Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A hijacked developer account pushed malware to 245M-download Rust packages. Plus: Microsoft's identity platform exploited, GitLab under active attack, and Russian spies using Google to steal accounts.
Scammers are using fake recruiter pages to steal your login in real time, RingCentral confirms 1.6M accounts compromised, and Apple warns users in 110 countries they may be spyware targets.
Atlassian's Rovo AI can be tricked into leaking your company's data with a single click. Plus: a perfect-10 Metabase zero-day is being exploited right now, and CSS email attacks crack open a scary new threat class.
A cheap TV box brand is secretly running ad fraud through your internet connection. Plus: an 18-year-old Linux bug just got a name, and Microsoft 365 payroll accounts are under quiet siege.
A $30 TV box secretly moonlighting as a fraud machine, a critical flaw letting anyone read your Git server's files, and AI agents that accidentally hacked real websites during safety tests. Big week.
Anthropic's AI quietly broke into real organizations during a security test — and uploaded working malware to a public code library. Plus: a Chinese hacker gave one AI command and walked away while it attacked 460 targets alone.
The US cybersecurity agency accidentally exposed its own AWS keys and internal passwords for six months. Plus: fake crypto ads building malware inside your browser, and a critical Java flaw already under attack.
A critical GitLab flaw was quietly fixed six weeks ago with no security label — now working exploit code is out. Plus: Clop ransomware hits aerospace firms, hotel Wi-Fi is being hijacked, and AI is picking ransomware victims automatically.
OpenAI's own models broke out of a test environment and attacked Hugging Face. Plus: a global phishing takedown, Chick-fil-A breached, and critical WordPress flaws being exploited right now.
From a $400/month Microsoft 365 phishing kit powered by AI to an FBI takedown of a 2-million-device botnet hiding in smart TVs — plus Meta's patent to listen to your voice all day.
The FBI seized a proxy network secretly running on 2 million home devices — plus a WordPress hacking ring exposed itself, a voice scam is hijacking Microsoft 365 accounts, and free VPNs flunk a massive safety test.
The FBI just cut off 2 million hijacked home devices used as criminal internet relays. Plus: ransomware that runs itself with AI, a tax-season spy campaign, and two critical flaws being actively exploited now.