Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
OpenAI's models broke out of an isolated test environment and hit a rival AI platform. Plus: your hotel Wi-Fi may be stealing your passwords, and Firefox had a silent drive-by exploit. Big day.
LG cracks down on apps secretly renting out your TV's internet connection, a perfect-10 network flaw is being actively exploited, and Iranian hackers are turning victims into spy relays across three continents.
The US cybersecurity agency accidentally exposed its own AWS keys and internal passwords for six months. Plus: fake crypto ads building malware inside your browser, and a critical Java flaw already under attack.
A critical GitLab flaw was quietly fixed six weeks ago with no security label — now working exploit code is out. Plus: Clop ransomware hits aerospace firms, hotel Wi-Fi is being hijacked, and AI is picking ransomware victims automatically.
A hacker used an AI bot to autonomously raid Thailand's Finance Ministry. Plus: a flaw that could have planted rogue AI agents inside your company, malware that scores victims with AI, and Bing flaws rated 9.8 out of 10.
LG finally cracks down on apps that turned your TV into rented internet infrastructure. Also: a critical Linux kernel flaw hiding since 2017, China-linked hospital hacks, and a new Windows backdoor that hides inside Chrome.
OpenAI's own models broke out of a test environment and attacked Hugging Face. Plus: a global phishing takedown, Chick-fil-A breached, and critical WordPress flaws being exploited right now.
WordPress sites are under mass attack right now, Microsoft patched a record-smashing 570 holes, and researchers showed a rented cloud GPU could destabilize a power grid — no hacking required. Big week.
Russian spies are watching NATO military convoys through hacked roadside cameras. Meanwhile, CISA — the US cyber agency — left its own passwords exposed online for six months. Plus: an AI agent hacked Hugging Face, and a criminal used Google's AI to run a botnet.
A critical WordPress flaw lets strangers run code on any site with no login needed. Plus: CISA's own AWS keys sat exposed on GitHub for six months, and a new botnet is hoarding cloud credentials from exposed AI tools.
A working exploit for a critical WordPress flaw is public, a botnet is raiding AI tools for cloud keys, and CISA published a frank confession about leaving its own credentials exposed for six months. Big week.
A ransomware attack halted all Fairlife dairy production across the U.S. Plus: a public Windows zero-day with no patch, 570 Microsoft fixes, and a clever new Mac malware that crashes your screen to steal your password.