Cybercriminals always find new ways to scam you, whether it’s mimicking a government agency, creating a fake website or delivering malware disguised as a software update. Just when you think you’ve seen it all, they come up with a new trick.

This time, the FBI has issued an alert: Hackers are using a “time-traveling” technique to bypass your device’s security measures. No, we’re not talking about actual time travel (though wouldn’t that be something?). This is a sophisticated cyberattack where hackers manipulate a system’s internal clock to sneak past security defenses.

Join The FREE “CyberGuy Report”: Get my expert tech tips, critical security alerts and exclusive deals, plus instant access to my free “Ultimate Scam Survival Guide” when you sign up.

A man working on his laptops (Kurt “CyberGuy” Knutsson)

What you need to know

The concept of “time-traveling hackers” refers not to literal time travel but to a sophisticated cyberattack technique where hackers manipulate a system’s internal clock to bypass security measures. This attack is reportedly tied to the Medusa ransomware gang.

In this type of attack, hackers exploit expired security certificates by altering the system date on a targeted device to a time when those certificates were still valid. For example, a security certificate that expired in, say, 2020 could be made usable again if the system’s clock is set back to 2019. This allows malicious software signed with these outdated certificates to be recognized as legitimate by the system, effectively “traveling back in time” from a security perspective. 

This technique was notably used in the Medusa ransomware attacks, which targeted critical infrastructure and prompted an FBI cybersecurity advisory (AA25-071A) earlier in 2025. The campaign has affected over 300 critical infrastructure targets. The attackers combined this method with social engineering and exploited unpatched vulnerabilities, amplifying the threat. 

The FBI has warned that such attacks pose a significant risk, as they can disable modern security protections like Windows Defender by tricking the system into accepting outdated drivers or software.

A woman working on her laptop and scrolling on her phone (Kurt “CyberGuy” Knutsson)

DOUBLECLICKJACKING HACK TURNS DOUBLE-CLICKS INTO ACCOUNT TAKEOVERS

What does the FBI recommend?

Traditional search and rescue tools, like rigid robots and specialized cameras, often struggle in disaster zones. Cameras follow only straight paths, forcing teams to cut through debris just to see further in. Rigid robots are vulnerable in tight, unstable spaces and expensive to repair when damaged. And manual probing is slow, exhausting and risks responder safety.

A man working on his laptop (Kurt “CyberGuy” Knutsson)

RELENTLESS HACKERS ABANDON WINDOWS TO TARGET YOUR APPLE ID

5 ways to stay safe from Medusa malware

1) Use strong antivirus software: A strong antivirus isn’t just for catching old-school viruses anymore. It can detect phishing links, block malicious downloads and stop ransomware before it gets a foothold. Since the Medusa gang uses fake updates and social engineering to trick users, having strong antivirus software adds a critical layer of protection against threats you might not see coming. Get my picks of the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.

2) Enable two-factor authentication (2FA): The FBI specifically recommends enabling 2FA across all services, especially for high-value targets like webmail accounts, VPNs and remote access tools. 2FA makes it significantly harder for attackers to break in, even if they’ve managed to steal your username and password through phishing or other tactics.

3) Use strong, unique passwords: Many ransomware groups, including Medusa, rely on reused or weak passwords to gain access. Using a strong password (think long, random and unique to each account) greatly reduces that risk. A password manager can help you generate and store complex passwords so you don’t have to remember them all yourself. Get more details about my best expert-reviewed password managers of 2025 here.

4) Monitor for suspicious system time changes: The core of this “time-traveling” attack is clock manipulation: Hackers roll back a device’s clock to a time when expired security certificates were still valid. This allows outdated and potentially malicious software to appear trustworthy. Be alert to unexpected system time changes, and if you’re managing an organization, use tools that flag and log these types of configuration shifts.

5) Keep systems updated and patch known vulnerabilities: The Medusa ransomware campaign has a track record of exploiting unpatched systems. That means old software, outdated drivers and ignored security updates can all become entry points. Regularly installing updates for your OS, applications and drivers is one of the most effective ways to stay protected. Don’t put off those system notifications; they exist for a reason.

CLICKFIX MALWARE TRICKS YOU INTO INFECTING YOUR OWN WINDOWS PC

Kurt’s key takeaway

The Medusa attack is a good example of how cybercriminals are shifting tactics. Instead of relying on traditional methods like brute force or obvious exploits, they are targeting the basic logic that systems depend on to function. In this case, it is something as simple as the system clock. This kind of strategy challenges the way we think about security. It is not just about building stronger defenses but also about questioning the default assumptions built into the technology we use every day.

How do you think technology companies can better support individual users in protecting their data and devices? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels:

Answers to the most-asked CyberGuy questions:

New from Kurt:

Copyright 2025 CyberGuy.com. All rights reserved.

When disaster strikes and buildings collapse, every second counts for emergency responders searching for survivors trapped beneath rubble. Traditional tools often fall short in these dangerous, chaotic environments, but a new breed of robot, SPROUT, is poised to make a life-saving difference.

Join the FREE “CyberGuy Report”: Get my expert tech tips, critical security alerts and exclusive deals, plus instant access to my free “Ultimate Scam Survival Guide” when you sign up!

Soft Pathfinding Robotic Observation Unit (MIT Lincoln Laboratory) (Kurt “CyberGuy” Knutsson)

What is SPROUT?

SPROUT, short for Soft Pathfinding Robotic Observation Unit, is a flexible, vine-like robot developed by MIT Lincoln Laboratory in collaboration with the University of Notre Dame. Unlike rigid robots or static cameras, SPROUT can “grow” into tight, winding spaces that are otherwise inaccessible, giving first responders a new way to explore, map and assess collapsed structures.

Soft Pathfinding Robotic Observation Unit (MIT Lincoln Laboratory) (Kurt “CyberGuy” Knutsson)

ELECTRIC SUV IS THE ULTIMATE LIFELINE FOR SEARCH AND RESCUE MISSIONS

How does SPROUT work?

SPROUT is made of an airtight fabric tube that inflates with air, allowing it to extend from a fixed base. As it grows, it can flex around corners and squeeze through narrow gaps, mimicking the movement of a plant vine. Operators control SPROUT using a joystick, steering it through debris while watching a live video feed from a camera mounted at the tip. This setup lets responders see and map hidden void spaces without entering dangerous areas themselves.

Three pouch motors along the vine’s length enable SPROUT to bend and turn, while an internal reel system allows the robot to be compactly stored and precisely deployed as needed. In addition to cameras, SPROUT can carry other sensors to image, map and even assess hazards within the collapsed structure.

TOP 13 EMERGENCY CAR ESSENTIALS

Soft Pathfinding Robotic Observation Unit (MIT Lincoln Laboratory) (Kurt “CyberGuy” Knutsson)

RESCUE DRONE HITS BEACHES DESIGNED TO SAVE LIVES AS A FLYING LIFEBUOY

Why traditional tools fall short

Traditional search-and-rescue gear, such as rigid robots or specialized cameras, struggles in disaster zones for several reasons. Cameras can only probe straight paths, often requiring teams to cut new access holes to see further into the rubble.

Rigid robots are prone to damage in unstable, cramped environments and are expensive to repair. Manual probing is time-consuming and physically exhausting for responders.

SPROUT’s soft, flexible design directly addresses these challenges, offering a safer, faster and more adaptable solution for navigating the unpredictable landscape of collapsed buildings.

Soft Pathfinding Robotic Observation Unit (MIT Lincoln Laboratory) (Kurt “CyberGuy” Knutsson)

BEST HOME INVENTORY APPS TO PROTECT YOUR PROPERTY IN CASE OF EMERGENCY

Real-world testing and impact

SPROUT has already been put through its paces at the Massachusetts Task Force 1 training site, where it demonstrated its ability to flex around corners and penetrate void spaces in engineered collapsed structures. These tests allowed the team to refine SPROUT’s durability, portability and steering controls, with plans for larger field studies underway.

The project is a true collaboration, pairing MIT’s engineering expertise with Professor Margaret Coad’s pioneering work on vine robots at Notre Dame. This partnership has accelerated SPROUT’s development, bringing hands-on demonstrations to first responders, many of whom have limited research and development budgets.

IS YOUR PHONE READY FOR AN EMERGENCY? TURN ON THESE LIFESAVING SETTINGS

Soft Pathfinding Robotic Observation Unit (MIT Lincoln Laboratory) (Kurt “CyberGuy” Knutsson)

Looking ahead: The future of SPROUT

The team behind SPROUT is continuously working to expand its capabilities. Current models can extend up to 10 feet, with future versions aiming to reach beyond 25 feet. Researchers are also exploring the use of multiple SPROUT robots to cover larger areas and expedite rescue operations in major disasters.

Beyond disaster response, the technology could be adapted for inspecting military systems or critical infrastructure in hard-to-reach places, making SPROUT a versatile tool for a variety of high-stakes scenarios.

SUBSCRIBE TO KURT’S YOUTUBE CHANNEL FOR QUICK VIDEO TIPS ON HOW TO WORK ALL OF YOUR TECH DEVICES

Soft Pathfinding Robotic Observation Unit (MIT Lincoln Laboratory) (Kurt “CyberGuy” Knutsson)

Kurt’s key takeaways

SPROUT is a remarkable example of how soft robotics can make a real difference in some of the most challenging and dangerous situations. By giving first responders a flexible, easy-to-use tool for searching through rubble, SPROUT has the potential to save lives and change the way we approach disaster rescue. It’s great to see technology that’s not just innovative but truly impactful, helping those who help others when it matters most.

How do you feel about robots being used to explore dangerous places where people can’t easily go? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels:

Answers to the most-asked CyberGuy questions:

New from Kurt:

Copyright 2025 CyberGuy.com. All rights reserved.

Healthcare institutions and insurers arguably collect the most sensitive information about you, including IDs, contact details, addresses and medical records. But they often don’t put in the same level of effort to protect that data. 

That’s clear from the growing number of healthcare data breaches we’ve seen recently. In most of those cases, a bad actor was involved. 

But in the latest news, health insurance giant Blue Shield of California confirmed that it had been sharing private health data of 4.7 million users with Google for three years without even realizing it.

STAY PROTECTED & INFORMED! GET SECURITY ALERTS & EXPERT TECH TIPS — SIGN UP FOR KURT’S THE CYBERGUY REPORT NOW

A person doing a Google search  (Kurt “CyberGuy” Knutsson))

What you need to know

Blue Shield of California just admitted to a major data privacy slip that went on for almost three years, from April 2021 to January 2024. It was using Google Analytics to track how people used its member websites. This is totally normal since every business does it. But the tool was accidentally sharing sensitive info with Google Ads because it wasn’t set up properly. 

What I find extremely shocking is that it took the company three years to realize it was sharing its user data with Google to run ads. This says a lot about how much these healthcare giants care about protecting your data. 

The shared data included a broad array of protected health information (PHI), including names, zip codes, gender, medical claim dates, online account numbers, insurance plan names, group numbers, family data and even search criteria used in its “Find a Doctor” feature.

“Google may have used this data to conduct focused ad campaigns back to those individual members. We want to reassure our members that no bad actor was involved, and, to our knowledge, Google has not used the information for any purpose other than these ads or shared the protected information with anyone,” the company said in a notice on its website.

This incident is not isolated. Over the past few years, healthcare and tech companies have come under scrutiny for similar missteps. The Federal Trade Commission (FTC) and the Department of Health and Human Services (HHS) have already issued warnings about the use of tracking technologies in healthcare, especially those that might expose patient data to third parties without adequate transparency or safeguards.

A Google spokesperson provided the following comment to CyberGuy when asked about the Blue Shield data breach:

“Businesses, not Google, manage the data they collect and must inform users about its collection and use. By default, any data sent to Google Analytics for measurement does not identify individuals, and we have strict policies against collecting private health information (PHI) or advertising based on sensitive information.”

A person working on their laptop  (Kurt “CyberGuy” Knutsson)

MALWARE EXPOSES 3.9 BILLION PASSWORDS IN HUGE CYBERSECURITY THREAT 

Impact on patients and the industry

Since the data was only shared with Google and not any other party, the overall risk is relatively low, apart from the clear privacy violation. It’s highly unlikely that anyone else will gain access to it, so the chances of the data being misused are slim. Google says it doesn’t allow ads to be served based on sensitive information like health, so there’s a good chance your data wasn’t even used for advertising.

Blue Shield’s case follows a string of similar breaches. Companies like GoodRx, BetterHelp and Kaiser have all faced regulatory and legal consequences for sharing sensitive user data with advertising vendors. Some even settled for millions of dollars. Despite the risks, many healthcare organizations have continued using these tools due to the lack of clear regulatory guardrails, a situation complicated further by a federal court ruling that blocked the Biden administration’s attempts to curb the use of online trackers in healthcare settings.

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

A person working on a laptop (Kurt “CyberGuy” Knutsson)

HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET

How to protect your health data online

The Blue Shield of California incident is a reminder that even well-known healthcare providers can mishandle sensitive data. While you can’t always control what happens behind the scenes, there are steps you can take to reduce your exposure and safeguard your privacy:

1. Limit what you share on health portals: Avoid entering more personal details than absolutely necessary on insurance or provider websites. Tools like “Find a Doctor” might log your search terms, so keep inputs vague when possible.

2. Use privacy-focused browsers: Browsers like Brave or Firefox offer built-in privacy protections, such as blocking third-party trackers that could expose health-related browsing activity.

3. Turn off ad personalization: Visit Google’s Ad Settings and disable ad personalization. This won’t stop tracking, but it can reduce how your data is used for targeting.

4. Opt out of tracking where possible: Many healthcare sites use cookies and tracking tools. Choose “reject all” or the strictest privacy settings in cookie banners. If a tracking opt-out tool is available, use it.

5. Read privacy policies (yes, really): Look for language like “third-party sharing,” “advertising,” or “analytics.” If a healthcare provider mentions tools like Google Analytics or Meta Pixel, that’s a cue to proceed cautiously.

6. Monitor your accounts and credit: Keep an eye out for unusual insurance claims or medical charges. Set up credit alerts or monitoring services if your provider offers them, especially after a breach.

7. Ask questions: Call or email your healthcare provider or insurer. Ask what tracking tools they use and how they protect your data. The more consumers push for transparency, the more pressure there is to improve standards.

GET FOX BUSINESS ON THE GO BY CLICKING HERE

Bonus privacy steps (For extra peace of mind)

If you want to go beyond the basics, here are some additional steps that can help reduce your digital footprint and catch misuse early:

Use a personal data removal service: While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap — and neither is your privacy.  These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet.  By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you. Check out my top picks for data removal services here. 

Consider identity theft protection services: If you’re concerned about fraud or medical identity theft, you’ll want to consider using identity theft protection services. Identity theft companies can monitor personal information like your Social Security number, phone number and email address and alert you if it is being sold on the dark web or being used to open an account.  They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals. 

Use strong antivirus software: To guard against malware or phishing attacks that could compromise access to your online health accounts, be sure to use strong antivirus software. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices. 

Kurt’s key takeaway

It baffles me how careless most companies are when it comes to protecting user data. Blue Shield “mistakenly” shared your data with Google, which then used it to show personalized ads. It took the company three years to realize this. While most cyber incidents involve an attacker, this breach didn’t need one. We need accountability in data practices, especially when human error or tech oversight can cause damage at scale.

CLICK HERE TO GET THE FOX NEWS APP

How comfortable are you knowing that your health data might be used to target ads? Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover

Follow Kurt on his social channels

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2025 CyberGuy.com.  All rights reserved.

Delta Air Lines is partnering with aerospace startup JetZero to introduce a revolutionary aircraft design that has the potential to transform the future of commercial flying. 

This new design, called the blended wing body (BWB) aircraft, differs dramatically from the traditional tube-and-wing planes in service. 

By combining the wings and fuselage into a single, wide, flat shape, the BWB reduces drag and weight, resulting in fuel efficiency improvements of up to 50% compared to today’s aircraft.

Join The FREE CyberGuy Report: Get my expert tech tips, critical security alerts and exclusive deals — plus instant access to my free Ultimate Scam Survival Guide when you sign up!

Blended wing body aircraft  (JetZero)

Driving toward net-zero emissions by 2050

The blended wing body (BWB) aircraft represents a critical component of Delta’s strategy to decarbonize aviation, with its fuel efficiency gains directly supporting the airline’s 2050 net-zero target. By leveraging existing engine technology, the design avoids delays associated with developing new propulsion systems, enabling faster adoption across fleets. 

The aircraft’s capacity to transport over 250 passengers, matching mid-sized international jets in range and wide-body models in seating, positions it as a practical solution for reducing emissions without compromising operational needs. Its noise-reducing engine placement and compatibility with current airport infrastructure address both environmental and logistical challenges, while integration with sustainable aviation fuels amplifies its role in cutting lifecycle carbon emissions. 

This multifaceted approach demonstrates how innovative airframe technology can accelerate the industry’s shift toward cleaner travel.

Blended wing body aircraft  (JetZero)

ZERO EMISSIONS HYDROGEN ELECTRIC JET DISRUPTS CONVENTIONAL FLIGHTS

Delta’s role: Turning innovation into reality

Delta is deeply involved in the project beyond financial support. Through its Sustainable Skies Lab, the airline is contributing operational expertise to help make the BWB aircraft commercially viable. This includes advising on maintenance, airport operations and other practical considerations necessary for the aircraft’s success in everyday airline service. 

Amelia DeLuca, Delta’s chief sustainability officer, highlights the importance of this collaboration, stating that working with JetZero to develop a new airframe and passenger experience is an essential step toward advancing the airline industry’s fuel-saving and innovation goals.

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

Blended wing body aircraft  (JetZero)

TECH STARTUP AND MAJOR AIRLINE PARTNER LAUNCH ELECTRIC AIR TAXI SERVICE

Rethinking the passenger experience

The interior of the BWB aircraft is being thoughtfully redesigned to enhance comfort and accessibility. The wider and flatter shape of the plane’s body allows for new cabin layouts. Delta aims to provide dedicated overhead bin space for every passenger, more accessible seating and lavatories and fewer rows to create a less crowded environment. 

Additionally, the engines will be mounted on top of the aircraft, which is expected to significantly reduce cabin noise and lower noise pollution around airports.

Inside a blended wing body aircraft  (JetZero)

RADICAL NEW TECH BRINGS FLYING CARS CLOSER TO REALITY

Backed by industry and government support

This partnership follows JetZero’s receipt of a significant grant from the U.S. Air Force in 2023 to build a full-scale demonstrator aircraft, with a first flight planned for 2027. The grant, along with collaborations with aerospace leaders such as Northrop Grumman and Scaled Composites, reflects strong government and industry support for the BWB concept. Delta has been involved with JetZero since 2021, providing valuable guidance on how to bring this technology to market.

GET FOX BUSINESS ON THE GO BY CLICKING HERE

Blended wing body aircraft  (JetZero)

The need for breakthrough technologies in aviation

Over the past 50 years, the aviation industry has made impressive gains in fuel efficiency, improving by roughly 80% through innovations like winglets and lighter materials. Delta alone saved more than 40 million gallons of fuel in 2024 by optimizing operations and upgrading its fleet. Still, the industry acknowledges that incremental improvements are insufficient to meet pressing climate goals. Technologies like the BWB aircraft are necessary to achieve the significant reductions in emissions and fuel consumption that the future demands.

SUBSCRIBE TO KURT’S YOUTUBE CHANNEL FOR QUICK VIDEO TIPS ON HOW TO WORK ALL OF YOUR TECH DEVICES

Blended wing body aircraft  (JetZero)

Kurt’s key takeaways

Delta and JetZero’s collaboration marks a meaningful step toward a cleaner, quieter and more efficient future for air travel. While challenges remain, including regulatory approvals and ensuring passenger comfort with the new design, this partnership exemplifies the aviation industry’s dedication to innovation and sustainability. The future of flying is being reshaped by bold ideas like the blended wing body aircraft, which promise to make air travel more environmentally responsible while improving the overall passenger experience.

CLICK HERE TO GET THE FOX NEWS APP

Would you be excited to fly on a radically redesigned airplane that promises greater comfort, quieter cabins and a smaller carbon footprint — even if it means adjusting to a very different cabin layout and window view than what you’re used to?  Let us know by writing us at Cyberguy.com/Contact

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you’d like us to cover

Follow Kurt on his social channels

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2025 CyberGuy.com.  All rights reserved.