Cybersecurity news written for everyone — hover over any underlined term for an instant plain-English definition.
Subscribe Free →Latest issues
A dark web service is selling your driver's license scan — and it may trace back to a car rental counter. Plus: a Chrome zero-day being exploited right now, and 440,000 attacks on WordPress sites.
Australian police bust the group behind history's longest software supply chain attack spree. Plus: a sneaky new scam turns "prove you're human" boxes into backdoors — and five critical WordPress flaws you need to patch now.
A perfect-score vulnerability in Oracle WebLogic is under active attack, WordPress sites are being hit through a broken login plugin, and a new free tool exposes who's really tracking you across the web.
WordPress sites are under mass attack right now, Microsoft patched a record-smashing 570 holes, and researchers showed a rented cloud GPU could destabilize a power grid — no hacking required. Big week.
A critical WordPress flaw lets strangers run code on any site with no login needed. Plus: CISA's own AWS keys sat exposed on GitHub for six months, and a new botnet is hoarding cloud credentials from exposed AI tools.
A working exploit for a critical WordPress flaw is public, a botnet is raiding AI tools for cloud keys, and CISA published a frank confession about leaving its own credentials exposed for six months. Big week.
A Russian-linked crew ran 1.16 billion login attempts against Fortinet firewalls and walked away with credentials for 73,000 devices — including a NATO defense contractor. Plus: Splunk's emergency patch deadline and WordPress plugins secretly backdoored.
Russian hackers compromised 86,644 Fortinet firewalls using default passwords — CISA says change them now. Plus: an unpatchable exploit hits iPhones XS through 11, and international police clean 15,000 infected sites.
A China-linked group spent a year inside research networks by silently rewiring Google Workspace email forwarding. No password stolen, no malware dropped — just quiet redirection. Plus: a Palo Alto VPN bypass, 152 fake Chrome extensions, and backdoored WordPress plugins.