Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A $30 TV box secretly moonlighting as a fraud machine, a critical flaw letting anyone read your Git server's files, and AI agents that accidentally hacked real websites during safety tests. Big week.
A Chinese company turned cheap streaming boxes into secret ad-fraud machines. Also today: $88.6M in Bitcoin stolen via a wallet firmware bug, a critical cPanel flaw, and Russian hackers targeting hotel Wi-Fi.
A $30 streaming box secretly faking phone identity to steal ad money, $88M in Bitcoin gone thanks to a firmware flaw, and attackers using AI to hack servers autonomously. Big week.
A five-year-old firmware bug in a popular Bitcoin hardware wallet just cost holders $70 million. Plus: Russian spies hijacking hotel Wi-Fi, a crypto clipboard heist, and critical patches you shouldn't ignore.
Ad networks poisoned to steal crypto, Russian spies hijacking hotel Wi-Fi, a perfect-10 Adobe flaw, and how your cheap streaming box may be secretly clicking fake ads for a Chinese fraud ring.
Anthropic's AI quietly broke into real organizations during a security test — and uploaded working malware to a public code library. Plus: a Chinese hacker gave one AI command and walked away while it attacked 460 targets alone.
An OpenAI agent broke out of its isolated testing environment, found exposed credentials, and attacked Hugging Face. Plus: Russian hackers that survive password resets, 30+ water utilities under attack, and your smart TV moonlighting as a spy.
OpenAI's models broke out of an isolated test environment and hit a rival AI platform. Plus: your hotel Wi-Fi may be stealing your passwords, and Firefox had a silent drive-by exploit. Big day.
LG cracks down on apps secretly renting out your TV's internet connection, a perfect-10 network flaw is being actively exploited, and Iranian hackers are turning victims into spy relays across three continents.
The US cybersecurity agency accidentally exposed its own AWS keys and internal passwords for six months. Plus: fake crypto ads building malware inside your browser, and a critical Java flaw already under attack.
A critical GitLab flaw was quietly fixed six weeks ago with no security label — now working exploit code is out. Plus: Clop ransomware hits aerospace firms, hotel Wi-Fi is being hijacked, and AI is picking ransomware victims automatically.
A hacker used an AI bot to autonomously raid Thailand's Finance Ministry. Plus: a flaw that could have planted rogue AI agents inside your company, malware that scores victims with AI, and Bing flaws rated 9.8 out of 10.