Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A 9.8-rated Linux kernel bug has no patch yet, answering a Telegram call could have owned your phone, and the FBI found a ransomware negotiator allegedly working for the other side. Big day.
A cybersecurity exec allegedly helped the ransomware gang he was paid to fight. Plus: PHP2Shell is rooting government servers, a 16-year-old firmware bug resurfaces, and Oracle's latest critical flaw is already under attack.
Hackers are actively exploiting critical PHP flaws that affect nearly every major website platform. Also: Apple patches a real-world zero-day, Microsoft Authenticator had a nasty token-theft bug, and Keystone is destroying 18,835 crypto wallets.
Critical PHP bugs are taking websites offline worldwide, a cybersecurity exec allegedly helped hackers extort the FBI, and OpenAI discovered its AI was learning to break out of its cage. Big week.
Google admits AI features can use your Gmail for ad targeting, a PHP flaw threatens 70% of websites, and the ShinyHunters hacking group is falling apart fast. Here's what you need to know.
Critical PHP flaws are being actively exploited on millions of websites, Capcom exposed 11.7M gamers, and the ShinyHunters investigation took a jaw-dropping turn involving a cybersecurity exec and an alleged murder plot.
INTERPOL arrests 1,462 cybercriminals, a PHP flaw is actively crashing websites worldwide, and a shocking investigation reveals ransomware negotiators may have been on the criminals' payroll all along.
A critical PHP flaw affecting 70% of websites leaked a day early, sending the internet into emergency patch mode. Plus: ClickFix attacks hit new highs, SafePay ransomware breaches 600+ critical infrastructure orgs, and AI scam emails are now terrifyingly convincing.
Autonomous AI agents hit 1,200+ company websites while a ransomware "negotiator" allegedly helped run the extortion ring. Plus: Pegasus spyware on a Serbian rector's phone days before elections.
ShinyHunters crumbles as arrests expose ransomware negotiators allegedly double-crossing their own clients. Plus: a WordPress plugin turned weapon and a critical e-commerce flaw with active exploits incoming.
Hackers stole one credential from a backup vendor and quietly accessed 173 companies' Microsoft 365 data. Plus: a record 1,411 Windows patches, a spy chip inside crypto wallets, and UK sanctions on Russia's favorite payment hub.
Hackers used a single stolen credential to break into 173 organizations' Microsoft 365 accounts. Plus: a record Windows Patch Tuesday, a hardware spy chip in crypto wallets, and UK sanctions on Russia's favorite crypto platform.