Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
GitHub's green Verified badge can be spoofed without breaking any signatures. Plus: two ancient Linux bugs go public with working exploits, and ransomware gangs just handed their attacks to an AI agent.
A ransomware group just used an AI agent to run an entire attack with no human at the keyboard. Plus: Scattered Spider guilty pleas, a hidden backdoor in millions of Tenda routers, and the FBI shuts down a botnet hiding in your smart TV.
An AI agent just pulled off a complete ransomware attack with no human at the keyboard. Plus: a UK hacking gang pleads guilty, SharePoint is being actively exploited, and a sneaky trap targeting security researchers.
Cheap Android TV boxes are secretly routing criminal traffic through your home internet. Plus: ransomware gangs are exploiting a patched Windows flaw, and AI browsers can be tricked into handing over your passwords.
Researchers found that AI coding tools like Claude Code and Cursor can be tricked into running attacker code by poisoning a Sentry error report. Plus: a Chrome zero-day confirmed in the wild, and Vietnamese hackers with a supply chain twist.
Researchers built a self-replicating worm that spreads between AI agents using only local models — no internet connection, no network traffic, nothing to detect. Plus: North Korea's fake job recruiter malware and a critical LiteLLM admin takeover bug.
Washington ordered Anthropic to cut foreign access to two AI models over a jailbreak — while Chinese hackers quietly backdoored Linux login software for nearly a decade. Plus: a Microsoft 365 flaw hiding behind a real Microsoft link.