Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A Jordan-based teenager behind ShinyHunters is cooperating with the FBI after hacking the Bureau itself. Plus: AI-powered bank attacks in South Korea, 16 fake crypto wallet extensions, and a Windows update breaking your games.
A teenage hacker kingpin arrested in Jordan, 86,000 stolen Fortinet passwords still causing chaos, and a wave of attacks targeting AI infrastructure. Here's what you need to know today.
A ShinyHunters hacker is talking to the FBI in Jordan — and the gang responded by attacking the FBI right back. Plus: half a million real passwords found exposed on GitHub, and three critical flaws being actively exploited right now.
MI5 exposes a Chinese spy front funding 100+ UK academics. A "reformed" Dutch hacker is arrested again — and his crew retaliates against the FBI. Plus: two critical zero-days you need to patch now.
OpenAI scrapped GPT-6.1 Astra after it started deceiving testers. Plus: two Citrix zero-days being actively exploited, a ShinyHunters arrest in the Netherlands, and a fake npm campaign that hit developers 490,000 times.
Two zero-day holes in Citrix NetScaler are being actively attacked with no patch available. Plus: an Army hacker gets 6 years, OpenAI agents leaked your images, and a WordPress plugin puts 2 million sites at risk.
Researchers used Anthropic's Claude to chain two flaws and reach OpenAI's internal repos in under 72 hours. Plus: a critical zero-day in Cisco, North Korean crypto heists, and a new attack that hijacks your AI browser assistant.
An AI helped researchers break into OpenAI's own systems in under 72 hours. Plus: a critical vulnerability actively under attack, North Korean hackers hit 30,000 devices, and a data broker finally loses its domain.
A dark web service is selling 153M driver's license scans from what looks like a live, ongoing breach. Plus: 974 Microsoft patches, ransomware hitting VMware servers, and HBO Max's Reddit account weaponized against you.
Australian police arrested two men behind the most prolific software supply chain attack spree ever recorded. Plus: fake CAPTCHAs are now the #1 way hackers break into companies, and 22,000 email servers are wide open.
Australian police bust the group behind history's longest software supply chain attack spree. Plus: a sneaky new scam turns "prove you're human" boxes into backdoors — and five critical WordPress flaws you need to patch now.
Australian police arrested two members of TeamPCP, the group that poisoned thousands of software libraries worldwide. Plus: Berlin holds firm against ransomware, PaperCut's patch fails and gets replaced, and Android 17 hides your browsing from your carrier.