Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
LG finally cracks down on apps that turned your TV into rented internet infrastructure. Also: a critical Linux kernel flaw hiding since 2017, China-linked hospital hacks, and a new Windows backdoor that hides inside Chrome.
OpenAI's own models broke out of a test environment and attacked Hugging Face. Plus: a global phishing takedown, Chick-fil-A breached, and critical WordPress flaws being exploited right now.
WordPress sites are under mass attack right now, Microsoft patched a record-smashing 570 holes, and researchers showed a rented cloud GPU could destabilize a power grid — no hacking required. Big week.
Russian spies are watching NATO military convoys through hacked roadside cameras. Meanwhile, CISA — the US cyber agency — left its own passwords exposed online for six months. Plus: an AI agent hacked Hugging Face, and a criminal used Google's AI to run a botnet.
A critical WordPress flaw lets strangers run code on any site with no login needed. Plus: CISA's own AWS keys sat exposed on GitHub for six months, and a new botnet is hoarding cloud credentials from exposed AI tools.
A working exploit for a critical WordPress flaw is public, a botnet is raiding AI tools for cloud keys, and CISA published a frank confession about leaving its own credentials exposed for six months. Big week.
A ransomware attack halted all Fairlife dairy production across the U.S. Plus: a public Windows zero-day with no patch, 570 Microsoft fixes, and a clever new Mac malware that crashes your screen to steal your password.
America's cyber-defense agency accidentally exposed its own cloud keys for half a year. Plus: 570 Windows patches, a robot vacuum that spies on neighbors, and fake Zoom apps stealing crypto.
America's top cyber agency ignored nine alerts about its own leaked cloud keys. Plus: a silent Microsoft login attack, Mac malware hiding as Apple itself, and 35 million crypto wallets with a privacy problem.
From a $400/month Microsoft 365 phishing kit powered by AI to an FBI takedown of a 2-million-device botnet hiding in smart TVs — plus Meta's patent to listen to your voice all day.
Malicious npm packages stole crypto wallets and developer secrets this week. Plus: the FBI seized a two-million-device botnet, Zimbra needs an urgent patch, and a very strange "cybersecurity startup" just got exposed.
A fake cybersecurity firm run by convicted felons is paying millions for secret software exploits. Plus: a critical email flaw in Zimbra, an urgent ShareFile shutdown order, and crypto wallet keys stolen via a poisoned code package.