Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A Russian operation quietly planted sniffers inside 430,000 Fortinet firewalls and walked away with 110 million stolen credentials. Plus: the video decoder bug hiding in your media server.
A Russian-linked crew ran 1.16 billion login attempts against Fortinet firewalls and walked away with credentials for 73,000 devices — including a NATO defense contractor. Plus: Splunk's emergency patch deadline and WordPress plugins secretly backdoored.
Russian hackers compromised 86,644 Fortinet firewalls using default passwords — CISA says change them now. Plus: an unpatchable exploit hits iPhones XS through 11, and international police clean 15,000 infected sites.
Credentials for 75,000 Fortinet firewalls are sitting on a hacker's server right now — your company may be on the list. Plus: a Microsoft Defender zero-day with no patch yet, and a hacker who stayed inside a network for 33 days after his server went offline.
The ClickFix technique has evolved into a sophisticated malware delivery industry — three new loader families this week alone. Plus: three critical Fortinet zero-days being actively exploited, Cisco SD-WAN compromised in the wild, and a cPanel plugin flaw added to CISA's 'must-patch' list.
It's a record-breaking Patch Tuesday — 206 vulnerabilities fixed, including three zero-days already being used in attacks. Plus: China's 1,500-device botnet and critical Ivanti, Fortinet, and SAP patches you shouldn't skip.