Zack Whittaker

Zack Whittaker

Zack is the author of ~this week in security~.
12
Oct
'26

PSA: How to check if that Amazon call, email, or text message is a scam

The message verification feature lets you check if outreach is real — or a scam.
2 min read
a photo of Amazon's logo on a building in a background, with blue-tinted windows, and a grey-ish cloud overhead.
11
Oct
'26

this week in security — october 11 2026 edition

Ransomware recovery CEO allegedly paid hackers, FBI closes in on ShinyHunters, Asos hit by high-profile breach, Denmark's national ID database hacked, a bunch of zero-days under attack, hackers spoof Google's HTTPS certificates, and more.
9 min read
07
Oct
'26

What can we learn from the data breaches of FBI and Pentagon personnel records?

Four takeaways from the biggest counterintelligence disasters in recent U.S. history.
5 min read
a photo of a dark room as a fusion technical operations center, with tiled displays on the far wall and several agents sitting at computers with blurry intelligence and maps on their screens.
04
Oct
'26

this week in security — october 4 2026 edition

Millions of U.S. military staff hit by Pentagon data breach, ShinyHunters hackers arrested, Citrix NetScaler bugs mass-hacked, U.K. facial recognition trial fails, the U.S. spyware with no 'kill switch', Apple to revoke Mac "full disk access," a huge batch of passports exposed online, and more.
10 min read
02
Oct
'26

Assume compromise: Hackers are mass-exploiting Citrix NetScaler systems in ongoing cyberattacks

Organizations around the world are pulling affected Citrix NetScaler servers out of service, causing outages and public-facing disruption.
3 min read
a photo of a bunch of red ethernet cables plugged into ports on a router, in a server rack in a darkened datacenter room; the lights are flashing on the back of the ethernet cables.
30
Sep
'26

How a phone call allowed a hacker to steal millions of people's personal data

Financially motivated hackers are calling and tricking employees into handing over their passwords in highly effective voice-phishing attacks.
9 min read
a photo looking down from the first-person perspective of a person's hands holding an iPhone taking a phone call, the caller ID says "Ruby".
27
Sep
'26

this week in security — september 27 2026 edition

Hackers steal FBI agents' personal data, OpenAI models hacked government websites, North Korea scores new record-breaking crypto theft, Kiteworks urges customers to shut down servers, Russia's hybrid war intensifies, and more.
11 min read
20
Sep
'26

this week in security — september 20 2026 edition

Hackers reveal Flock cameras are Android phones on sticks, U.S. agencies board hacked oil tankers, ClickFix hacks go viral, Google infiltrated TeamPCP, U.S. declares it has orbital space weapons, NSA reorganization, and more.
10 min read
19
Sep
'26

IDScan confirms hackers stole millions of driver's licenses during data breach

The ID verification giant confirmed the breach lasted at least several months and implied that the hackers are extorting the company for a ransom.
4 min read
a photo of a collection of U.S. fake driver's licenses scattered across a table randomly
16
Sep
'26

A breach of over 150 million U.S. and Canadian driver's license photos is an anonymity disaster

The breach links the names and photos of millions of people across North America. One expert said this is likely the largest database of facial images ever breached.
8 min read
a modified and blurry photo of Pete Hegseth's driver's license photo scan available for sale on a dark web search site. some of the data is redacted.
13
Sep
'26

this week in security — september 13 2026 edition

Berlin responding to data breach ahead of elections, Apple to roll out 'always-listening' features, experts stress-test GPS jamming attacks, Russians are targeting sub-sea cables, FBI says don't let AI distract from the security basics, and more.
9 min read
12
Sep
'26

Watch what you say: Apple opens the door to a nightmare world of always-listening tech

Apple's new upcoming ambient audio recording features set a risky precedent in normalizing intrusive surveillance. Privacy experts weigh in.
4 min read
a screenshot from this week's Apple event, which shows a person looking at their Apple Watch on their wrist, which is in the "Rewind" app, and says: "Caesar salad, cobb salad, lentil soup..."