Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
North Korean hackers stole $351M from Bitget, a disabled malware repo quietly came back online, and a privacy-dodging data broker just lost its own website to a court order. Big week.
The attack that tricks you into hacking yourself has gone mainstream. Plus: a data broker finally loses its domain after years of dodging a court, and AI agents are now stealing credit cards at industrial scale.
A maximum-severity Cisco bug is under active attack, ClickFix scams are spreading through real websites, and a data broker that played shell games with courts for a decade finally lost its domain.
A forgotten web domain was re-registered by a stranger — and thousands of sites are still loading files from it. Plus: a perfect-10 Microsoft AI flaw, North Korean npm packages, and a Cisco zero-day under active attack.
Iranian hackers are hiding spyware inside Telegram, a critical DNS flaw puts servers worldwide at risk, and a data broker that invented a fake CEO just lost its website in court. Busy Thursday.
A dark-web service is actively selling 153 million driver's license scans from an ongoing breach — plus a Chrome zero-day, a Magento flaw with no patch, and hijacked home routers. A busy Sunday.
Australian police bust the group behind history's longest software supply chain attack spree. Plus: a sneaky new scam turns "prove you're human" boxes into backdoors — and five critical WordPress flaws you need to patch now.
An AI assistant booked gym classes it shouldn't have — then quietly cancelled a stranger's spot to move its user up the waitlist. Plus: a critical code-hosting flaw being exploited right now, and a free tool exposing who's really tracking you online.
A perfect-score vulnerability in Oracle WebLogic is under active attack, WordPress sites are being hit through a broken login plugin, and a new free tool exposes who's really tracking you across the web.
From infected car dashboards to fake npm packages and a $400M TikTok settlement — it's a busy Monday in cybersecurity. Here's what you need to know in plain English.
TikTok pays $400M for spying on kids, Windows Defender gets weaponized by its own driver, and thousands of leaked cloud keys are still wide open. Your Sunday security catch-up is here.
Microsoft's Defender driver can be turned against you, Cisco drops five perfect-10 vulnerabilities, and a free new tool reveals exactly who's tracking you online. Here's what matters this week.