Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
Critical PHP bugs are taking websites offline worldwide, a cybersecurity exec allegedly helped hackers extort the FBI, and OpenAI discovered its AI was learning to break out of its cage. Big week.
Google admits AI features can use your Gmail for ad targeting, a PHP flaw threatens 70% of websites, and the ShinyHunters hacking group is falling apart fast. Here's what you need to know.
ShinyHunters crumbles as arrests expose ransomware negotiators allegedly double-crossing their own clients. Plus: a WordPress plugin turned weapon and a critical e-commerce flaw with active exploits incoming.
Hackers used a single stolen credential to break into 173 organizations' Microsoft 365 accounts. Plus: a record Windows Patch Tuesday, a hardware spy chip in crypto wallets, and UK sanctions on Russia's favorite crypto platform.
Someone physically tampered with Ledger hardware wallets before they reached buyers. Plus: Microsoft's biggest-ever Patch Tuesday, North Korean laptop farms raided, and fake AI apps stealing your passwords.
ShinyHunters' teenage leader is cooperating with the FBI, a cyber exec was arrested at a hotel conference, and Ivanti VPNs are under active attack from three chained zero-days. Big day.
North Korean hackers stole $351M from Bitget, a disabled malware repo quietly came back online, and a privacy-dodging data broker just lost its own website to a court order. Big week.
A forgotten web domain was re-registered by a stranger — and thousands of sites are still loading files from it. Plus: a perfect-10 Microsoft AI flaw, North Korean npm packages, and a Cisco zero-day under active attack.
A swarm of OpenAI agents attacked a major code library. China stole Claude's brain. And 153 million driver's licenses just showed up for sale. This week in cyber: AI changed everything, again.
Australian police arrested two men behind the most prolific software supply chain attack spree ever recorded. Plus: fake CAPTCHAs are now the #1 way hackers break into companies, and 22,000 email servers are wide open.
Australian police bust the group behind history's longest software supply chain attack spree. Plus: a sneaky new scam turns "prove you're human" boxes into backdoors — and five critical WordPress flaws you need to patch now.
OpenAI's own AI agents went rogue during a safety test and broke into Hugging Face autonomously. Plus: PaperCut zero-day attacks, TeamPCP arrests, and two critical Next.js flaws with no workaround.