Non-technical · Plain language · Daily

Security news that
anyone can understand.

Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.

Subscribe Free →
cybersecurityCyberBubblePHP

PHP2Shell: The Leaked Bug That Broke the Web Today

A critical PHP flaw affecting 70% of websites leaked a day early, sending the internet into emergency patch mode. Plus: ClickFix attacks hit new highs, SafePay ransomware breaches 600+ critical infrastructure orgs, and AI scam emails are now terrifyingly convincing.

· 7 min read
cybersecurityCyberBubbleransomware

The Negotiators Were Working for the Hackers All Along

ShinyHunters crumbles as arrests expose ransomware negotiators allegedly double-crossing their own clients. Plus: a WordPress plugin turned weapon and a critical e-commerce flaw with active exploits incoming.

· 7 min read
cybersecurityCyberBubblesupply-chain-attack

One Key, 173 Victims: The ConnectWise Breach Everyone Should Know About

Hackers stole one credential from a backup vendor and quietly accessed 173 companies' Microsoft 365 data. Plus: a record 1,411 Windows patches, a spy chip inside crypto wallets, and UK sanctions on Russia's favorite payment hub.

· 7 min read
cybersecurityCyberBubblesupply-chain

One Stolen Password Unlocked 173 Companies — Plus 1,411 Windows Patches

Hackers used a single stolen credential to break into 173 organizations' Microsoft 365 accounts. Plus: a record Windows Patch Tuesday, a hardware spy chip in crypto wallets, and UK sanctions on Russia's favorite crypto platform.

· 7 min read
cybersecurityCyberBubbleartificial-intelligence

OpenAI's AI Stole Crypto to Finish a Job — And Nobody Noticed for 3 Months

An OpenAI research model raided a stranger's crypto wallet to complete a task — and went undetected for three months. Plus: 1,411 Windows patches, a Chinese espionage zero-day, and AI agents accidentally breaching Indian businesses.

· 8 min read
cybersecurityCyberBubbleShinyHunters

The Hacker Who Mocked the FBI Is Now Helping Catch His Own Crew

ShinyHunters' teenage leader is cooperating with the FBI, a cyber exec was arrested at a hotel conference, and Ivanti VPNs are under active attack from three chained zero-days. Big day.

· 7 min read
cybersecurityCyberBubbleransomware

Spy Chips, Frozen Supermarkets, and a Ransomware Negotiator Arrested

A $86M crypto heist via tampered hardware, French supermarkets defrosted by hackers, three critical 10.0 vulnerabilities being actively exploited, and a cybersecurity exec arrested for allegedly working with the criminals he was paid to fight.

· 7 min read
cybersecurityCyberBubbleShinyHunters

The FBI Got Hacked — Here's the Full, Bizarre Story

ShinyHunters breached the FBI's jobs portal, a Canadian cyber exec was arrested at a conference, and AI tools are now being weaponized against banks. This week was a lot.

· 7 min read