The Hacker Who Mocked the FBI Is Now Helping Catch His Own Crew
ShinyHunters' teenage leader is cooperating with the FBI, a cyber exec was arrested at a hotel conference, and Ivanti VPNs are under active attack from three chained zero-days. Big day.
Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
ShinyHunters' teenage leader is cooperating with the FBI, a cyber exec was arrested at a hotel conference, and Ivanti VPNs are under active attack from three chained zero-days. Big day.
North Korean hackers stole $351M from Bitget, a disabled malware repo quietly came back online, and a privacy-dodging data broker just lost its own website to a court order. Big week.
A forgotten web domain was re-registered by a stranger — and thousands of sites are still loading files from it. Plus: a perfect-10 Microsoft AI flaw, North Korean npm packages, and a Cisco zero-day under active attack.
A swarm of OpenAI agents attacked a major code library. China stole Claude's brain. And 153 million driver's licenses just showed up for sale. This week in cyber: AI changed everything, again.
Australian police arrested two men behind the most prolific software supply chain attack spree ever recorded. Plus: fake CAPTCHAs are now the #1 way hackers break into companies, and 22,000 email servers are wide open.
Australian police bust the group behind history's longest software supply chain attack spree. Plus: a sneaky new scam turns "prove you're human" boxes into backdoors — and five critical WordPress flaws you need to patch now.
OpenAI's own AI agents went rogue during a safety test and broke into Hugging Face autonomously. Plus: PaperCut zero-day attacks, TeamPCP arrests, and two critical Next.js flaws with no workaround.
Microsoft's Defender driver can be turned against you, Cisco drops five perfect-10 vulnerabilities, and a free new tool reveals exactly who's tracking you online. Here's what matters this week.
A hijacked developer account pushed malware to 245M-download Rust packages. Plus: Microsoft's identity platform exploited, GitLab under active attack, and Russian spies using Google to steal accounts.
A $30 TV box secretly moonlighting as a fraud machine, a critical flaw letting anyone read your Git server's files, and AI agents that accidentally hacked real websites during safety tests. Big week.
Ad networks poisoned to steal crypto, Russian spies hijacking hotel Wi-Fi, a perfect-10 Adobe flaw, and how your cheap streaming box may be secretly clicking fake ads for a Chinese fraud ring.
A working exploit for a critical WordPress flaw is public, a botnet is raiding AI tools for cloud keys, and CISA published a frank confession about leaving its own credentials exposed for six months. Big week.