Your vacation photos and your scammers

Rise in AI-driven threats, including hidden metadata in vacation photos that can expose personal data. New risks include Android banking malware, AI-agent “mind viruses,” and sophisticated social engineering. To mitigate potential breaches, practice mindful digital hygiene, such as stripping photo metadata or sharing privately, and adopt zero-trust habits. Stay informed and explore our latest cybersecurity and digital detox PSAs on our YouTube channel.

AuthorAuthorAuthor

Daniel Masterson, Ai Courtrie Buson & Bard Gee
August 21, 2026

HX Weekly
by Hexagon Center

for the week of August 16, 2026, 135th edition

Subscribe at hexagoncenter.org

☝️ TWA

Your vacation photos out you to scams

🤷‍♀️ What now?: Think before you share. It’s mostly the hidden meta data in your photos that gives you away.

Tools: There are probably tools out there to remove the meta data in your pictures. But if you are not aware of them, you can post your vacation photos privately or share using email.

Watch our featured PSA for this week below.

Watch our selected More You’s digital detox PSA below.

about this edition and Inside Hexagon

Hexagon Center has been advising people not to post or share vacation photos on social media since it started. However, this is the first time HX Weekly is focusing on this issue. This could mean several things, but the main point is that there are more threats now, and they are becoming more advanced in targeting people.

Hexagon Center doesn’t have a lab yet but there sure are a lot of projects planned to help fulfill our mission in educating and warning the public about cybersecurity and information integrity. Check out most of our programs in our YouTube channel.

Watch our latest T3 PSA video below.

In the 135th edition of HX Weekly, the Hexagon Center highlights a critical rise in Ai-driven threats, specifically warning that your vacation photos can inadvertently expose personal data through hidden metadata and Ai-powered exploitation. With new risks ranging from Android banking malware and Ai-agent "mind viruses" to sophisticated social engineering, it is more important than ever to practice mindful digital hygiene—such as stripping photo metadata or sharing privately—and to adopt zero-trust habits to mitigate potential breaches. You can stay informed and explore our latest cybersecurity and digital detox PSAs on the Hexagon Center website and our YouTube channel.

- HX Weekly Team
HOUSEKEEPING

Glossary/Legend:

  • Sandbox - in cybersecurity, it means a safe, isolated virtual space where you can run untrusted files or code. It lets you watch what a suspicious program does without risking your main computer or network.

  • Holistic security - a comprehensive strategy that integrates various protection layers—physical, digital, psycho-social, and organizational—to safeguard individuals, communities, or systems, recognizing that true security involves overall well-being, not just isolated technical defenses.

  • MFA - Multi-Factor Authentication is a security process that requires users to provide two or more verification methods to access an account or system.

  1. Personal Identifier - A unique word or phrase shared exclusively with an individual or a group, serving as a means of identification and affirmation within the established relationship. It is recommended that 2 or more Personal Identifiers be established per person.

  2. Malware (short for malicious software) - refers to any intrusive software developed by cybercriminals (often called hackers) to steal data and damage or destroy computers and computer systems.

  3. Ransomware - A type of malware that locks or encrypts a victim's files and demands a ransom payment to unlock and decrypt them. Ransomware can infect a variety of devices, including computers, smartphones, printers, and more.

Privacy Notice: HX Weekly and the Hexagon Center are committed to your digital security. We do not collect, track, or store any personal information from our subscribers beyond the email address provided for delivery.

Spread cybersecurity culture

Do you have any suggestions on how we can further share this newsletter? Tell your friends and family about us by sharing with them the Hexagon Center official website:
View archives at hxweekly.beehiiv.com

Even though we aim to provide you the most current and critical information to keep you safe, threat actors work 24/7 and this newsletter publishes only once a week. Even though we are available via a hotline, it is crucial that you stay up to date via other sources as well to be informed on how you may be at risk.

You may reply to this newsletter or email us at
[email protected]

Send us any questions or things you want to talk about. Please share some fun facts with us. We welcome feedback and suggestions.

Hexagon Center is formed as a nonprofit corporation in California for public benefit,
and is tax-exempt under section 501(c)(3) of the Internal Revenue Code.

Cybersecurity is an ever-changing field, and threats may evolve. While Hexagon Center strives to provide accurate and timely information, we cannot guarantee absolute security. Users are responsible for implementing their security measures and staying informed about the latest cybersecurity developments. Hexagon Center is not responsible for any cyber or scam attacks by our readers. HX Weekly tips are advice are not official positions of Hexagon Center nor is Hexagon Center responsible for its content.

Content of this newsletter is not an official representation of Hexagon Center.

Reply

or to participate.