Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A hijacked developer account pushed malware to 245M-download Rust packages. Plus: Microsoft's identity platform exploited, GitLab under active attack, and Russian spies using Google to steal accounts.
40 Firefox extensions were quietly stealing crypto wallets. Plus: a 9.4-rated NASA spacecraft flaw, AI-powered attacks on U.S. infrastructure, and a free tool that reveals who's really tracking you online.
Hackers are actively exploiting a macOS Screen Sharing flaw to break into Macs without a password — plus a 30-domain Mac malware campaign, a RingCentral breach, and 500+ ransomware hits on US infrastructure.
Ransomware gangs are actively exploiting a Windows flaw, a hacker claims 3.6 million Azure employee records stolen via reused passwords, and a free new tool reveals who's really tracking you online.
A zero-click Android exploit needs no tap, no link — just an answered video call. Plus: Mac miners, a perfect-10 SAP flaw, a Microsoft Defender zero-day, and 678K French tax records stolen.
Hackers are already exploiting two critical vulnerabilities — one lets strangers into your Mac, the other breaks Windows Defender. Plus: how criminals spent $7M buying expired websites to scam you.
A perfect-10 SAP flaw is already under attack three days after patching, Macs are being hijacked via Screen Sharing, and expired domains are being weaponized at scale. Here's what to do right now.
Scammers are using fake recruiter pages to steal your login in real time, RingCentral confirms 1.6M accounts compromised, and Apple warns users in 110 countries they may be spyware targets.
Lazarus Group is using a Windows zero-day to hit defense firms, 737 fake Chrome VPN extensions were caught spying on users, and a critical SharePoint flaw is being actively exploited. Here's what to do about all of it.
A $30 TV stick secretly impersonating your phone to click fake ads, OpenAI pausing its own AI for being too good at hacking, and a video-call app turned malware delivery system. Busy Monday.
Atlassian's Rovo AI can be tricked into leaking your company's data with a single click. Plus: a perfect-10 Metabase zero-day is being exploited right now, and CSS email attacks crack open a scary new threat class.
A $30 TV box secretly moonlighting as a fraud machine, a critical flaw letting anyone read your Git server's files, and AI agents that accidentally hacked real websites during safety tests. Big week.