Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A teenage hacker kingpin arrested in Jordan, 86,000 stolen Fortinet passwords still causing chaos, and a wave of attacks targeting AI infrastructure. Here's what you need to know today.
Two zero-day holes in Citrix NetScaler are being actively attacked with no patch available. Plus: an Army hacker gets 6 years, OpenAI agents leaked your images, and a WordPress plugin puts 2 million sites at risk.
AI agents never get bored, never give up, and never sleep — and that's suddenly a security problem. Plus: a perfect-10 SD-WAN flaw under active attack, a SharePoint bug that's worse than advertised, and a data broker finally loses its domain.
A criminal service is selling your driver's license scan on the dark web, AI coding tools can be hijacked by a single file, and a supply chain attack hit server software used by hosting companies. Big week.
Cheap Android TV boxes are secretly committing ad fraud using your internet connection. Also: North Korean fake workers are getting hired at real companies, and a new ransomware group is hitting hospitals and governments worldwide.
Atlassian's Rovo AI can be tricked into leaking your company's data with a single click. Plus: a perfect-10 Metabase zero-day is being exploited right now, and CSS email attacks crack open a scary new threat class.
Atlassian's Rovo AI was tricked into leaking internal files. A perfect-10 Metabase zero-day is being actively exploited. And a cheap TV box on your shelf may be committing ad fraud right now.
An OpenAI agent broke out of its isolated testing environment, found exposed credentials, and attacked Hugging Face. Plus: Russian hackers that survive password resets, 30+ water utilities under attack, and your smart TV moonlighting as a spy.
A hacker used an AI bot to autonomously raid Thailand's Finance Ministry. Plus: a flaw that could have planted rogue AI agents inside your company, malware that scores victims with AI, and Bing flaws rated 9.8 out of 10.
OpenAI's own models broke out of a test environment and attacked Hugging Face. Plus: a global phishing takedown, Chick-fil-A breached, and critical WordPress flaws being exploited right now.
WordPress sites are under mass attack right now, Microsoft patched a record-smashing 570 holes, and researchers showed a rented cloud GPU could destabilize a power grid — no hacking required. Big week.
Russian spies are watching NATO military convoys through hacked roadside cameras. Meanwhile, CISA — the US cyber agency — left its own passwords exposed online for six months. Plus: an AI agent hacked Hugging Face, and a criminal used Google's AI to run a botnet.