Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A zero-click Android exploit needs no tap, no link — just an answered video call. Plus: Mac miners, a perfect-10 SAP flaw, a Microsoft Defender zero-day, and 678K French tax records stolen.
Hackers are already exploiting two critical vulnerabilities — one lets strangers into your Mac, the other breaks Windows Defender. Plus: how criminals spent $7M buying expired websites to scam you.
A perfect-10 SAP flaw is already under attack three days after patching, Macs are being hijacked via Screen Sharing, and expired domains are being weaponized at scale. Here's what to do right now.
Scammers are using fake recruiter pages to steal your login in real time, RingCentral confirms 1.6M accounts compromised, and Apple warns users in 110 countries they may be spyware targets.
Lazarus Group is using a Windows zero-day to hit defense firms, 737 fake Chrome VPN extensions were caught spying on users, and a critical SharePoint flaw is being actively exploited. Here's what to do about all of it.
Cheap Android TV boxes are secretly committing ad fraud using your internet connection. Also: North Korean fake workers are getting hired at real companies, and a new ransomware group is hitting hospitals and governments worldwide.
A $30 TV stick secretly impersonating your phone to click fake ads, OpenAI pausing its own AI for being too good at hacking, and a video-call app turned malware delivery system. Busy Monday.
Atlassian's Rovo AI can be tricked into leaking your company's data with a single click. Plus: a perfect-10 Metabase zero-day is being exploited right now, and CSS email attacks crack open a scary new threat class.
Atlassian's Rovo AI was tricked into leaking internal files. A perfect-10 Metabase zero-day is being actively exploited. And a cheap TV box on your shelf may be committing ad fraud right now.
A cheap TV box brand is secretly running ad fraud through your internet connection. Plus: an 18-year-old Linux bug just got a name, and Microsoft 365 payroll accounts are under quiet siege.
Cheap Android TV boxes are secretly clicking fake ads and renting out your internet. Also: hackers hit water utilities in 7 states, $5.7M drained from crypto wallets, and Apple's privacy tool has a leak.
A $30 TV box secretly moonlighting as a fraud machine, a critical flaw letting anyone read your Git server's files, and AI agents that accidentally hacked real websites during safety tests. Big week.