Cybersecurity: What used to take days for a human to do, now happens in minutes
The article discusses the impact of generative artificial intelligence (AI) on cybersecurity and information security, highlighting both opportunities and challenges. October is recognized as Cybersecurity Awareness Month, and the piece focuses on how generative AI has accelerated cyber threats, reducing tasks that once took days to mere minutes. Experts warn that while AI offers new tools for defense, it also enables more sophisticated attacks through techniques like phishing, where attackers trick users into revealing personal data via emails, SMS, messaging apps, and social media. The Slovenian Computer Emergency Response Team (SI-CERT) has launched a dedicated reporting point for phishing incidents at phishing@cert.si, allowing users to submit examples of such attacks. SI-CERT director Gorazd Božič explains that large language models represent a scalability leap rather than a revolutionary change, emphasizing that existing attack methods are now executed faster and in sequences that were previously too complex for human actors. He criticizes some companies developing generative AI for overstating their capabilities, suggesting they market AI as self-thinking or emotionally-capb
The National Cyber Security Incident Response Center, known as SI-CERT, has issued warnings regarding two distinct digital fraud schemes currently targeting users in Slovenia. One scheme involves fake delivery notifications designed to steal financial data, while the other exploits the messaging application WhatsApp to hijack user accounts through fake voting polls. In 2025, the center handled 1,995 cases of phishing attacks. This figure contributed to a total increase of 35 percent in all cyber incidents compared to the previous year. The first type of scam begins with a text message informing recipients that a package could not be delivered and requesting address confirmation for a retry. Because many victims are genuinely expecting deliveries, the alert appears legitimate. Clicking the link leads to a website that mimics the logo, colors, and interface of well-known courier services. The site asks users to enter payment card details and pay a small fee. These sites are fraudulent. Entering card information directly hands over sensitive data to criminals. Attackers aim to obtain money, passwords, personal data, or access to online accounts. Links to these fake pages spread via email, SMS, communication apps, and social media. A specific attack in December 2025 utilized more than 70 different web addresses to trick users into entering payment card data. Identifying such scams has become difficult for three reasons. First, messages are often written in flawless Slovenian, eliminating grammatical errors as a reliable warning sign. Second, fake websites can look nearly identical to genuine ones, copying logos and designs. Even the padlock symbol indicating an encrypted connection does not guarantee authenticity. Third, timing plays a crucial role. If a user expects a package or has just made an online purchase, a request for confirmation seems logical. Attackers exploit these everyday expectations. To protect themselves, experts advise accessing banking, courier, or retail websites directly through official applications or known URLs, rather than clicking links in unexpected messages. Users should be wary of requests for payment card data, passwords, or one-time verification codes before verifying the reason for the notification. If a link has already been opened but no data was entered, the page should be closed immediately. If a password was revealed, it must be changed at once and account security checked. If card details were entered, the bank should be notified immediately. Suspicious links and messages can be reported to phishing@cert.si to help identify dangerous sites. A separate threat targets WhatsApp users through a fake voting scheme. Victims receive a message, usually from a friend whose account has already been compromised, containing a link to a vote for a person or project. The message appears innocent because it comes from a trusted contact. Opening the link displays a webpage offering the vote. To cast the ballot, users are instructed to enter their phone number and input an eight-digit code displayed on the screen into the WhatsApp app, or scan a QR code. This process does not submit a vote. Instead, it connects a new device to the victim's WhatsApp account. WhatsApp allows one account to be used on multiple devices simultaneously. By confirming this connection, users grant attackers access to their chats, contacts, and groups. The attackers can then send messages and further spread the fake voting links to other users who trust the victim. Crucially, the victim does not necessarily share their password or standard login code. They simply approve the device pairing based on instructions from the fake site. SI-CERT notes that WhatsApp typically detects when a large volume of false messages is sent from a compromised account. The platform then temporarily blocks the account. This block is usually lifted within 24 hours, during which time the victim loses access to their account. Users are advised to check the Linked Devices section in WhatsApp settings to see which devices are connected to their account. Any unrecognized device should be removed immediately. If a user suspects their account has been abused, they should remove unknown devices and warn their contacts to be cautious with incoming messages and links. Those who receive suspicious voting messages should not click the link and should forward the message to phishing@cert.si. They should also inform the contact who sent the message that their account has been compromised. SI-CERT emphasizes that scammers frequently exploit legitimate service procedures, relying on users' lack of understanding of how these processes work. It is essential that users do not follow instructions on unknown websites without understanding their purpose. Even seemingly harmless activities like voting can be used by attackers to gain account access and extend the fraud. Additional protection is available through network-level services. For instance, the Safe Web service operates directly within the network to recognize known dangerous websites, including fake shops, counterfeit banks, and pages linked to malware. It also identifies sites listed by SI-CERT as phishing threats. If a user attempts to visit a recognized dangerous site, the service prevents access and warns them of the danger. This layer of defense helps protect users even when they fail to spot a threat themselves. Vigilance remains critical, but technological safeguards provide an additional barrier against modern online deception.
Go to the primary sources (2)
The official sources this coverage is built on. Read them directly to bypass framing.
OTP Banka has issued a warning to its customers about an increase in online scams (phishing attacks) targeting individuals who pretend to represent OTP Banka or other trusted institutions such as the Police and FURS. These scams aim to steal personal, security, or banking information or trick victims into authorizing transactions they did not initiate. The bank advises customers to avoid clicking on suspicious links in emails or SMS messages, not to enter login credentials, card details, or enable remote access to devices through unsolicited communications, and not to confirm payments or requests they did not trigger themselves. OTP Banka emphasizes that it will never ask customers to provide login details, card information, or grant device access via phone, email, or SMS. Victims are advised to change their digital banking passwords, block their payment cards, and immediately notify the bank if they suspect they have been scammed. They are also encouraged to report incidents to the police.
Bias read (Center): The article provides factual information about cybersecurity threats and does not present any political stance, opinion, or biased framing. It focuses solely on informing customers about phishing risks and protective measures without taking sides or emphasizing any particular political perspective.
Why factuality (95): The article accurately reports OTP Banka's warning about increased phishing attempts, aligning closely with the primary source document. It mentions phishing tactics like fake links and impersonation of trusted institutions, which matches the source. The article also provides practical advice on pro
Why objectivity (93): The article maintains a neutral and informative tone throughout, providing clear warnings and protective measures without any biased language or editorializing. It presents facts objectively and avoids taking sides.
The Financial Supervisory Authority of Slovenia (Furs) has warned citizens about recent attempts at online fraud through phishing emails. These fraudulent messages aim to steal usernames, passwords, personal data, or payment card information by tricking recipients into clicking on suspicious links or opening unexpected attachments. Furs advises users to exercise caution, especially if the email creates a sense of urgency, comes from an unknown sender, or contains grammatical errors. Users are encouraged to report suspicious emails to sd.fu@gov.si for verification. OTP Bank has also issued similar warnings, emphasizing that banks will never ask customers to provide login credentials or enable remote access via email links or phone calls. Victims are advised to change their passwords immediately, block affected cards, and contact the police if financial damage occurs.
Bias read (Center): The article provides factual information about cybersecurity threats and official warnings from Furs and OTP Bank. It does not take a stance on any political issue, nor does it favor one side over another. The content is informative and balanced, focusing on public safety rather than political bias.
Why factuality (90): This article accurately reflects the current situation regarding phishing attempts, citing FURS directly and providing clear indicators of suspicious emails. The content matches the cross-source consensus and includes actionable advice, such as contacting FURS at sd.fu@gov.si and changing passwords
Why objectivity (95): The article maintains a highly objective tone, presenting facts without editorializing or favoring any particular perspective. It clearly outlines what phishing is, how to identify it, and what steps to take if affected, using neutral and factual language throughout.
The Financial Administration of Slovenia has issued a warning about recent phishing attempts using fake emails aimed at stealing users' login credentials, personal data, and payment card information. These deceptive messages often include suspicious links, unexpected attachments, create urgency, come from unknown email addresses, or contain grammatical errors. Recipients are advised not to click on links or open attachments if they doubt the legitimacy of the message and to report such emails to sd.fu@gov.si for verification. If individuals have already clicked on a link or entered their data, they are urged to change passwords immediately, contact their bank if financial information was compromised, and report any suspected identity theft or financial loss to the police. The administration emphasizes that careful handling can significantly reduce the risk of data misuse and online fraud.
Bias read (Center): The article provides a neutral warning about phishing scams without taking a stance on the issue. It focuses on informing the public about security measures rather than expressing political opinions or favoring any side.
Why factuality (90): The article accurately describes the resurgence of phishing attempts and aligns closely with the cross-source consensus. It mentions FURS, lists warning signs of phishing emails, and provides correct guidance on verifying email authenticity and responding to potential breaches. The information is co
Why objectivity (95): The tone remains neutral and informative, avoiding any subjective language or bias. It presents the issue objectively, offering practical advice without taking sides or expressing personal opinion.
The Financial Administration of the Republic of Slovenia (FURS) has issued a warning about the resurgence of fake electronic messages designed to steal users' login credentials, personal data, and payment card information through phishing attacks. These messages often contain suspicious links or attachments that prompt users to enter sensitive information or log in to websites. FURS advises recipients to exercise caution, especially when opening links or attachments in questionable emails, and to avoid clicking on them if unsure. To verify the authenticity of such messages, users are encouraged to forward them to the email address [email protected], where they will be checked and informed of the results. If users have already clicked on a suspicious link or entered their data, they are advised to immediately change their passwords and contact their bank if financial information was compromised. In cases of suspected misuse of personal data or financial loss, individuals are urged to report the incident to the police.
Bias read (Center): The article discusses a general security warning from a government agency regarding phishing attempts and does not present any political stance, opinion, or controversy. It provides factual information about cybersecurity threats and offers practical advice to the public without any ideological or政治
Why factuality (85): The article accurately discusses phishing attempts and aligns with the cross-source consensus. It provides useful details on identifying phishing emails and the appropriate actions to take. However, it lacks some specifics found in other articles, such as the exact email address for reporting phishi
Why objectivity (90): The article is largely neutral and factual, focusing on informing readers about phishing risks and protective measures. While it avoids overt bias, there is a slight emphasis on the consequences of falling victim to phishing, which may subtly influence reader perception.
The article discusses the impact of generative artificial intelligence (AI) on cybersecurity and information security, highlighting both opportunities and challenges. October is recognized as Cybersecurity Awareness Month, and the piece focuses on how generative AI has accelerated cyber threats, reducing tasks that once took days to mere minutes. Experts warn that while AI offers new tools for defense, it also enables more sophisticated attacks through techniques like phishing, where attackers trick users into revealing personal data via emails, SMS, messaging apps, and social media. The Slovenian Computer Emergency Response Team (SI-CERT) has launched a dedicated reporting point for phishing incidents at phishing@cert.si, allowing users to submit examples of such attacks. SI-CERT director Gorazd Božič explains that large language models represent a scalability leap rather than a revolutionary change, emphasizing that existing attack methods are now executed faster and in sequences that were previously too complex for human actors. He criticizes some companies developing generative AI for overstating their capabilities, suggesting they market AI as self-thinking or emotionally-capb
Bias read (Center): The article presents a balanced discussion of cybersecurity challenges posed by generative AI, including expert opinions from SI-CERT and academic institutions. It does not favor any particular political stance but highlights technical concerns and solutions.
Why factuality (70): The article discusses cybersecurity threats but does not directly address the specific issue of cryptocurrency scams mentioned in the primary source. While it references phishing, it lacks detailed information about the nature of the scams targeting beginners in the crypto space. This makes it less
Why objectivity (85): The article remains largely objective in discussing cybersecurity challenges introduced by AI. However, it focuses more on general trends rather than the specific scam scenarios described in the primary source. The tone is professional and balanced.
The article discusses the dangers of phishing scams, particularly those involving fake delivery notifications. Readers receive messages claiming their package could not be delivered and are asked to confirm their address by clicking on a provided link. The link leads to a website resembling a legitimate delivery service, prompting users to enter payment card information. These scams are increasingly common, with nearly 2000 cases reported in one year according to SI-CERT, the national cybersecurity response center. Attackers often use multiple fake websites to trick users into entering sensitive data. The article highlights three reasons why these scams are hard to detect: they are well-written in Slovenian, mimic authentic sites closely, and arrive at expected times, such as when a package is anticipated. It advises users to access banking, delivery, or shopping sites directly through known applications or URLs rather than clicking on unexpected links.
Bias read (Center): The article focuses on cybersecurity threats and provides general advice on identifying phishing attempts. There is no political framing, bias, or mention of any political entities, parties, or policies. The content remains neutral and informative.
Why factuality (0): Completely irrelevant to the primary source document. Discusses phishing scams involving fake package delivery notifications rather than the PHP security vulnerability.
Why objectivity (50): While the tone is educational regarding phishing, it fails to address the assigned topic entirely, making objectivity relative to the event moot.
The article discusses a common online scam where users receive a message claiming their package could not be delivered and asking them to confirm their address for redelivery. The message appears legitimate, with a familiar delivery service logo and form, but it is actually a phishing attempt designed to steal personal and financial information. Users might click on the link and enter payment card details, which can then be exploited by fraudsters. These scams often occur unexpectedly, making them particularly dangerous because they exploit a moment of trust and routine.
Bias read (Center): The article focuses on a general cybersecurity issue related to online scams and does not involve any political figures, parties, policies, or controversial topics. It provides factual information about a common type of fraud without taking a stance or showing bias toward any side.
Why factuality (0): Identical content to Article 1. Completely unrelated to the PHP security event described in the primary source.
Why objectivity (50): Irrelevant to the task. Tone is appropriate for its actual subject matter (phishing awareness) but fails to engage with the required topic.
A new phishing scam targeting WhatsApp users in Slovenia has been identified by the National Cybersecurity Incident Response Center (SI-CERT). The fraud involves receiving a message from a known contact containing a link to a fake online poll. When victims attempt to vote, they are instructed to enter their phone number and then input an eight-digit code into the WhatsApp app or scan a QR code. This process does not cast a vote but instead authorizes a new device to connect to the victim's WhatsApp account, exploiting the platform's multi-device feature. Once connected, attackers gain access to recent chats, contacts, and groups, allowing them to send further fraudulent messages under the victim's identity. SI-CERT notes that WhatsApp typically detects this abuse quickly and temporarily blocks the compromised account for approximately 24 hours, during which the victim loses access. Users are advised to check the 'Linked Devices' section in their settings to remove any unrecognized devices and to warn their contacts if they suspect compromise.
Bias read (Center): The article reports on a cybersecurity threat and provides technical advice based on official warnings from a national security body. It is a factual, informational piece regarding digital safety with no political agenda, partisan framing, or ideological slant.
The Slovenian Computer Emergency Response Team (SI-CERT) has issued a warning regarding a new social engineering scam designed to hijack user WhatsApp accounts. The attack begins when victims receive a link via WhatsApp, often from known contacts, directing them to a website hosting a fake voting poll. To cast a vote, users are instructed to scan a QR code or enter their phone number and input an eight-digit verification code into the WhatsApp application. This action does not submit a vote but instead authorizes the attacker's device to connect to the victim's account, granting access to private conversations and contact lists. Attackers then use this access to send similar scam messages to other trusted contacts, spreading the infection further. SI-CERT advises users to verify connected devices in their settings, remove any unrecognized hardware immediately, and report suspicious messages to phishing@cert.si.
Bias read (Center): The article reports on a cybersecurity threat and provides technical advice for mitigation. It relies on official warnings from a national computer emergency team and focuses on consumer safety rather than political ideology or partisan debate. There is no evidence of political bias or framing.
The Slovenian National Cybersecurity Incident Response Center (SI-CERT) has issued a warning regarding a new scam targeting WhatsApp users. Attackers lure victims to fake websites under the guise of online voting schemes, instructing them to scan a QR code or enter their phone number followed by an 8-digit code within the WhatsApp app. This process does not cast a vote but instead links the attacker's device to the victim's account, granting access to conversations and contact lists. The compromised accounts are then used to send further scam messages to other trusted contacts, spreading the fraud. SI-CERT advises users to avoid entering codes in messaging apps for web-based votes and to regularly check the 'Linked Devices' section in WhatsApp settings to remove any unrecognized devices. Users who receive such suspicious messages are urged to report them to SI-CERT via email to help disable the malicious sites.
Bias read (Center): The article reports on a cybersecurity threat and provides technical advice for protection. It relies entirely on official warnings from the national cybersecurity center and contains no political opinions, partisan framing, or debate over public policy. As a matter of consumer safety and technology
How each side covered it
The same event, grouped by the political lean of the outlets covering it.
progressive
center
conservative
★
How each side covered it
Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.
Slovenia
