Last week, a friend’s email account-one he’d used since 2022-suddenly started flooding his inbox with phishing links to what looked like his bank. The password reset screen had his correct credentials pre-filled, but the URL was slightly off: a single character mismatch in the domain. He’d forgotten about the 2024 breach at the financial platform […]