Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
The FBI upgraded its Signal warning: Russian intelligence is now stealing backup recovery keys that let attackers read your entire message history — even after you switch phones. Plus: Scattered Spider guilty pleas, a $3M crypto heist, and malware designed to fool AI.
Cheap Android TV boxes are secretly renting your home internet to criminals. Plus: two Linux bugs with working exploits, a critical industrial software flaw under active attack, and Scattered Spider members plead guilty in London.
Scattered Spider members plead guilty in the UK, two Cisco zero-days are under active attack, and that cheap Android TV box on your shelf may be routing criminal traffic through your home network.
A Russian operation quietly planted sniffers inside 430,000 Fortinet firewalls and walked away with 110 million stolen credentials. Plus: the video decoder bug hiding in your media server.
A botnet hiding in cheap TV boxes is renting out your home internet to criminals. Plus: 430,000 firewalls breached, Scattered Spider members plead guilty, and a GitHub flaw anyone can exploit.
A Russian-linked crew ran 1.16 billion login attempts against Fortinet firewalls and walked away with credentials for 73,000 devices — including a NATO defense contractor. Plus: Splunk's emergency patch deadline and WordPress plugins secretly backdoored.
A four-year botnet secretly rented out millions of home internet connections. Plus: 73,000 Fortinet VPNs had passwords stolen, LastPass got caught in a supply chain breach, and WhatsApp is being used to hijack PCs worldwide.
Russian hackers compromised 86,644 Fortinet firewalls using default passwords — CISA says change them now. Plus: an unpatchable exploit hits iPhones XS through 11, and international police clean 15,000 infected sites.
Credentials for 75,000 Fortinet firewalls are sitting on a hacker's server right now — your company may be on the list. Plus: a Microsoft Defender zero-day with no patch yet, and a hacker who stayed inside a network for 33 days after his server went offline.
A zero-day in Windows Defender lets attackers seize full control of any Windows PC — with no patch yet available. Plus: 144 poisoned npm packages, a CVSS 10.0 Joomla flaw, and a hacker who stayed inside a network for 33 days after his server went offline.
The ClickFix technique has evolved into a sophisticated malware delivery industry — three new loader families this week alone. Plus: three critical Fortinet zero-days being actively exploited, Cisco SD-WAN compromised in the wild, and a cPanel plugin flaw added to CISA's 'must-patch' list.
A China-linked group spent a year inside research networks by silently rewiring Google Workspace email forwarding. No password stolen, no malware dropped — just quiet redirection. Plus: a Palo Alto VPN bypass, 152 fake Chrome extensions, and backdoored WordPress plugins.