- HX Weekly by Hexagon Center
- Posts
- Is it a losing battle? Privacy and Data Vs. Social Engineering
Is it a losing battle? Privacy and Data Vs. Social Engineering
Social engineering remains a primary threat, with hackers leveraging human emotion through phishing, fake recruitment scams, and deceptive streaming sites to manipulate victims. Technical risks include malicious browser extensions, CSS-based webmail attacks, and “Plug and Pwn” USB exploits that can compromise even hardened systems. Given the inevitability of data compromises, the Hexagon Center emphasizes maintaining cyber hygiene, practicing zero-trust habits, and recognizing adversarial patterns to manage and mitigate the impact of potential security breaches.
HX Weekly
by Hexagon Center
for the week of August 9, 2026, 134th edition
Subscribe at hexagoncenter.org
☝️ TWA
Your data does so much more than you think
Social engineering is still a very effective way to hack and scam people.
🤷♀️ What now?: Learning about how they get you is probably the best way to protect yourself and your data.
WATCH OUT ◉_◉ If Apple sends you a push notification alerting you to a spyware attack, take it seriously
Watch our featured PSA for this week below.
📰 Security Highlights
Russian military hackers pose as recruiters to target Ukrainian IT workers
FBI: Hackers using social engineering to breach accounts and steal explicit content
Plug and Pwn attack uses fake USB devices for Windows SYSTEM access
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
Cisco says software vulnerability could let hackers crash firewalls
Watch our selected More You’s digital detox PSA below.

about this edition and Inside Hexagon
At the end of the day, staying cyber smart and practicing good cyber hygiene is key. It's likely that your data might get compromised and your privacy could be at risk. When that happens, it's all about how you handle it.
At present, we maintain an active presence on seven social media platforms and are accessible to users on three additional platforms: Reddit, Quora, and Pinterest. The most effective means of supporting our endeavors is to follow us and share information about Hexagon Center with others.
Watch our latest T3 PSA video below.
The 134th edition of HX Weekly emphasizes that social engineering remains a primary threat, noting that hackers are increasingly leveraging human emotion through sophisticated phishing, fake recruitment scams, and deceptive streaming sites to manipulate victims into compromising their own data. Beyond social tactics, the report highlights urgent technical risks such as malicious browser extensions, CSS-based webmail attacks, and "Plug and Pwn" USB exploits that can compromise even hardened systems. Given that data compromises are often inevitable, the Hexagon Center underscores the importance of maintaining cyber hygiene, practicing zero-trust habits, and learning to recognize adversarial patterns to effectively manage and mitigate the impact of potential security breaches.

HOUSEKEEPING
Glossary/Legend:
Holistic security - a comprehensive strategy that integrates various protection layers—physical, digital, psycho-social, and organizational—to safeguard individuals, communities, or systems, recognizing that true security involves overall well-being, not just isolated technical defenses.
MFA - Multi-Factor Authentication is a security process that requires users to provide two or more verification methods to access an account or system.
Personal Identifier - A unique word or phrase shared exclusively with an individual or a group, serving as a means of identification and affirmation within the established relationship. It is recommended that 2 or more Personal Identifiers be established per person.
Malware (short for malicious software) - refers to any intrusive software developed by cybercriminals (often called hackers) to steal data and damage or destroy computers and computer systems.
Ransomware - A type of malware that locks or encrypts a victim's files and demands a ransom payment to unlock and decrypt them. Ransomware can infect a variety of devices, including computers, smartphones, printers, and more.
Privacy Notice: HX Weekly and the Hexagon Center are committed to your digital security. We do not collect, track, or store any personal information from our subscribers beyond the email address provided for delivery.
Spread cybersecurity culture
Do you have any suggestions on how we can further share this newsletter? Tell your friends and family about us by sharing with them the Hexagon Center official website:
View archives at hxweekly.beehiiv.com
Even though we aim to provide you the most current and critical information to keep you safe, threat actors work 24/7 and this newsletter publishes only once a week. Even though we are available via a hotline, it is crucial that you stay up to date via other sources as well to be informed on how you may be at risk.
You may reply to this newsletter or email us at
[email protected]
Send us any questions or things you want to talk about. Please share some fun facts with us. We welcome feedback and suggestions.
Hexagon Center is formed as a nonprofit corporation in California for public benefit,
and is tax-exempt under section 501(c)(3) of the Internal Revenue Code.
Cybersecurity is an ever-changing field, and threats may evolve. While Hexagon Center strives to provide accurate and timely information, we cannot guarantee absolute security. Users are responsible for implementing their security measures and staying informed about the latest cybersecurity developments. Hexagon Center is not responsible for any cyber or scam attacks by our readers. HX Weekly tips are advice are not official positions of Hexagon Center nor is Hexagon Center responsible for its content.
Content of this newsletter is not an official representation of Hexagon Center.



Reply