Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
40 Firefox extensions were quietly stealing crypto wallets. Plus: a 9.4-rated NASA spacecraft flaw, AI-powered attacks on U.S. infrastructure, and a free tool that reveals who's really tracking you online.
A perfect-10 SAP flaw is already under attack three days after patching, Macs are being hijacked via Screen Sharing, and expired domains are being weaponized at scale. Here's what to do right now.
A $30 TV stick secretly impersonating your phone to click fake ads, OpenAI pausing its own AI for being too good at hacking, and a video-call app turned malware delivery system. Busy Monday.
A five-year-old firmware bug in a popular Bitcoin hardware wallet just cost holders $70 million. Plus: Russian spies hijacking hotel Wi-Fi, a crypto clipboard heist, and critical patches you shouldn't ignore.
Ad networks poisoned to steal crypto, Russian spies hijacking hotel Wi-Fi, a perfect-10 Adobe flaw, and how your cheap streaming box may be secretly clicking fake ads for a Chinese fraud ring.
A critical WordPress flaw lets strangers run code on any site with no login needed. Plus: CISA's own AWS keys sat exposed on GitHub for six months, and a new botnet is hoarding cloud credentials from exposed AI tools.
A ransomware attack halted all Fairlife dairy production across the U.S. Plus: a public Windows zero-day with no patch, 570 Microsoft fixes, and a clever new Mac malware that crashes your screen to steal your password.
Russian hackers are after your Signal backup keys, 236,000 crypto scam sites just got exposed, and that cheap Android TV box in your living room may be secretly working for criminals. Here's what to do.
Russian intelligence upgraded its Signal phishing campaign to steal your entire message history with one key. Plus: a $3M crypto heist, new Chinese espionage malware, and why Windows 10 users just got a surprise reprieve.
A four-year botnet secretly rented out millions of home internet connections. Plus: 73,000 Fortinet VPNs had passwords stolen, LastPass got caught in a supply chain breach, and WhatsApp is being used to hijack PCs worldwide.
A zero-day in Windows Defender lets attackers seize full control of any Windows PC — with no patch yet available. Plus: 144 poisoned npm packages, a CVSS 10.0 Joomla flaw, and a hacker who stayed inside a network for 33 days after his server went offline.
The ClickFix technique has evolved into a sophisticated malware delivery industry — three new loader families this week alone. Plus: three critical Fortinet zero-days being actively exploited, Cisco SD-WAN compromised in the wild, and a cPanel plugin flaw added to CISA's 'must-patch' list.