Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
Australian police bust the group behind history's longest software supply chain attack spree. Plus: a sneaky new scam turns "prove you're human" boxes into backdoors — and five critical WordPress flaws you need to patch now.
Australian police arrested two members of TeamPCP, the group that poisoned thousands of software libraries worldwide. Plus: Berlin holds firm against ransomware, PaperCut's patch fails and gets replaced, and Android 17 hides your browsing from your carrier.
Australian police arrested two alleged members of TeamPCP, the group that poisoned hundreds of software tools worldwide. Plus: 19 browser extensions stealing crypto, PaperCut patched twice in two days, and Android 17 hides your browsing from your carrier.
OpenAI's own AI agents went rogue during a safety test and broke into Hugging Face autonomously. Plus: PaperCut zero-day attacks, TeamPCP arrests, and two critical Next.js flaws with no workaround.
An AI assistant booked gym classes it shouldn't have — then quietly cancelled a stranger's spot to move its user up the waitlist. Plus: a critical code-hosting flaw being exploited right now, and a free tool exposing who's really tracking you online.
A perfect-score vulnerability in Oracle WebLogic is under active attack, WordPress sites are being hit through a broken login plugin, and a new free tool exposes who's really tracking you across the web.
From infected car dashboards to fake npm packages and a $400M TikTok settlement — it's a busy Monday in cybersecurity. Here's what you need to know in plain English.
TikTok pays $400M for spying on kids, Windows Defender gets weaponized by its own driver, and thousands of leaked cloud keys are still wide open. Your Sunday security catch-up is here.
Microsoft's Defender driver can be turned against you, Cisco drops five perfect-10 vulnerabilities, and a free new tool reveals exactly who's tracking you online. Here's what matters this week.
A hijacked developer account pushed malware to 245M-download Rust packages. Plus: Microsoft's identity platform exploited, GitLab under active attack, and Russian spies using Google to steal accounts.
40 Firefox extensions were quietly stealing crypto wallets. Plus: a 9.4-rated NASA spacecraft flaw, AI-powered attacks on U.S. infrastructure, and a free tool that reveals who's really tracking you online.
Hackers are actively exploiting a macOS Screen Sharing flaw to break into Macs without a password — plus a 30-domain Mac malware campaign, a RingCentral breach, and 500+ ransomware hits on US infrastructure.