, the line between real and fake is disintegrating.&nbsp;According to the NCSIR, 29% of dating app users admit to digitally altering their photos. But we’re not just talking filters. Think deepfakes, voice clones and entire OnlyFans accounts run by AI.&nbsp;“We recently looked into an OnlyFans model that’s fully AI-generated, and it’s becoming increasingly difficult to distinguish whether we’re interacting with a real person or AI,” said Michal.&nbsp;And it’s not just visual.&nbsp;“We’ll see how this affects kids and others over time. But already, we’re seeing people lose the boundary and no longer realize they’re not talking to a real person,” he warned.&nbsp;That uncanny valley? It’s now your group chat.&nbsp;<h2>Stay Real in the Age of AI&nbsp;</h2>Whether it’s a chatty AI companion or a too-good-to-be-true dating match, the rules of engagement have changed. But you’re not powerless.&nbsp;Awareness is your superpower. Tools like <a href="https://genie.norton.com/" target="_blank" rel="noreferrer noopener">Norton Genie,</a> our free AI-powered scam detector, can help you spot the fakes in real time. Because let’s face it, not all matches are made in heaven. Some are made in a server farm.&nbsp;As AI tightens its grip on our emotional lives, we owe it to ourselves (and each other) to stay connected to what’s real.&nbsp;Education is key to protecting ourselves in the age of AI, says Leyla and Michal.&nbsp;You don’t need to ditch tech to protect your relationships. But you do need to open your eyes.&nbsp;Curious what’s next? Check out our <a href="https://usc-word-edit.officeapps.live.com/we/wordeditorframe.aspx?ui=en-US&amp;rs=en-US&amp;wopisrc=https%3A%2F%2Fnlok.sharepoint.com%2Fsites%2FCorporateMarketing%2F_vti_bin%2Fwopi.ashx%2Ffiles%2Fab81f6c489c9453190d11d2031f3c4af&amp;wdenableroaming=1&amp;mscc=1&amp;hid=3A97A5A1-2006-0000-BEEF-58F2D395E7D6.0&amp;uih=sharepointcom&amp;wdlcid=en-US&amp;jsapi=1&amp;jsapiver=v2&amp;corrid=e48bff98-8b1e-0daa-333a-6b805055d8bc&amp;usid=e48bff98-8b1e-0daa-333a-6b805055d8bc&amp;newsession=1&amp;sftc=1&amp;uihit=docaspx&amp;muv=1&amp;ats=PairwiseBroker&amp;cac=1&amp;sams=1&amp;mtf=1&amp;sfp=1&amp;sdp=1&amp;hch=1&amp;hwfh=1&amp;dchat=1&amp;sc=%7B%22pmo%22%3A%22https%3A%2F%2Fnlok.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&amp;ctp=LeastProtected&amp;rct=Normal&amp;wdorigin=Sharing.DirectLink.Copy&amp;afdflight=70&amp;csc=1&amp;instantedit=1&amp;wopicomplete=1&amp;wdredirectionreason=Unified_SingleFlush" target="_blank" rel="noreferrer noopener">2025 predictions blog</a> to see what else we’re thinking.

Alexa, Do You Love Me? How AI Is Messing with Our Love Lives and Relationships

Can love survive AI? 

Chief AI & Innovation Officer

Artificial intelligence (AI) is evolving fast. It can now pass the bar exam, write code and diagnose diseases. Yet it still struggles with something far simpler: proving it's acting in your best interest.&nbsp;We’re entering a new era of AI — one where systems move from conversation to action. Imagine personal AI agents that not only answer your questions, but also book your travel, manage your finances and coordinate your schedule. They’ll save you time, streamline decisions and help you get more out of everyday life.&nbsp;But for this future to thrive, one ingredient is essential: trust.&nbsp;These systems must be able to show they’re acting on your behalf, with your consent and in your best interest. Can a business verify it's your AI making a purchase? Can another agent confirm it's acting on your instructions? With the right safeguards in place, the answer is yes.&nbsp;Trust isn’t about limitations — it’s about powering AI to do more, safely. By building systems with clear boundaries, secure permissions and user control, we unlock the full potential of personal AI.&nbsp;And that’s the future we’re building: one where AI works with you, for you — on your terms.&nbsp;<h2>Earning your trust: The three pillars of personal AI&nbsp;</h2>Three requirements stand between today's conversational AI and tomorrow's truly personal agents:&nbsp;<h3>1. AI must be able to prove it works for you, not someone impersonating you.&nbsp;</h3>AI will increasingly interact with businesses, services and even other AI agents. But without a way to verify that it's acting on behalf of the correct person, these communications open the door to fraud, abuse and security risks.&nbsp;When your AI agent attempts to make a purchase on your behalf, merchants need verifiable proof that:&nbsp;<ul><li>You are who you claim to be (identity)&nbsp;</li><li>You have explicitly authorized this specific AI to act for you (delegation)&nbsp;</li><li>You've granted permission for this particular type of transaction (scope)&nbsp;</li><li>The authorization hasn't been revoked or tampered with (validity)&nbsp;&nbsp;</li></ul>This challenge isn’t just theoretical. AI-generated voices have been used in scam calls to impersonate loved ones. Deepfakes have fooled financial institutions into approving fraudulent transactions.&nbsp;But again, it’s not about eliminating risk entirely — it’s about mitigating risks to the lowest levels possible. &nbsp;With secure delegation frameworks, we can allow AI agents to act meaningfully while keeping user identity and intent verifiable.&nbsp;<h3>2. AI must store and retrieve personal data securely.&nbsp;</h3>For AI to be truly useful, it needs information — access to your calendar, payment details, travel history and other personal data. But this creates a critical question: Where is this data stored and who controls it?&nbsp;Too much data exposure increases risks; too little makes the AI ineffective. The goal is controlled access: letting your AI pull only what it needs, when it needs it and nothing more.&nbsp;This points to a new solution: a personal data vault, owned and managed by you. This secure repository would hold your digital life — from financial details to medical info — with access granted only through your explicit permissions.&nbsp;Such vaults should also support two-way access. If your AI books a flight, it needs to store the confirmation. If it updates your insurance policy, it should log the change. Over time, this builds a more capable AI that still operates within clear limits you define.&nbsp;<h3>3. AI must act within limits set by you.&nbsp;</h3>Lastly, AI should never be an all-or-nothing tool. It must operate within defined boundaries, giving users control over what it can do, when and for how long.&nbsp;&nbsp;Imagine asking your AI to manage your home services while you’re traveling. You might want it to reschedule a package delivery, approve a cleaning service visit, or adjust your smart home settings — but that doesn’t mean it should have unlimited access to everything in your home ecosystem. If your AI can unlock the front door for the dog walker, should it also be able to disable your security system? If it can manage a grocery delivery, should it also be allowed to modify your recurring bill payments?&nbsp;AI should function under clear, user-defined scopes, such as:&nbsp;<ul><li>Task-specific permissions – Allowing AI to approve service appointments but not modify security settings&nbsp;</li><li>Time-bound access – Granting access to unlock the door for the dog walker only between 2-3 PM on Wednesdays&nbsp;</li><li>Granular data controls – Letting AI use your stored credit card for one grocery delivery, not for other purchases&nbsp;</li></ul>The best AI isn’t the one that can do everything — it’s the one that knows its limits and operates within yours.&nbsp;&nbsp;<h2>What’s driving this shift?&nbsp;</h2>Trust in artificial intelligence isn't just a nice-to-have. Across the globe, governments are taking action to regulate AI's expanding role in our lives and economies.&nbsp;Take the European Union's <a href="https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai" target="_blank" rel="noreferrer noopener">AI Act</a> or the <a href="https://blog.avast.com/eidas-2.0-avast" target="_blank" rel="noreferrer noopener">Digital Identity Wallet regulations</a>. These aren't isolated initiatives — they reflect a growing global emphasis on transparency and user control. As AI systems become more autonomous in our daily lives, companies face a stark reality: either develop verifiable AI systems that respect clear permission boundaries, or face mounting regulatory headaches.&nbsp;&nbsp;For businesses, this is competitive and compliance imperative. Deepfake scams have already cost businesses millions. Companies that can't verify whether an AI interaction is legitimate face potential consequences, both financial and reputational.&nbsp;Meanwhile, consumers are growing increasingly savvy about their digital footprints, with <a href="https://www.pewresearch.org/internet/2023/10/18/how-americans-view-data-privacy/" target="_blank" rel="noreferrer noopener">81% expressing concerns about how businesses use their data</a>. The days of passive acceptance of data collection are waning. People are pushing back, demanding services that work for them without compromising their privacy. They're asking pointed questions: "Who can access my information?" and "Are my AI interactions private or already written off as training material for the next model?" Without satisfactory answers, public trust continues to erode.&nbsp;<h2>A future where AI is personal, private and trusted&nbsp;</h2>Today’s AI race is all about capabilities. But tomorrow’s breakthroughs will be defined by something even more meaningful: trust. The most impactful systems won’t just be intelligent — they’ll be built to serve you.&nbsp;Imagine an AI that’s truly personal. One that acts as your trusted delegate — not a detached assistant, but a digital partner operating with your explicit guidance, your values and your boundaries. It doesn’t just know you — it respects you.&nbsp;As these agents become part of our everyday lives, they’ll open doors to a new kind of freedom: the freedom to offload complexity, reclaim time and navigate the digital world with confidence. When people are in control, AI becomes more than just a tool — it becomes an extension of your intent, working with precision, privacy and purpose.&nbsp;Because the future of AI isn’t just about what it can do. It’s about what it can do for you on your terms.&nbsp;

A new era of personal AI is coming — one where trust, control and capability go hand in hand.

The future of AI is personal and it starts with trust 

Global Head of Scam Research

As spring blooms and wedding season approaches, love is in the air — and in dating apps. Singles are swiping, chatting and hoping to find something real. But in a digital world where DMs replace first dates and algorithms spark connections, scammers are circling too.&nbsp;<a href="https://www.aarp.org/money/scams-fraud/what-is-catfishing.html%22%20/h%EF%B7%9FHYPERLINK%20%22https://us.norton.com/blog/online-scams/romance-scams" target="_blank" rel="noreferrer noopener">Romance scams</a> aren’t new. But fueled by artificial intelligence, they’re no longer just deceitful — they’re calculated, scalable and deeply personal. What once took hours of emotional manipulation can now be automated, translated and tailored in seconds.&nbsp;AI hasn’t just changed how these crimes work. But, it has changed its reach.&nbsp;At Gen, we refuse to accept this as the cost of connection.&nbsp;<h2>The AI scam surge</h2>According to the latest <a href="https://newsroom.gendigital.com/norton-cyber-safety-report-2025" target="_blank" rel="noreferrer noopener">Norton Cyber Safety Insights Report</a>, two in five people on dating apps report being targeted by scams. Of those, 41% have fallen victim. And our research with <a href="https://us.norton.com/products/genie-scam-detector" target="_blank" rel="noreferrer noopener">Norton Genie</a> (our AI-powered scam detection tool and assistant) revealed an even more chilling trend: 60% of online daters believe they’ve chatted with someone whose messages were AI-generated.&nbsp;When it comes to the types of scams online daters in the U.S. are facing, here's what they report: &nbsp;<ul><li>55% have encountered catfishing</li><li>34% have experienced romance scams</li><li>32% have been targeted by sugar daddy or sugar baby scams</li><li>31% have faced sextortion scams</li></ul>These numbers underscore just how widespread and varied scam tactics have become, preying on vulnerability, trust and the desire to connect.In the U.S., we see that Congress is&nbsp;considering new measures to combat the rise of romance scams with the introduction of the Romance Scam Prevention Act (<a href="https://www.govtrack.us/congress/bills/119/s841" target="_blank" rel="noreferrer noopener">S.841</a> and <a href="https://www.govtrack.us/congress/bills/119/hr2481" target="_blank" rel="noreferrer noopener">H.R. 2481</a>). If passed, it would:&nbsp;<ol><li>Require platforms to notify users exposed to flagged profiles</li><li>Mandate investigations and suspensions of suspicious accounts within 24 hours</li><li>Provide scam awareness resources directly to users&nbsp;</li></ol>The proposed legislation follows previous efforts such as the <a href="https://www.govtrack.us/congress/bills/118/hr6125" target="_blank" rel="noreferrer noopener">Online Dating Safety Act</a> of 2023. The latest proposal includes expanded provisions and would authorize enforcement by the Federal Trade Commission (FTC), with violations subject to federal action.&nbsp;<h2>Our role: Tech must lead, not lag&nbsp;</h2>At Gen, we try not to wait for mandates. We would rather lead with real-life solutions.&nbsp;<ul><li>We built Norton Genie to give people real-time answers when something feels off, no matter where that conversation started.</li><li>We’ve conducted deep research into AI-enabled romance scams to understand how they work and evolve.</li><li>And we believe platforms need education, transparency and user protection.&nbsp;</li></ul>As romance scams evolve with AI, we must evolve our approach to protect consumers through smarter tools, better education and collaborative policy solutions.&nbsp;&nbsp;<h2>This fight belongs to all of us&nbsp;</h2>This is not just a dating app problem. Romance scams thrive across texting platforms, email, gaming sites and social media feeds. Basically, anywhere people connect.&nbsp;That’s why Gen joined the <a href="https://www.gasa.org/" target="_blank" rel="noreferrer noopener">Global Anti-Scam Alliance</a> (GASA). Because protecting people from digital deception takes collaboration, not competition. Consumer safety is not a partisan issue — it’s a human one. We’re committed to empowering consumers by conducting in-depth scam research, educating users about potential threats, and working alongside policymakers and industry partners to better protect people from scams.&nbsp;We believe in a future where technology empowers people, not preys on them. A future where we can connect without fear. Where love is honest, not engineered by a bot. Where trust is earned — and protected — by all of us.&nbsp;&nbsp;&nbsp;Read more about our <a href="https://www.gendigital.com/blog/insights/leadership-perspectives/ai-2025-gen-policy" target="_blank" rel="noreferrer noopener">policy recommendations</a>.&nbsp;&nbsp;&nbsp;

Why we’re fighting back against AI-driven romance scams

Love in the age of algorithms 

Since taking office on January 20, 2025, President Donald Trump’s administration has taken significant steps to strengthen U.S. leadership in AI. Efforts have been focused on accelerating AI innovation while curbing the flow of advanced technologies to geopolitical rivals. To foster growth, regulatory barriers are being eased, and Project Stargate is set to transform the nation’s AI infrastructure.&nbsp;As AI rapidly evolves, policymakers must strike a balance between driving innovation and addressing risks related to misinformation, security, safety, and ethics. Gen has outlined key recommendations for responsible AI development, aligning with its ongoing policy efforts in the EU and core principles of Integrity, Accountability, Data Protection, Human Involvement, and Transparency.&nbsp;The following is an overview of the recommendations, and you can take a deeper dive into them in our <a href="https://www.gendigital.com/media/m5jitl4s/us-ai-policy-recommendations-from-gen_final.pdf" target="_blank" rel="noreferrer noopener">U.S. AI Policy Recommendations</a>.&nbsp;<h2>Recommendations for U.S. Policymakers&nbsp;</h2>As the U.S. enters this new era of emerging technology, shaping its AI strategy requires a framework that promotes responsible innovation while addressing its complex challenges. To achieve this, targeted policy measures must enhance accountability, consumer protection, transparency, security, safety, and public awareness.&nbsp;&nbsp;The following recommendations from Gen outline key actions for U.S. policymakers to ensure AI’s safe and ethical development while strengthening America’s tech leadership. These build upon our commitment to five core policy principles: Integrity, Accountability, Data Protection, Human Involvement, and Transparency.&nbsp;&nbsp;Our recommendations include:&nbsp;<ol><li>Support and enact a nationwide AI law to regulate AI’s development, use, security, and safety in a balanced way</li><li>Strengthen consumer protection policies at the state level to safeguard individuals from fraudulent, dangerous, or defective AI technologies.</li><li>Regulate AI development and use by organizations to ensure responsible and ethical technologies.</li><li>Raise public awareness on AI risks through national education campaigns to inform Americans about content authenticity and the risks of sharing personal data online.</li><li>Establish clear guidelines on the ownership, rights, and ethical use of AI-generated data, including data used for training AI models, the recycling of AI-generated content, and the responsible deployment of digital avatars and personas.</li><li>Combat deepfakes and misinformation through legal frameworks that address and work toward eliminating them to secure public trust.</li><li>Mandate AI transparency by requiring AI companies to disclose information about their systems and provide clarity in how their models operate and make decisions.</li><li>Ensure regulatory certainty of AI standards to prevent regulatory ambiguity and foster innovation by giving companies confidence in compliance requirements.&nbsp;</li></ol>While these recommendations lay a strong foundation for responsible AI governance, policymakers must also take a proactive role in areas where long-term technological progress is critical, but incentives are lacking. Key priorities include: &nbsp;<ol><li>Investing in Fundamental Scientific Research: AI has the potential to drive groundbreaking discoveries in physics, chemistry, and other foundational sciences. Government funding for this research will be critical to unlocking the transformative advancements of AI in the coming decades, even if it may not yield immediate profits. &nbsp;</li><li>Preparing for Workforce Transition: AI-driven automation will reshape entire job sectors, affecting workers from rideshare drivers to software developers. Proactive workforce transition programs, including reskilling initiatives and adult education, can help guarantee that the benefits of AI are broadly shared and do not deepen economic divides. &nbsp;</li><li>Advancing Next-Generation Computing Materials: Silicon has powered the digital era, but new materials may offer superior speed, efficiency, and scalability. However, these alternatives face adoption challenges. Rather than focusing solely on AI model development, the U.S. government should spearhead research and infrastructure efforts to advance these cutting-edge materials and lay the groundwork for the next wave of computing innovation. &nbsp;<h2>A Call for Responsible Growth&nbsp;</h2></li></ol>The U.S. stands at a pivotal moment in the AI revolution. While innovation drives progress, responsible governance must ensure that AI benefits society as a whole. By investing in foundational scientific research, preparing the American workforce for AI-driven changes, and promoting next-generation computing materials, the U.S. can secure its leadership in the global AI race while fostering long-term economic stability and technological progress.&nbsp;Finally, balancing innovation with accountability requires collaboration between governments, industry, and global partners.&nbsp; For more insights on Gen’s policy approach, read our full <a href="https://www.gendigital.com/media/m5jitl4s/us-ai-policy-recommendations-from-gen_final.pdf" target="_blank" rel="noreferrer noopener">U.S. AI Policy Recommendations</a> and <a href="https://www.gendigital.com/media/5abd44mv/digital-freedom-in-the-eu.pdf" target="_blank" rel="noreferrer noopener">Digital Freedom in the EU</a>.&nbsp;

A framework for responsible U.S. leadership in the age of AI

AI in 2025: Gen's policy recommendations for U.S. leadership 

Security Evangelist at Gen

Cybercriminals often operate unseen in the digital shadows, exploiting unknown vulnerabilities (“zero-days”) to breach systems before patches are available. In Netflix’s new political thriller “Zero Day,” a catastrophic cyberattack strikes the United States, taking down power grids, transportation networks, communications, and even hospital life-support systems <a href="https://www.informationweek.com/cyber-resilience/what-netflix-s-zero-day-got-right-and-wrong-about-cyberattacks#:~:text=power%2C%20transit%2C%20air%20traffic%20control,bottom%20of%20this%20massive%20cyberattack" target="_blank" rel="noreferrer noopener">all at once</a>. This fictional crisis is orchestrated through zero-day vulnerabilities – unknown software flaws that hackers exploit to infiltrate critical infrastructure. The show’s creators have said they want to “bring light to real cybersecurity threats” and warn that <a href="https://www.netflix.com/tudum/articles/zero-day-ending-explained" target="_blank" rel="noreferrer noopener">“we’ve got to do something to protect ourselves before a real zero-day event occurs”</a>. In other words, the high-stakes drama on screen highlights a very real concern off screen: zero-day attacks can and do happen, and everyone – from large enterprises to everyday people – needs to understand this threat.&nbsp;<h2>What is a Zero-Day Vulnerability?&nbsp;</h2>In simple terms, a <a href="https://us.norton.com/blog/emerging-threats/zero-day-exploit" target="_blank" rel="noreferrer noopener">zero-day vulnerability</a> is a security hole in software or hardware that the vendor or developer doesn’t yet know about. Because it’s unknown, there’s no official fix or patch available at the time it’s discovered by attackers. Hackers treasure these flaws since they can exploit them freely until the software maker finds out and rushes to plug the hole. The name “zero-day” itself comes from the idea that developers have had zero days to fix the problem – the attack happens before anyone even knows the vulnerability exists. Once a patch is released, the vulnerability ceases to be “zero-day,” but until then it’s an open door for cybercriminals. In short, a zero-day is an unpatched, unknown weakness – and that’s what makes it so dangerous.&nbsp;A zero-day exploit, on the other hand, is the method or code hackers use to leverage such a vulnerability. When attackers launch a zero-day attack, they are taking advantage of a flaw that no one realizes is there, giving them a stealthy head start. Software makers often only learn of the issue after it’s been used in an attack, at which point they scramble to investigate and release a security update. This window of exposure – from the first malicious use until the patch – is when users are most vulnerable, since traditional <a href="https://www.avast.com/free-antivirus-download" target="_blank" rel="noreferrer noopener">antivirus</a> or defenses might not recognize the new threat. It’s a race against time for defenders to close the gap once a zero-day comes to light.&nbsp;<h2>Real-World Cases of Zero-Day Exploits&nbsp;</h2>Real incidents over the years show just how impactful zero-day exploits can be. One of the most famous examples is Stuxnet (2010) – a sophisticated computer worm that was first discovered in 2010 (but had been active for years prior). Stuxnet targeted Iran’s nuclear facilities and managed to disrupt industrial machines by exploiting multiple zero-day flaws in Siemens industrial control software. It was essentially a cyber weapon, using at least four previously unknown vulnerabilities to spread and sabotage systems. Once Stuxnet was uncovered, those vulnerabilities were urgently patched, but the case became a textbook example of a zero-day attack in action – so much so that it even inspired a documentary called “Zero Days.”&nbsp;Another notorious case was the <a href="https://blog.avast.com/wannacry-update-the-worst-ransomware-outbreak-in-history" target="_blank" rel="noreferrer noopener">WannaCry ransomware outbreak (2017)</a>, which showed how zero-day exploits could wreak havoc on ordinary computer systems worldwide. WannaCry spread rapidly across hundreds of thousands of Windows PCs in May 2017, encrypting files and demanding ransom. It propagated using an exploit called EternalBlue, a tool originally developed (and kept secret) by the U.S. National Security Agency. EternalBlue took advantage of a Windows vulnerability that, at the time of its theft and leak, had no available patch – making it a zero-day in the attackers’ hands. In fact, Microsoft released a security update in March 2017 once they learned of the flaw, but many organizations had not applied it by May. The result: WannaCry tore through unpatched systems, from <a href="https://blog.avast.com/ransomware-that-infected-telefonica-and-nhs-hospitals-is-spreading-aggressively-with-over-50000-attacks-so-far-today" target="_blank" rel="noreferrer noopener">hospitals in the UK</a> to small businesses worldwide. This attack was eventually halted and the vulnerability patched on all supported systems, but not before it caused an estimated billions in damage. WannaCry was a wake-up call that even when fixes exist, delay in applying them can turn a known bug into a personal disaster.&nbsp;Zero-day exploits aren’t just tools of nation-states or large criminal gangs – they have also been used against consumer devices in highly targeted ways. For instance, Apple has repeatedly had to issue emergency iPhone updates to stop “zero-click” spyware attacks. In one campaign uncovered in 2023, attackers used a pair of zero-day vulnerabilities (one in Apple’s image processing and one in iMessage) to silently install the notorious <a href="https://www.avast.com/c-pegasus-spyware" target="_blank" rel="noreferrer noopener">Pegasus</a> spyware on iPhones. This attack, dubbed “BLASTPASS,” didn’t even require the victim to click a link – a malicious image file sent via iMessage could compromise a fully up-to-date phone. Upon discovery, Apple rushed out patches for iOS, macOS, and watchOS to close the holes and protect users. Similarly, a zero-day bug in the popular WebP image format (used by web browsers) was identified in 2023 after being exploited in the wild. The flaw (CVE-2023-4863) allowed attackers to hack devices just by tricking users into loading a booby-trapped image, prompting Google, Microsoft, Apple, and Mozilla to all issue out-of-band updates to their browsers. These cases show that zero-days can hit anyone – whether you’re an activist with a smartphone or a casual web surfer – if you happen to be in the blast radius before the fix arrives.&nbsp;Small and medium businesses have also been victims of zero-day exploits. A dramatic example was the Kaseya VSA supply-chain attack (2021). REvil, a ransomware gang, discovered unknown vulnerabilities in Kaseya’s IT management software (widely used by managed service providers to support many SMB clients). On July 2, 2021 – before Kaseya <a href="https://www.bleepingcomputer.com/news/security/kaseya-patches-vsa-vulnerabilities-used-in-revil-ransomware-attack/#:~:text=utilized%20these%20vulnerabilities%20to%20launch,servers%20and%201%2C500%20business%20customers" target="_blank" rel="noreferrer noopener">could patch the issues</a> – the attackers used those zero-days to breach about 60 MSPs and encrypt data on up to 1,500 customer networks downstream. This one attack effectively held hundreds of small businesses hostage, from local shops to schools, by exploiting a hidden flaw in software they all trusted. Kaseya worked quickly with researchers and law enforcement to develop a patch and help affected companies, but the incident underscored how a zero-day in a single service can cascade into a massive event.&nbsp;These examples are not outliers. Zero-day exploits have become increasingly common in cyberattacks. In fact, in 2023, <a href="https://www.informationweek.com/cyber-resilience/what-netflix-s-zero-day-got-right-and-wrong-about-cyberattacks#:~:text=Zero%20days%2C%20the%20namesake%20of,the%20Cybersecurity%20and%20Infrastructure%20Security" target="_blank" rel="noreferrer noopener">11 of the top 15 most exploited software vulnerabilities were initially abused as zero-days</a>&nbsp; – meaning attackers got the first strike before developers had any chance to fix those flaws. From industrial sabotage to global malware outbreaks, zero-day vulnerabilities have repeatedly been at the center of real-world security crises. Each time, the pattern is similar: a flaw nobody knew existed gets used for harm, and only then does a fix race out to contain the damage.&nbsp;<h2>How Zero-Days Impact Individuals and SMBs&nbsp;</h2>It’s easy to assume that zero-day attacks only matter for governments or big corporations, but that’s a dangerous misconception. While high-profile targets grab headlines, everyday individuals and small businesses are also at risk from zero-day exploits. Many zero-day attacks aren’t specifically aimed at a single high-value victim – instead, attackers may deploy them broadly, hoping to compromise as many devices as possible before the vulnerability is patched. In these cases, regular users can become collateral damage. For example, a zero-day embedded in a malicious website or email attachment doesn’t discriminate between a Fortune 500 company employee or a home user – anyone who visits that site or opens that booby-trapped file could be infected. This kind of tactic can ensnare individual consumers, leading to financial theft and privacy breaches, all from a hidden flaw that users had no way to know about or defend against at the time.&nbsp;For small and medium-sized businesses (SMBs), zero-days are equally perilous. SMBs often rely on off-the-shelf software and devices (operating systems, routers, content management systems, etc.) that can contain unknown vulnerabilities just like those used by larger enterprises. The difference is that smaller organizations typically have fewer IT resources and less sophisticated security measures in place. That makes them attractive targets for cybercriminals, who may use zero-day exploits as a foot in the door. An attacker might unleash a ransomware worm built on a zero-day that tears through any network it can reach – hitting not only big companies but also small businesses that lack advanced defenses. We’ve seen cases where non-targeted zero-day attacks (like self-spreading malware) ended up infecting thousands of computers globally, many of them personal PCs and small business servers that just happened to be vulnerable. Even targeted attacks can spill over; for instance, a zero-day used to attack a software supplier (as in the Kaseya example) can indirectly affect dozens or hundreds of client businesses down the supply chain. The bottom line is that zero-days erase the notion of “too small to be noticed.” If you use technology – whether at home or at work – an unpatched unknown flaw in that technology could be exploited without warning. The impact might be stolen data, locked-up systems, or devices conscripted into a botnet. For an individual, that could mean identity theft or drained bank accounts; for an SMB, it could mean costly downtime, loss of customer trust, or worse. In short, zero-day vulnerabilities are everyone’s problem, not just an issue for tech giants or governments.&nbsp;<h2>Best Practices to Stay Protected&nbsp;</h2>The idea of invisible software flaws might sound scary, but there are many practical steps you can take to reduce your risk from zero-day threats. Cybersecurity is about managing risk and limiting exposure, and even against unknown exploits, the following best practices make a big difference:&nbsp;<ul><li>Keep your devices and software updated. When vendors release security patches (often in routine updates), install them promptly. Many zero-day attacks only succeed until a fix is available – once patched, the threat is neutralized. Enabling automatic updates on your operating system, applications, and phone ensures you get these critical patches as soon as they come down. Regular updates close the holes that attackers might otherwise use. As the WannaCry example showed, delaying patches can leave you vulnerable to an exploit that’s already been solved. </li><li>Use reputable security software. A good security solution can sometimes detect suspicious behavior even from new, unknown threats. Modern security software doesn’t rely solely on known virus signatures; it also looks at what programs are doing (heuristics and behavior analysis). While it may not catch every zero-day, it adds an extra layer of defense that could stop or contain an attack. Make sure your security software stays up to date so it can recognize the latest threats. Additionally, consider using a firewall (many operating systems include one by default) to block unauthorized connections, which can help limit the damage if some malware does get in. </li><li>Practice good cybersecurity hygiene. Many zero-day exploits still require some action to reach you – for instance, convincing you to open a file, click a link, or plug in an infected device. By staying vigilant with your online habits, you can avoid falling into those traps. This means: Don’t download attachments or software from untrusted or unknown sources. Be wary of unexpected emails or messages, especially those urging you to run macros or enable content in documents. Use strong, unique passwords (and a password manager) so that if one account is compromised it doesn’t unlock everything. And always enable 2 Factor Authentication (2FA) whenever is possible. Good habits act like a safety net, catching a lot of threats before they can ever execute, whether zero-day or not. </li><li>Beware of phishing – think before you click. <a href="https://www.avast.com/c-phishing" target="_blank" rel="noreferrer noopener">Phishing</a> is one of the most common ways attackers deliver exploits. A convincing scam email might lure you to a malicious website that quietly uses a zero-day to infect your computer, or get you to install a “document” that is actually <a href="https://us.norton.com/blog/emerging-threats/malware" target="_blank" rel="noreferrer noopener">malware</a>. Always examine emails and texts critically: check the sender’s address, look for signs of hoaxes or urgency, and verify via other means if you get an odd request (like a supplier asking you to install an update or a “bank” emailing for login info). When in doubt, don’t click the link. This caution helps because even if a zero-day is involved, it often needs that initial hook to get to you. </li><li>Enable strong security settings and isolate where possible. For businesses, network segmentation (keeping critical systems separate) and least-privilege access (limiting user rights) can contain the blast radius of a zero-day attack. For individuals at home, simply enabling built-in security features can help – for example, make sure your web browser’s security settings are on default or high, use an ad-blocker or script blocker if you’re tech-savvy (to reduce the chance of encountering malicious scripts), and turn off any software features you don’t need that could introduce risk. If you own IoT devices (smart cameras, etc.), keep their firmware updated and avoid exposing them directly to the internet. Essentially, remove unnecessary targets and entry points from your environment. </li><li>Backup your data regularly. This won’t prevent an attack, but it can save you if the worst happens. If a zero-day powered <a href="https://www.avg.com/en/signal/what-is-ransomware" target="_blank" rel="noreferrer noopener">ransomware</a> or wiper malware strikes, having recent backups of your important files (and storing them offline or in a secure cloud service) means you can restore your system without paying ransom or losing everything. Test your backups occasionally to ensure they work. It’s a last-resort measure, but an essential part of resilience.&nbsp;</li></ul>By following these practices, individuals and SMBs can significantly strengthen their defenses. You’re essentially making yourself a harder target and mitigating the fallout if something does slip by. No single tip is foolproof, especially against a brand-new exploit, but together these steps build a layered security posture. Think of it like home security: you lock the doors, install an alarm, and stay alert for suspicious activity – those precautions still matter even if the burglar has a new kind of lockpick. The same principle applies in cybersecurity.&nbsp;<h2>Conclusion&nbsp;</h2>Zero-day vulnerabilities might sound like the stuff of thrillers – and indeed, “Zero Day” on Netflix dramatizes an extreme scenario – but the core threat is very real. In the real world, we won’t (hopefully) see an entire nation knocked offline in an instant, but we do see stealthy hacks, data breaches, and malware outbreaks powered by unknown flaws. The key lesson is that awareness and preparedness make a difference. You may not be able to prevent a determined attacker from discovering the next zero-day, but you can control how ready you are to respond. Keeping systems up to date, practicing smart online behavior, and maintaining good security basics will tilt the odds in your favor. For businesses, investing in proactive security monitoring and employee training can catch anomalies that hint at zero-day activity, buying valuable time to react. For individuals, staying informed (like knowing when there’s a critical update to install) and using the tools at your disposal will greatly reduce the chances of being caught off-guard.&nbsp;In the end, zero-days remind us that no software is perfectly secure – there may always be a hidden crack. But by staying vigilant and proactive, we can shrink the window of opportunity for attackers. The fictional crisis in “Zero Day” makes for gripping entertainment; our job in reality is to ensure such disasters remain fiction. By applying the best practices and encouraging a culture of cybersecurity awareness, we can each do our part to protect ourselves and our businesses from the unseen threats lurking out there. Be aware, be prepared, and stay updated – that’s the real-world playbook to defend against zero-day vulnerabilities. Your future self (and your data) will thank you for it.&nbsp;

Netflix’s 'Zero Day' may be fiction, but the threat is real — here’s what you need to know about zero-day vulnerabilities and how to protect yourself before a real-world cyber crisis strikes.

Zero-day Vulnerabilities: The real threat behind Netflix’s “Zero Day” 

Today, technology is deeply woven into our daily lives and is advancing at an extraordinary pace. All of the progress in tech, however, comes with an equal measure of risk. In 2024, large-scale data breaches dominated headlines, while AI pushed the boundaries of reality, reshaping how we work, create and interact with technology.&nbsp;With all of this, 2025 is set to be a year of profound transformation in the cybersecurity landscape.At Gen, we don’t wait to respond to change; we anticipate it. Our experts are looking ahead to the trends that will redefine the industry while harnessing AI for good to ensure safety and trust remain at the forefront. Here’s what we see on the horizon. &nbsp;<h2>AI Will Blur the Line Between Reality and Fiction</h2>Artificial intelligence isn’t just a powerful tool — it’s becoming a force that reshapes how we perceive the world. But, as it becomes better, smarter, more realistic and accessible, AI will increasingly blur truth and deception, making it more difficult than ever to decipher what’s real.<h3>Hyper-Personalized Realities</h3>AI-powered Large Language Models (think ChatGPT, Gemini, etc.) are advancing at an incredibly fast pace, offering hyper-personalized interactions that could alter perceptions and decision-making.&nbsp;Imagine a world where AI doesn’t just answer your questions but anticipates your&nbsp;needs.But here’s the trade-off: to unlock this seamless, personal assistant experience, people are handing over everything to AI, including calendars, messages and apps. Hyper-personalization comes with a cost: the erosion of privacy and autonomy. Are you willing to lose privacy for convenience?&nbsp;This raises critical ethical questions: Who controls the narratives AI presents? How do we safeguard independent thought in a world increasingly influenced by machine intelligence?We believe that AI-driven solutions should ensure transparency and accountability, giving individuals tools to navigate these hyper-realities without losing sight of two key things: truth and trust.<h3>AI in Sensitive Roles</h3>We suspect that AI will also infiltrate areas once considered uniquely human, such as parenting and education. Imagine an AI tool stepping in to mentor a child, help with homework, or even act as a digital babysitter. While it offers unlimited time and patience, it challenges the boundaries of what roles and responsibilities should be left to humans.The implications are profound:<ul><li>Redefining Relationships:&nbsp;AI is poised to transform the family, from parenting and pets to companionship, by taking over routine tasks like homework help and schedule management or even emotional connections. Bonding moments – like bedtime stories or daily conversations – slip away. With robotics bringing AI into the physical world, the stakes grow higher: robotic pets replacing real ones, AI nannies soothing children and robot companions filling emotional gaps.&nbsp;</li><li>Shaping Young Minds:&nbsp;As AI becomes more engaging, children may form stronger bonds with machines than caregivers, shifting family dynamics. While AI offers personalized guidance and companionship, overdependence could limit kids’ social and emotional growth, making real relationships harder to navigate. Families must balance the benefits of AI with the need for genuine human connection.</li></ul>The broader societal question is this: how much influence will we allow AI to have in shaping the next generation? &nbsp;<h2>The Deepfake Revolution</h2>Deepfakes — AI-generated media designed to mimic real people — are becoming so sophisticated that even experts may struggle to distinguish truth from fabrication. In 2025 we expect increases in:<ul><li>Personal Attacks:&nbsp;Scorned individuals could use deepfakes to harass or extort others, not just by targeting the individual directly but by creating convincing fake media of family members or friends. These fabricated videos or audio clips could be used to manipulate victims emotionally, spread false rumors, or even strain personal relationships, amplifying the psychological toll of such attacks.</li><li>Political Manipulation: Governments and bad actors may leverage deepfakes to divide, spread disinformation and destabilize societies. Imagine a fake speech from a world leader announcing false policies — such content could ignite panic, erode trust in institutions and manipulate public opinion. Deepfakes could also target journalists or political opponents, fabricating damaging scandals or discrediting reliable sources, undermining public confidence in the media. This highlights the need for a system where authenticity is non-negotiable -- where digital signatures could become the standard to restore trust.&nbsp;</li><li>Financial Fraud: Deepfake videos or audio clips of executives could be used to impersonate authority figures, convince employees to transfer funds, reveal sensitive company information or approve unauthorized transactions. For instance, a Business Communication Compromise (BCC) can happen when a convincing video of a CEO instructing a financial officer to expedite a payment bypasses typical safeguards, due to its perceived authenticity and established trust. The threat doesn’t end with internal fraud; deepfakes could also target investors or clients, undermining trust in corporate communications and causing long-term reputational damage. These attacks could ripple through supply chains and financial systems, creating chaos on an unprecedented scale.&nbsp;</li></ul><h2>Data Theft: The Multi-Faceted Threat to Identity</h2>The digital world runs on data and cybercriminals are mastering the art of leveraging it as a multifaceted threat to target individuals, organizations and societies alike.<h3>Comprehensive Profiles for Targeted Scams</h3>Large-scale breaches and public data sources provide criminals with the raw materials to build highly detailed profiles of their victims. &nbsp;This goes beyond just a first and last name or email address – criminals piece together “who” their targets really are. They know where you work, what you do for a living, your hobbies and habits. With this intimate understanding and detailed information, they can:<ul><li>Craft hyper-personalized phishing attempts</li><li>Launch convincing extortion schemes</li><li>Impersonate trusted services to exploit victims’ trust</li></ul>For example, attackers using images of victims’ homes during sextortion attempts demonstrate how cybercriminals are evolving their psychological manipulation tactics.<h3>Forgotten Logins, Fresh Targets: How Old Accounts Open New Doors for Hackers</h3>The average individual has hundreds of online accounts. Besides the active ones, there’s also a plethora of aged accounts that are long gone, such as old email addresses from Hotmail or social accounts like MySpace. These accounts can be forgotten or abandoned. Combined with the low adoption of multi-factor authentication (MFA) and the widespread practice of password reuse, these neglected accounts become gateways for attackers. Cybercriminals can pivot from one breached account to another, collecting more personal information with each step and enabling even more precise and damaging attacks.<h2>Scams Enter the Era of Hyper-Personalization</h2>2025 marks the dawn of hyper-personalized scams. Cybercriminals no longer rely on broad attacks and wait for someone to take the bait. Instead, they use meticulously crafted profiles built from breached data, public records or dark web scraps to tailor their attacks. They’re not random. They’re designed to feel personal, disarming and hard to resist because they rely on your specific data – your own identity.&nbsp;These scams won’t feel like scams. They’ll feel real. Here are some examples:<ul><li>Tailored Manipulation: Imagine receiving a message referencing a conversation you had last week or mimicking a friend’s tone perfectly. Attackers will use personal details to craft scams so convincing they disarm even the most vigilant.</li><li>Psychological Exploits: Cognitive biases like urgency, trust, and fear will be turned against us. Emotional triggers — like a fabricated crisis involving a loved one — will make hesitation feel impossible.</li><li>Platform Integration: Social media and messaging apps will become prime battlegrounds, with scams that look indistinguishable from legitimate interactions.</li></ul>This is the reality of where scams are heading. The lines between genuine and fraudulent will blur, forcing us to rethink how we defend against threats. Technology together with awareness, education, and proactive resilience will be critical to protecting ourselves and our communities in this new era of deception.<h2>Financial Theft: The New Frontier of Exploitation</h2>The war on financial security is escalating, with attackers blurring the boundaries between digital fraud and physical coercion. 2025 will see financial theft reach unprecedented levels, fueled by innovation in both technology and tactics.<h3>A New Breed of Digital Fraud</h3>Cybercriminals are wielding sophisticated tools to undermine trust and exploit vulnerabilities:<ul><li>Deepfake Scams: Picture a video of a trusted leader or celebrity endorsing a high-return investment. These convincing forgeries will draw in victims by the thousands, fueling a new wave of financial deception.</li><li>Voice-Cloned Lies: Fraudsters will impersonate government officials, announcing fake income distributions or policy updates, driving victims to malicious platforms.</li><li>Crypto Scams on Steroids: From fake giveaways to fabricated trading platforms, cryptocurrency will remain a prime target for attackers hungry for unregulated, high-reward opportunities.</li></ul><h3>Where Cybercrime Gets Personal&nbsp;</h3>Financial theft is no longer confined to just the digital world. Now, it feels more and more personal. Spyware and malware will silently monitor devices, giving attackers backdoor access to banking apps and bypassing traditional security measures.This evolving threat challenges us to rethink financial security. It’s not just about protecting devices; it’s about protecting the people behind them. The only way forward is bold innovation, collective vigilance, and an unwavering commitment to staying ahead of those who prey on trust.<h2>Our Vision for the Future</h2>The challenges of 2025 demand bold action, innovative thinking and a commitment to protecting what matters most: trust. And while threats are undoubtedly getting more complex, the future is bright, and technology will play a pivotal role in making the world safer, smarter and more secure. At Gen, we’re not just observing these challenges; we’re staying ahead of them. With products like Norton Genie for scam detection, Norton 360 Deluxe and Avast One for all-in-one protection, and LifeLock to restore what’s lost, we’re safeguarding your digital world and Powering Digital Freedom.While technology like AI holds the promise of a more secure and innovative future, uncertainty often stands in the way of progress. This is where we see opportunity: to educate, empower and lead. By helping others understand and embrace AI responsibly, we can ensure it becomes a force for good — strengthening our defenses while driving innovation.Make no mistake — new technology breeds new risks. However, it also serves as a powerful catalyst for positive change, paving the way to a safer and brighter future.With every new tool, every evolving threat, and every transformative idea, we’re shaping a future where innovation and security go hand in hand.

Exploring Tomorrow’s Threats, Today’s Solutions: Predictions for the Cybersecurity Landscape in 2025

Predictions 2025: Navigating the Future of Cybersecurity

As technology evolves, so does our digital landscape. Many of us have witnessed this transformation firsthand; we can still remember the sound of dial-up internet and are also part of today's "always-on" culture. Most of the world is constantly connected, even expecting instant responses via text, DM or Microsoft Teams. However, increased connectivity comes with its own challenges. Scams, once confined to traditional, more obvious methods, have adapted to leverage some of the latest technology for more sophisticated and clever schemes unlike ever before.&nbsp;When it comes to election security, the first thought often centers around the risk of hacking voting systems or machines. Artificial intelligence (AI) technology makes it easier than ever to manipulate public opinion without needing to breach highly secure systems. As AI continues to advance, its potential to affect nearly every facet of our daily lives—including news, careers, trends, social media and elections—cannot be underestimated.A Global Outlook&nbsp;&nbsp;2024 has deemed itself the ultimate election year with 64 countries plus the European Union all headed to the polls this year. That means there’s even more at stake for the vast majority of people who can and will participate in free and fair elections in their country.&nbsp;We’ve already seen an&nbsp;<a href="https://www.ic3.gov/Media/News/2024/240709.pdf">FBI report</a> on state-sponsored media leveraging software to manipulate public opinion through social networks.&nbsp;

<h2>The Influence of AI  &nbsp;</h2>AI seems to touch every aspect of our digital existence today and is spreading through personalized advertising algorithms and even for our personal content curation. (Admit, you can hardly scroll on LinkedIn without an ad or a tip on how to use AI.)  &nbsp;One <a href="https://vm.tiktok.com/ZGeVGdeLc/">deepfake video</a> features a journalist alongside candidates from six different Spanish political parties. Although this video is intended for fun, as indicated by its hashtags, it highlights both the potential and believability of AI technology.&nbsp;&nbsp;

However, AI's impact extends beyond convenience and efficiency; it also poses significant risks. For instance, AI algorithms are already being utilized to manipulate elections by spreading misinformation and propaganda; be it through automated bots, curated images or deepfake videos. We see it on social media constantly. And the real problem is determining real versus fake. With such convincing technology, AI has the potential to erode public trust and undermine democratic processes. &nbsp;<h2>Proactive Measures to Combat Misinformation&nbsp;</h2>As we approach another election year, the issue of <a href="https://www.gendigital.com/blog/news/innovation/ai-disinformation">AI misinformation</a>, particularly deepfakes, has become a pressing concern. Although the U.S. federal government has yet to take action against deepfakes, there are states that are taking measures into their own hands. One U.S. state, Colorado, has proactively implemented measures to combat the spread of these deceptive technologies. The state now mandates that campaign ads featuring audio, video, and other AI-generated content include prominent disclosures.&nbsp;The law treats deepfakes — fake videos or images created by AI showing people doing or saying things they didn't actually do — as if the people were being forced to act against their will. It highlights the risk of candidates’ reputations being "irreparably tainted" by fabricated messages and requires "clear and conspicuous" disclosures when AI-generated content is used to portray candidates within 60 days of a primary election or 90 days of a general election.&nbsp;The new law empowers individuals to file administrative complaints with the Secretary of State’s Office for election law violations and gives candidates the ability to sue over the dissemination of deepfakes. Colorado’s proactive stance sets a precedent for safeguarding the integrity of the electoral process and protecting voters from being misled by manipulated content, ensuring a fair and transparent election.&nbsp;<h2>Elections Under Siege &nbsp;</h2>How would AI impact our elections? Well, consider this: elections have already faced cyberattacks in the past through digital channels. &nbsp;Historical data, including analyses of past election years and telemetry from significant events, show the severity of the issue and emphasize the need for proactive measures to safeguard electoral integrity. &nbsp;We don’t have to look too far to find evidence. Case in point: the Polish Parliamentary Elections of 2023. Just two days before the elections, Polish media outlets released a video depicting a police intervention at one of the three polling stations in Poland. The intervention was prompted by an anonymous bomb threat received before the scheduled voting day. However, accounts associated with the Russian FIMI infosphere quickly seized upon this video, reframing its context to suggest that explosions had already taken place at the polling station. The incident exemplifies a calculated effort to stoke fear surrounding the purported bomb threats directed at polling stations, potentially discouraging voter turnout. &nbsp;Recently, an AI-generated version of Indian Prime Minister Narendra Modi was spread on WhatsApp.  &nbsp;In the United Kingdom, the state of British healthcare and the National Health Service was a hot topic during the pre-election period. The urgency of this issue has been exploited by cybercriminals, leading to a 208% increase in URL-based election attacks in 2024 compared to 2023. These attackers have primarily targeted healthcare topics to deceive and manipulate voters.&nbsp;Similarly, in Germany, we have observed an alarming increase in blocked attacks on URLs with politically controversial content. These attacks occurred in two significant waves: the first at the turn of the year and the second from April up to the election week. From the beginning of the pre-election period in December 2023 to the end of May 2024, the monthly number of blocked attacks surged by 233%. When comparing the entire pre-election period of the last six months to the same months of the previous year, there is an astounding year-on-year increase of nearly 5000% in blocked attacks. These attacks, originating from politically charged websites, include malicious malvertising, phishing, and push notifications designed to install malware or steal sensitive personal data.&nbsp;The 2024 European elections have seen a dramatic rise in politically based cyberattacks on German users, with an increase of almost 5000%. Cybercriminals have employed various tactics, including fake ads, phishing, and dangerous push notifications, to exploit politically charged content. Keywords and names were frequently used as clickbait to lure victims. This significant surge in political-based attacks underscores the need for robust cybersecurity measures to protect the integrity of the electoral process and ensure a safe digital environment for voters.&nbsp;&nbsp;Below are a few examples of elections that have faced some form of cyberattack: &nbsp;

<h3>Types of Election Scams &nbsp;</h3>A myriad of election scams exists, ranging from seemingly innocuous political donation solicitations to sophisticated phishing attempts targeting voter registration databases. AI-driven scams exacerbate the threat landscape, as malicious actors leverage advanced algorithms to create videos, text and even email scams designed to sway public opinion and manipulate electoral outcomes. But AI isn’t the only threat to elections.&nbsp;Potential threats to elections: &nbsp;<ul><li>Tampering with registrations, votes &nbsp;</li><li>Committing voter registration fraud&nbsp;</li><li>Hacking candidate laptops, email, social accounts &nbsp;</li><li>Hacking of campaign websites &nbsp;</li><li>Leaking of confidential info &nbsp;</li><li>Hacking government servers, comms networks,  &nbsp;</li><li>Spreading misinformation on the election process, parties, candidates or results &nbsp;</li><li>Altering results &nbsp;</li><li>Hacking internal systems used by media or press  &nbsp;</li></ul>Here's what scams could look like to voters: &nbsp;<ul><li>Political donation scams &nbsp;</li><li>Fake survey or polls &nbsp;</li><li>Voter registration phishing  &nbsp;</li><li>Scam texts &nbsp;</li><li>Social media posts&nbsp;</li><li>Fake data leaks&nbsp;</li><li>Misinformation campaigns&nbsp;</li></ul><h3>Spotting the Scams&nbsp;&nbsp;</h3>As scams become increasingly sophisticated, it is important to equip individuals with the necessary tools and knowledge to identify and mitigate any possible threat.  &nbsp;

<h2>Looking Towards the Future &nbsp;</h2>Emerging technologies, such as deepfakes, present both opportunities and risks. (Like all technology, it’s good when put in responsible hands.) Though these tools can be exploited maliciously, they also hold the potential for positive applications.    &nbsp;Here, we delineate both the benefits and risks stemming from AI involvement in the electoral process. &nbsp;Benefits of AI include: &nbsp;<ul><li>Enhanced security: AI presents an opportunity to reinforce cybersecurity measures. &nbsp;</li><li>Voter engagement: Leveraging AI-driven chatbots and virtual assistants can foster enhanced voter engagement by facilitating communication, ensuring broader accessibility. &nbsp;</li><li>Data analysis: AI algorithms offer the capability to sift through vast datasets, uncovering valuable insights into voter trends, preferences, and potential irregularities.  &nbsp;</li></ul> Technological risks associated with AI include: &nbsp;<ul><li>Security vulnerabilities: AI systems, datasets, and models are not immune to cyberattacks.  &nbsp;</li><li>Bias and Equity Concerns: AI systems have the potential to inherit biases from their training data, potentially leading to unfair or discriminatory outcomes in voter registration, candidate selection, or data analysis processes. &nbsp;</li><li>AI-driven cyberattacks: AI-powered data mining allows for targeted and sophisticated social engineering attacks, enabling threat actors to identify potential targets and vulnerabilities more effectively.  &nbsp;</li><li>Manipulation of AI-generated Content: Synthetic media, such as AI-generated images, videos, and text, can be weaponized to spread disinformation or manipulate public opinion.  &nbsp;</li></ul>

AI has become so widespread and accessible, that it is certainly a power that must be kept in the rightful hands and with a watchful eye.   &nbsp;<h3>Our Commitment &nbsp;</h3>Our commitment to the ethical use of technology and our mission of powering digital freedom has led us to sign <a href="https://www.aielectionsaccord.com/">the tech accord</a> "AI for Good." By aligning ourselves with this initiative, we emphasize our dedication to leveraging AI for positive impact and ethical practices. We recognize the transformative potential of AI in addressing societal challenges, including combating scams and safeguarding online communities.  &nbsp;We’ve already started using AI for good, with products like Norton Genie – an AI-powered tool used to detect scams via text, email and social media. We’ll continue to learn and leverage the power and potential of AI responsibly to promote a safer and more inclusive digital environment for all.&nbsp;

During a Worldwide Election Year, Understand and Navigate the Power and Possibilities of AI  

Seeing Isn’t Believing – Tackling AI, Misinformation and Its Impact on an Election Year 

The new frontier of cyberthreats: how nation-state groups are targeting consumers &nbsp;In recent cybersecurity trends, we've observed a troubling shift: sophisticated attacks once aimed solely at governments and enterprises are now targeting everyday consumers. Nation-state groups, traditionally known for espionage and cyber warfare, are not just targeting governments and large enterprises anymore; they're also setting their sights on everyday consumers like you, increasingly using scams to infiltrate personal devices. &nbsp; &nbsp;The rise of nation state scams on consumers &nbsp;Typically, we think of nation-state attacks as sophisticated, covert operations aimed at siphoning secrets from rival governments or multinational corporations. However, these powerful adversaries have begun exploiting the same advanced tactics to deploy scams against ordinary people. The distinction between advanced persistent threats (APTs) and consumer-targeting scams is blurring. These threats now coexist, leveraging sophisticated techniques to breach consumer defenses. &nbsp; &nbsp;Advanced threats in your inbox &nbsp;Imagine receiving an email that looks like a job offer from a reputable company. It's actually a sophisticated scam, utilizing methods that were once the hallmark of attacks against governments. These scams can bypass standard antivirus software, tricking you into compromising your personal security without even realizing it. And this is already happening.  &nbsp;The Lazarus Group, also known as Hidden Cobra, is a notorious cybercriminal organization believed to be backed by North Korea. It has been active since at least 2009 and is known for its highly sophisticated and destructive cyberattacks, primarily aimed at espionage, sabotage, and financial gain. The group has been linked to a variety of high-profile incidents globally, indicating the scale and global reach of its operations. &nbsp;We recently uncovered (<a href="https://decoded.avast.io/luiginocamastra/from-byovd-to-a-0-day-unveiling-advanced-exploits-in-cyber-recruiting-scams/">read here our detailed technical analysis of the attack</a>) an attack carried out by Lazarus targeting specific individuals. The victims are unlike previous attacks from this group, such as the Sony Pictures Hack in 2014 or the Bangladesh Bank heist in 2016. &nbsp;

Tomorrow's threats, today's concerns &nbsp;It's a sobering thought: the elite cyber threats of today are the consumer scams of tomorrow. Techniques developed for espionage are trickling down to the consumer level, bringing with them risks that were once thought to be faced only by the most secure facilities in the world. &nbsp;The cybersecurity landscape is continually evolving. What was once an isolated incident of advanced malware in a corporate system can now turn into widespread consumer scams. These threats evolve, learning from each interaction, which makes them increasingly difficult to detect and defend against. &nbsp; &nbsp;Conclusion &nbsp;Understanding this shift in target from the high towers of government to the personal devices in our pockets is crucial. As consumers, staying informed about the latest threats and adopting robust cybersecurity measures are our best defense. Remember, in the digital age, anyone can be a target. Invest in comprehensive security solutions that keep pace with these evolving threats. Regularly update your software, be skeptical of unsolicited communications, and consider consulting with cybersecurity experts to ensure your digital life is secure. &nbsp;

The Evolution of Cyberthreats From Global Espionage to Personal Intrusion

The new frontier of cyberthreats: how nation-state groups are targeting consumers  

"Scamverse." This concept, much like the multifaceted realms of the "Spiderverse" in the world of comic books, represents the complex and interconnected web of scams that dominate today's digital threats. As a cybersecurity expert with 25 years of experience, I have witnessed the evolution of these threats, from the early days of viruses and Trojans to the sophisticated scam-centric dangers we face today.&nbsp;<h2>The Evolution of Cyberthreats&nbsp;</h2>Historically, the digital world was plagued primarily by viruses and Trojans. These were malicious programs designed to disrupt, damage, or gain unauthorized access to computer systems. With the popularization of the internet, a new breed of threats emerged, notably worms. These self-replicating programs could spread across networks without human intervention, marking a significant shift in the nature of cyberthreats.&nbsp;However, as technology advanced and the internet became increasingly integral to daily life, cybercriminals adapted and evolved. The emergence of phishing scams, botnets, and ransomware signaled a shift from mere disruption to focused, profit-driven criminal activity. Phishing scams, in particular, demonstrated the opportunity to deceive or trick individuals into divulging sensitive information. We call it social engineering.&nbsp;<h2>The Rise of the Scamverse&nbsp;</h2>The term "Scamverse" describes the current era, where the majority of cyberthreats involve some form of scam. This doesn't imply that all threats originate as scams, but it highlights the reality that most people are more likely to encounter a scam than any other type of cyberthreat. Scams in the digital age are diverse and sophisticated, ranging from email phishing and fake websites to social media scams and fraudulent online marketplaces.&nbsp;In this scam-centric landscape, the primary weapon of cybercriminals is deception. Unlike traditional malware, which relies on exploiting technical vulnerabilities, scams exploit human vulnerabilities — trust, ignorance and fear. This makes them particularly insidious and difficult to combat, as they hinge on manipulating human psychology rather than breaching digital defenses.&nbsp;<h3>Characteristics of the Scamverse&nbsp;</h3><ol><li>Social Engineering: The cornerstone of most scams is social engineering, the art of manipulating people into performing actions or divulging confidential information. Phishing emails, for instance, often masquerade as legitimate communications from trusted entities to trick individuals into clicking on malicious links or sharing sensitive data.&nbsp;</li><li>Financial Motivation: The primary objective of scams is financial gain. Whether through ransomware demands, the theft of financial information or fraudulent transactions, the end goal is invariably monetary.&nbsp;</li><li>Targeted Attacks: Scams are increasingly personalized and targeted. Cybercriminals often gather information about their victims to craft more convincing and effective scams, increasing the likelihood of success.&nbsp;</li><li>Exploitation of Current Events: Scammers are adept at exploiting current events, such as global pandemics or political upheavals, to create timely and relevant scam campaigns that prey on people's fears and uncertainties.&nbsp;</li></ol><h3>Navigating the Scamverse&nbsp;</h3>Staying protected in the Scamverse requires vigilance and education. Traditional cybersecurity measures like antivirus software and firewalls remain essential, but they must be supplemented with awareness and skepticism. People should educate themselves about common scam tactics and question the legitimacy of unsolicited communications. Organizations should invest in regular training to keep employees informed about the latest scam techniques.&nbsp;Additionally, solutions like email filtering, web reputation services and behavioral analytics can help identify and block scam-related activities. Collaborative efforts between cybersecurity firms, law enforcement and regulatory bodies are also crucial in dismantling large-scale scam operations.&nbsp;<h2>The Dual Role of AI in the Scamverse&nbsp;</h2>Artificial Intelligence (AI) plays a paradoxical role in the Scamverse, acting as both a facilitator for cybercriminals and a powerful tool in the cybersecurity arsenal. This dual nature of AI in the realm of cyber threats underscores the ongoing arms race between attackers and defenders.&nbsp;<h3>AI as a Tool for Cybercriminals&nbsp;</h3>AI, as a tool for cybercriminals, significantly enhances the sophistication, reach, and effectiveness of scams. By leveraging natural language processing and machine learning, AI can craft highly convincing phishing emails and even use deepfake techniques in video and audio, making these scams increasingly challenging to distinguish from legitimate communications. Furthermore, AI facilitates automated social engineering, enabling bots to conduct personalized and persuasive interactions with potential victims on social media or via email. Additionally, AI algorithms are adept at harvesting and analyzing vast amounts of data to identify potential targets, tailoring scams to individuals' online behavior and striking at the most opportune moments, thereby increasing the success rate of these malicious attacks.&nbsp;<ol><li>As a tool for cybercriminals, AI significantly enhances the sophistication, reach and effectiveness of scams. By leveraging natural language processing and machine learning, AI can craft highly convincing phishing emails and even use deepfake techniques in video and audio, making these scams increasingly challenging to distinguish from legitimate communications. Furthermore, AI facilitates automated social engineering, enabling bots to conduct personalized and persuasive interactions with potential victims on social media or via email. Additionally, AI algorithms are adept at harvesting and analyzing vast amounts of data to identify potential targets, tailoring scams to individuals' online behavior and striking at the most opportune moments, thereby increasing the success rate of these malicious attacks.&nbsp;</li></ol><h3>AI as a Defense Mechanism&nbsp;</h3>Conversely, AI is a formidable tool in combating the Scamverse, offering several advantages in detecting and preventing scams.&nbsp;<ol><li>Continuous Adaptation: Perhaps the most significant advantage of AI in cybersecurity is its ability to continuously learn and adapt. For example, with <a href="https://us.norton.com/products/genie-scam-detector">Norton Genie</a>, as new types of scams emerge, the AI can be trained with the latest data points to recognize them. It analyzes messages, websites, social media posts and more, alerting you if it’s a potential scam and then giving you advice on the best next steps. &nbsp;</li><li>Anomaly Detection: AI systems can analyze patterns in data to identify anomalies that may indicate scam activities. These systems can detect unusual patterns in network traffic, email communications or online transactions that human analysts might miss.&nbsp;</li><li>Phishing Detection: AI can be trained to recognize the subtle signs of phishing attempts, such as slight deviations in email formatting, sender information or the language used. This can help in filtering out phishing emails before they reach the intended recipient.&nbsp;</li><li>Behavioral Analysis: AI can monitor user behavior to detect signs of compromise or scam interactions. For example, sudden changes in the way a user interacts with a system or unusual financial transactions can trigger alerts.&nbsp;</li></ol><h2>The Future Intersection of AI and Scamverse&nbsp;</h2>Looking forward, the intersection of AI and the Scamverse is poised to become increasingly complex. As AI technologies become more advanced, we can expect both the sophistication of scams and the effectiveness of our defenses to escalate. This dynamic landscape will require constant vigilance, innovation and collaboration, among cybersecurity professionals, technology developers and policymakers.&nbsp;<a href="https://www.gendigital.com/blog/news/innovation/ai-based-cyberthreats">AI's role</a> in the Scamverse is a double-edged sword. While it empowers cybercriminals with advanced tools to execute scams, it also equips cybersecurity experts with potent mechanisms to thwart these threats. The future of cybersecurity in the Scamverse will undoubtedly be shaped by the ongoing development and deployment of AI technologies, emphasizing the need for cutting-edge research and ethical AI practices in the field.&nbsp;Conclusion&nbsp;The Scamverse represents the current and perhaps most challenging era in the evolution of cyberthreats. Its reliance on social engineering makes it uniquely dangerous, as it exploits human nature itself. Navigating this landscape requires a combination of technological solutions, education, and a healthy dose of skepticism. As we continue to adapt to these challenges, one thing is clear: the battle against the Scamverse will be as much about changing human behavior as it is about advancing technological defenses.&nbsp;

Leadership Perspectives

Why Your Phone Is a Target for Scammers

Fighting AI-Powered Scams: How Gen Is Working with U.S. Lawmakers to Protect Consumers

AI-generated personas: Meet Gen cyber safety CTO's digital twin

Can love survive AI?

The future of AI is personal and it starts with trust

Love in the age of algorithms

AI in 2025: Gen's policy recommendations for U.S. leadership

Zero-day Vulnerabilities: The real threat behind Netflix’s “Zero Day”

Predictions 2025: Navigating the Future of Cybersecurity

Seeing Isn’t Believing – Tackling AI, Misinformation and Its Impact on an Election Year

The new frontier of cyberthreats: how nation-state groups are targeting consumers

The Scamverse: Navigating the New Frontiers of Cyberthreats

Love in the age of algorithms 

The new frontier of cyberthreats: how nation-state groups are targeting consumers 