Non-technical · Plain language · Daily

Security news that
anyone can understand.

Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.

Subscribe Free →
cybersecurityCyberBubbleSignal

Russia's Signal Attack Just Got Nastier — Here's the 30-Second Fix

Russian intelligence upgraded its Signal phishing campaign to steal your entire message history with one key. Plus: a $3M crypto heist, new Chinese espionage malware, and why Windows 10 users just got a surprise reprieve.

· 7 min read
cybersecurityCyberBubbleChina APT

China Stole Medical Research Emails — Without Ever Breaking In

A China-linked group spent a year inside research networks by silently rewiring Google Workspace email forwarding. No password stolen, no malware dropped — just quiet redirection. Plus: a Palo Alto VPN bypass, 152 fake Chrome extensions, and backdoored WordPress plugins.

· 7 min read
cybersecurityCyberBubblesupply chain attack

The Backdoor That Waited Nine Years

China-linked hackers replaced Linux login software with backdoored copies in 2016 — and nobody noticed until now. Plus: a Microsoft 365 AI flaw that stole emails via a real microsoft.com link, and a critical Splunk hole with no auth required.

· 7 min read
cybersecurityCyberBubbleAI security

The U.S. Government Just Told an AI Company to Shut Down

Washington ordered Anthropic to cut foreign access to two AI models over a jailbreak — while Chinese hackers quietly backdoored Linux login software for nearly a decade. Plus: a Microsoft 365 flaw hiding behind a real Microsoft link.

· 7 min read