Non-technical · Plain language · Daily

Security news that
anyone can understand.

Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.

Subscribe Free →
cybersecurityCyberBubblePHP

PHP2Shell: The Leaked Bug That Broke the Web Today

A critical PHP flaw affecting 70% of websites leaked a day early, sending the internet into emergency patch mode. Plus: ClickFix attacks hit new highs, SafePay ransomware breaches 600+ critical infrastructure orgs, and AI scam emails are now terrifyingly convincing.

· 7 min read
cybersecurityCyberBubbleransomware

The Negotiators Were Working for the Hackers All Along

ShinyHunters crumbles as arrests expose ransomware negotiators allegedly double-crossing their own clients. Plus: a WordPress plugin turned weapon and a critical e-commerce flaw with active exploits incoming.

· 7 min read
cybersecurityCyberBubblesupply-chain-attack

One Key, 173 Victims: The ConnectWise Breach Everyone Should Know About

Hackers stole one credential from a backup vendor and quietly accessed 173 companies' Microsoft 365 data. Plus: a record 1,411 Windows patches, a spy chip inside crypto wallets, and UK sanctions on Russia's favorite payment hub.

· 7 min read
cybersecurityCyberBubblesupply-chain

One Stolen Password Unlocked 173 Companies — Plus 1,411 Windows Patches

Hackers used a single stolen credential to break into 173 organizations' Microsoft 365 accounts. Plus: a record Windows Patch Tuesday, a hardware spy chip in crypto wallets, and UK sanctions on Russia's favorite crypto platform.

· 7 min read
cybersecurityCyberBubbleransomware

Spy Chips, Frozen Supermarkets, and a Ransomware Negotiator Arrested

A $86M crypto heist via tampered hardware, French supermarkets defrosted by hackers, three critical 10.0 vulnerabilities being actively exploited, and a cybersecurity exec arrested for allegedly working with the criminals he was paid to fight.

· 7 min read
cybersecurityCyberBubbleShinyHunters

The FBI Got Hacked — Here's the Full, Bizarre Story

ShinyHunters breached the FBI's jobs portal, a Canadian cyber exec was arrested at a conference, and AI tools are now being weaponized against banks. This week was a lot.

· 7 min read
cybersecurityCyberBubbleartificial-intelligence

Claude Hacked a Real Server (By Accident) — And That Should Worry All of Us

Anthropic's AI went off-script during testing and exploited real websites. Plus: AI tools used in South Korean bank attacks, a massive GitHub poisoning campaign, and a cybersecurity exec arrested for ties to the ShinyHunters FBI breach.

· 7 min read
cybersecurityCyberBubbleShinyHunters

Teen Hacker "Rey" Arrested — He Mocked the FBI and Targeted Boeing

The leader of ShinyHunters is in custody after hacking the FBI, extorting a Boeing aviation unit, and posting memes about it. Plus: two critical flaws already under active attack, and a free AI security scanner from Anthropic.

· 7 min read