I've investigated 'stalkerware' for five years. Here's what I've learned
Stalkerware is a pervasive surveillance used by millions around the world, but these operations keep getting hacked and leaking victims' private phone data.
this week in security — november 30 2025 edition
Prolific hacker outed as Jordanian teen, Shai-Halud worm hacks thousands of devs, FCC warns of emergency alert hijacks, Mixpanel breach hits OpenAI, and more.
Banning TP-Link won't save America from its own terrible cybersecurity
TP-Link routers face a ban in the U.S. over the company's alleged links to China, but shoddy cybersecurity is the real insider threat to the United States.
this week in security — november 23 2025 edition
Gainsight breach hits 200 companies; airlines to stop selling ticket data to the government; bank data stolen in SitusAMC hack; DoorDash breach, and more.
this week in security — november 16 2025 edition
NSO Group now under U.S. ownership, EU considers weakening GDPR for AI, ClickFix attacks on the rise, U.S. agencies hacked via Cisco bugs, and more.
It's far too easy to find leaked passports and driver's licenses online
Passports and driver's licenses are easy to find online, thanks to a dizzying array of websites and apps that require a copy but aren't keeping the data safe.
Working in partnership, this week in security and DataBreaches.net wanted to hear from security researchers and journalists about their experiences facing or receiving legal demands and criminal threats as part of their work.
The survey is now closed and the results are in. Thanks so much to everyone who contributed!
this week in security — november 9 2025 edition
SonicWall blames nation-state for theft of firewall backups, CBO hacked, Korea Telecom covered up hacks, North Korea's remote IT workers' scheme, and more.
Thousands of North Koreans have secretly infiltrated US and European companies as remote IT workers
North Korea's secret remote workers are a major threat facing U.S. and European businesses today, taking jobs in Fortune 100 and smaller companies alike. Here's how to recognize and combat the threat.
this week in security — november 2 2025 edition
Ex-Trenchant boss guilty of selling exploits, U.S. may ban TP-Link products, CIA hacked Venezeulan intelligence, EY data breach, Azure outage, and more.
this week in security — october 26 2025 edition
DOJ says Trenchant boss sold secrets to Russian buyer, U.S. 'slipping' on cyber, Microsoft patches exploited Windows bug, AI browser security, and more.
AI browsers are a hot mess of security risks
AI-enabled web browsers are putting their users' data, security, and privacy at risk from rudimentary prompt injection attacks.
