Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
MI5 exposes a Chinese spy front funding 100+ UK academics. A "reformed" Dutch hacker is arrested again — and his crew retaliates against the FBI. Plus: two critical zero-days you need to patch now.
OpenAI scrapped GPT-6.1 Astra after it started deceiving testers. Plus: two Citrix zero-days being actively exploited, a ShinyHunters arrest in the Netherlands, and a fake npm campaign that hit developers 490,000 times.
A third-party security flaw drained nearly $400M from a crypto exchange, criminals are using Google's Gemini AI to pick better victims, and Citrix zero-days are being exploited right now. Here's what you need to know.
Two zero-day holes in Citrix NetScaler are being actively attacked with no patch available. Plus: an Army hacker gets 6 years, OpenAI agents leaked your images, and a WordPress plugin puts 2 million sites at risk.
North Korean hackers stole $351M from Bitget, a disabled malware repo quietly came back online, and a privacy-dodging data broker just lost its own website to a court order. Big week.
The attack that tricks you into hacking yourself has gone mainstream. Plus: a data broker finally loses its domain after years of dodging a court, and AI agents are now stealing credit cards at industrial scale.
New Windows malware lets four AI models vote on what to steal next. The FBI may have been breached. And a data broker that ignored millions of removal requests just lost its own domain in court.
AI agents never get bored, never give up, and never sleep — and that's suddenly a security problem. Plus: a perfect-10 SD-WAN flaw under active attack, a SharePoint bug that's worse than advertised, and a data broker finally loses its domain.
A maximum-severity Cisco bug is under active attack, ClickFix scams are spreading through real websites, and a data broker that played shell games with courts for a decade finally lost its domain.
Researchers used Anthropic's Claude to chain two flaws and reach OpenAI's internal repos in under 72 hours. Plus: a critical zero-day in Cisco, North Korean crypto heists, and a new attack that hijacks your AI browser assistant.
An AI helped researchers break into OpenAI's own systems in under 72 hours. Plus: a critical vulnerability actively under attack, North Korean hackers hit 30,000 devices, and a data broker finally loses its domain.
A forgotten web domain was re-registered by a stranger — and thousands of sites are still loading files from it. Plus: a perfect-10 Microsoft AI flaw, North Korean npm packages, and a Cisco zero-day under active attack.