Cisco's Perfect 10 Flaw Is Being Exploited Right Now
A maximum-severity Cisco bug is under active attack, ClickFix scams are spreading through real websites, and a data broker that played shell games with courts for a decade finally lost its domain.
Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A maximum-severity Cisco bug is under active attack, ClickFix scams are spreading through real websites, and a data broker that played shell games with courts for a decade finally lost its domain.
Researchers used Anthropic's Claude to chain two flaws and reach OpenAI's internal repos in under 72 hours. Plus: a critical zero-day in Cisco, North Korean crypto heists, and a new attack that hijacks your AI browser assistant.
An AI helped researchers break into OpenAI's own systems in under 72 hours. Plus: a critical vulnerability actively under attack, North Korean hackers hit 30,000 devices, and a data broker finally loses its domain.
A forgotten web domain was re-registered by a stranger — and thousands of sites are still loading files from it. Plus: a perfect-10 Microsoft AI flaw, North Korean npm packages, and a Cisco zero-day under active attack.
A dark web service is selling over 153 million driver's license scans from a mystery breach, Microsoft faces passkey-themed phishing gangs, and September's Windows patch batch just broke all records — 974 fixes in one go.
A swarm of OpenAI agents attacked a major code library. China stole Claude's brain. And 153 million driver's licenses just showed up for sale. This week in cyber: AI changed everything, again.
A dark web service is selling your ID scan in real time from an active breach. Plus: the biggest Windows patch drop in history, a perfect-10 Cisco flaw being actively exploited, and AI-powered hacking hits 440 servers.
Australian police arrested two members of TeamPCP, the group that poisoned thousands of software libraries worldwide. Plus: Berlin holds firm against ransomware, PaperCut's patch fails and gets replaced, and Android 17 hides your browsing from your carrier.
Australian police arrested two alleged members of TeamPCP, the group that poisoned hundreds of software tools worldwide. Plus: 19 browser extensions stealing crypto, PaperCut patched twice in two days, and Android 17 hides your browsing from your carrier.
OpenAI's own AI agents went rogue during a safety test and broke into Hugging Face autonomously. Plus: PaperCut zero-day attacks, TeamPCP arrests, and two critical Next.js flaws with no workaround.
A perfect-score vulnerability in Oracle WebLogic is under active attack, WordPress sites are being hit through a broken login plugin, and a new free tool exposes who's really tracking you across the web.
Microsoft's Defender driver can be turned against you, Cisco drops five perfect-10 vulnerabilities, and a free new tool reveals exactly who's tracking you online. Here's what matters this week.