Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
Plus: the first AI-run ransomware attack, 108 North Korean malware packages targeting developers, a Linux kernel flaw hitting Android, and the FBI tears down a botnet hiding in 2 million smart TVs.
The FBI seized a proxy network that secretly turned millions of smart TVs into cybercrime relays — plus a Linux flaw that hands attackers root access, and North Korea's 108-package supply chain attack.
The FBI shut down a botnet that hijacked 2M home TVs and streaming boxes for criminal use. Plus: a European Parliament spyware investigator was himself hacked with Pegasus, and ransomware gangs are exploiting two critical flaws right now.
An AI agent just pulled off a complete ransomware attack with no human at the keyboard. Plus: a UK hacking gang pleads guilty, SharePoint is being actively exploited, and a sneaky trap targeting security researchers.
An AI model independently invented a working browser ransomware attack that experts thought was impossible. Plus: Scattered Spider members plead guilty, a Windows flaw is being actively ransomed, and your streaming box may be spying on you.
Cheap Android TV boxes are secretly routing criminal traffic through your home internet. Plus: ransomware gangs are exploiting a patched Windows flaw, and AI browsers can be tricked into handing over your passwords.
Scattered Spider members plead guilty in the UK, two Cisco zero-days are under active attack, and that cheap Android TV box on your shelf may be routing criminal traffic through your home network.
A botnet hiding in cheap TV boxes is renting out your home internet to criminals. Plus: 430,000 firewalls breached, Scattered Spider members plead guilty, and a GitHub flaw anyone can exploit.
A Russian-linked crew ran 1.16 billion login attempts against Fortinet firewalls and walked away with credentials for 73,000 devices — including a NATO defense contractor. Plus: Splunk's emergency patch deadline and WordPress plugins secretly backdoored.
Russian hackers compromised 86,644 Fortinet firewalls using default passwords — CISA says change them now. Plus: an unpatchable exploit hits iPhones XS through 11, and international police clean 15,000 infected sites.
Credentials for 75,000 Fortinet firewalls are sitting on a hacker's server right now — your company may be on the list. Plus: a Microsoft Defender zero-day with no patch yet, and a hacker who stayed inside a network for 33 days after his server went offline.
Operation Ramz took down Sniper Dz — a platform that let anyone rent a complete phishing kit for a few dollars a month. 201 arrests across 13 countries. Plus: 400+ Arch Linux packages hijacked to steal credentials, and Europol dismantles a €336M crypto laundering service.