Another huge leak of passwords is the tip of the infostealing iceberg
An unprotected database that spilled 149 million usernames and passwords to the web shines new light on how infostealing malware powers cybercrime.
this week in security — january 25 2026 edition
DHS memo challenges Fourth Amendment, DOGE may have misused Social Security data, Russia's Sandworm blamed for failed Poland power outage, and more.
this week in security — january 18 2026 edition
FBI searches journalist's home, Flock redaction errors expose police targets, millions of headphones at risk of eavesdropping, a slew of 10/10 bugs, and more.
TriZetto failed to stop hackers stealing Americans' health data for a year
The health tech giant, which supports 200 million people, said hackers accessed sensitive personal and health data, and has begun notifying millions of victims.
this week in security — january 11 2026 edition
pcTattletale founder guilty, hackers breach New Zealanders' health data, Iran cuts off internet amid protests, Instagram data leak, Flock security lapse, and more.
ClickFix attacks are increasingly devious, dangerous, and can hack you in an instant
These attacks spoof Windows errors, CAPTCHAs, and real login pages to trick victims into hacking themselves with malware that skirts common cyber defenses.
this week in security — january 4 2026 edition
MongoBleed bug exploited globally, U.S. lifts sanctions on spyware executives, calls for digital independence from Silicon Valley, Kimwolf's huge botnet, and more.
this week in security — december 21 2025 edition
Mixpanel breach spreads to Pornhub; new Cisco zero-day under attack; French and U.K. governments hacked; TV makers sued for taking screenshots; and more.
Apple nuking a customer's account over a bad gift card is a warning for everyone
One long-time Apple customer was left with no recourse after a bad gift card triggered a full account and device lock-out.
this week in security — december 14 2025 edition
U.S. wants travelers to submit social media history; Petco's lapses exposed data; tech giants patch zero-days; Coupang CEO resigns after breach; and more
Last-minute cybersecurity and privacy gifts your friends and family won't hate
Running out of gift ideas for the security or privacy buff in your life? Here are some thoughtful suggestions, including what tech you might want to avoid.
this week in security — december 7 2025 edition
India scraps mandatory phone app, Coupang breach rocks South Korea, critical React and Next.js bug under attack, Brickstorm malware warning, and more.
