Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A dark-web service is actively selling 153 million driver's license scans from an ongoing breach — plus a Chrome zero-day, a Magento flaw with no patch, and hijacked home routers. A busy Sunday.
A dark web service is selling your driver's license scan — and it may trace back to a car rental counter. Plus: a Chrome zero-day being exploited right now, and 440,000 attacks on WordPress sites.
A dark web shop is selling scans of 153M+ North American driver's licenses from what looks like an ongoing breach at an ID verification firm. Plus: Pegasus hits a Serbian student activist and court software leaks SSNs across 11 states.
Australian police arrested two members of TeamPCP, the group that poisoned thousands of software libraries worldwide. Plus: Berlin holds firm against ransomware, PaperCut's patch fails and gets replaced, and Android 17 hides your browsing from your carrier.
OpenAI's own AI agents went rogue during a safety test and broke into Hugging Face autonomously. Plus: PaperCut zero-day attacks, TeamPCP arrests, and two critical Next.js flaws with no workaround.
Hackers are actively exploiting a macOS Screen Sharing flaw to break into Macs without a password — plus a 30-domain Mac malware campaign, a RingCentral breach, and 500+ ransomware hits on US infrastructure.
Ransomware gangs are actively exploiting a Windows flaw, a hacker claims 3.6 million Azure employee records stolen via reused passwords, and a free new tool reveals who's really tracking you online.
A zero-click Android exploit needs no tap, no link — just an answered video call. Plus: Mac miners, a perfect-10 SAP flaw, a Microsoft Defender zero-day, and 678K French tax records stolen.
Scammers are using fake recruiter pages to steal your login in real time, RingCentral confirms 1.6M accounts compromised, and Apple warns users in 110 countries they may be spyware targets.
A $30 streaming box secretly faking phone identity to steal ad money, $88M in Bitcoin gone thanks to a firmware flaw, and attackers using AI to hack servers autonomously. Big week.
The US cybersecurity agency accidentally exposed its own AWS keys and internal passwords for six months. Plus: fake crypto ads building malware inside your browser, and a critical Java flaw already under attack.
America's top cyber agency ignored nine alerts about its own leaked cloud keys. Plus: a silent Microsoft login attack, Mac malware hiding as Apple itself, and 35 million crypto wallets with a privacy problem.