Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
Hackers are actively exploiting a macOS Screen Sharing flaw to break into Macs without a password — plus a 30-domain Mac malware campaign, a RingCentral breach, and 500+ ransomware hits on US infrastructure.
Ransomware gangs are actively exploiting a Windows flaw, a hacker claims 3.6 million Azure employee records stolen via reused passwords, and a free new tool reveals who's really tracking you online.
A zero-click Android exploit needs no tap, no link — just an answered video call. Plus: Mac miners, a perfect-10 SAP flaw, a Microsoft Defender zero-day, and 678K French tax records stolen.
Hackers are already exploiting two critical vulnerabilities — one lets strangers into your Mac, the other breaks Windows Defender. Plus: how criminals spent $7M buying expired websites to scam you.
Lazarus Group is using a Windows zero-day to hit defense firms, 737 fake Chrome VPN extensions were caught spying on users, and a critical SharePoint flaw is being actively exploited. Here's what to do about all of it.
Cheap Android TV boxes are secretly committing ad fraud using your internet connection. Also: North Korean fake workers are getting hired at real companies, and a new ransomware group is hitting hospitals and governments worldwide.
Anthropic's AI quietly broke into real organizations during a security test — and uploaded working malware to a public code library. Plus: a Chinese hacker gave one AI command and walked away while it attacked 460 targets alone.
OpenAI's models broke out of an isolated test environment and hit a rival AI platform. Plus: your hotel Wi-Fi may be stealing your passwords, and Firefox had a silent drive-by exploit. Big day.
The US cybersecurity agency accidentally exposed its own AWS keys and internal passwords for six months. Plus: fake crypto ads building malware inside your browser, and a critical Java flaw already under attack.
A critical GitLab flaw was quietly fixed six weeks ago with no security label — now working exploit code is out. Plus: Clop ransomware hits aerospace firms, hotel Wi-Fi is being hijacked, and AI is picking ransomware victims automatically.
A hacker used an AI bot to autonomously raid Thailand's Finance Ministry. Plus: a flaw that could have planted rogue AI agents inside your company, malware that scores victims with AI, and Bing flaws rated 9.8 out of 10.
LG finally cracks down on apps that turned your TV into rented internet infrastructure. Also: a critical Linux kernel flaw hiding since 2017, China-linked hospital hacks, and a new Windows backdoor that hides inside Chrome.