Cybersecurity

A US government entity paid around $1m to stop stolen files from being published, according to a case study by researcher Rakesh Krishnan for Ransom-ISAC. The a

Dream, the Israeli AI cybersecurity startup that tripled its valuation to $3 billion this year, is expanding into Latin America. The company is targeting govern

Security researchers at JFrog have identified a set of malicious npm packages linked to North Korean threat actors that impersonate legitimate Rollup polyfill t

Stelios Kouloglou spent two years on the European Parliament committee set up to investigate governments spying on their own citizens with commercial hacking to

Touted as a less-hookup-focused Grindr, Goose is an invite-only space for gay men. The problem is the people promoting it don’t seem real.

A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal, using fake PDFs, geofencing, and a payload hidden inside

Connecting to the wrong network can put your data at risk. Android can warn you, but only if you allow it.

Some crawlers gather data for both search and AI training, so when publishers block them to protect content they risk disappearning from search results ...

Got important chats older than 30 days? You'd better be sure the transcripts still exist

29% of security pros were open to fully autonomous pentesting last year; now only 9% are

Software updates are rolling out now for iPhone, iPad, and Mac, bringing fixes that weren't supposed to arrive so soon. Here's why.

For years Apple released most of its security fixes the way it releases everything else, on a schedule, bundled into the next big version of iOS and delivered w

Your browser has been busy on your behalf. This week brought two reminders that Chrome can put things on your machine you never agreed to. One came from Google.

Your phone keeps a minute-by-minute diary of where you go. The US Supreme Court has now ruled that police cannot simply demand it. In a major win for digital pr

Leaked iPhone 18 Pro photos and parts lists appeared on the dark web following a data breach affecting one of Apple's key suppliers, according to a report from

You don't need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world's password habits are so sloppy

Israel logged roughly 4,800 hostile cyber incidents in June 2026, up from about 1,600 a year earlier, the head of its National Cyber Directorate told a German n

The FBI and CISA have warned that Russian intelligence hackers are now targeting Signal users’ backup recovery keys, an escalation of a phishing campaign that h

A high-severity flaw in Amazon Q Developer allowed a malicious code repository to silently execute commands on a developer’s machine and steal their AWS credent

Don't want to pay to keep Windows 10 security updates? Microsoft has several workarounds, with the best deal for European users.

Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers

The institution that counts France found itself counting victims this week. INSEE, the national statistics department, said a cyberattack had exposed personal d

Polymarket confirmed on Thursday that hackers stole funds from users after a third-party vendor was compromised, allowing malicious code to be injected into the

Former employee accuses company of prioritizing pending IPO over client security

Klue, the market intelligence firm whose breach earlier this month exposed customer data at LastPass, HackerOne, and nearly a dozen other companies, says the ha

Under-the-hood changes in Google's browser - aimed at improving privacy, security, and performance - will reduce the control you have over your browsing experie

The multi-year deal puts Zscaler’s Zero Trust Exchange behind the team’s car design, race strategy and trackside data, with branding on the AMR26 from the Austr

The first Windows Secure Boot expiration date is here for more than a billion PCs, with more to come - and even some Linux distros are affected. Is your PC read

A Citizen Lab report puts forensic evidence and a Russian court document behind a familiar problem: surveillance tools do not come home when the seller asks. Ru

Minutes will not be published, and MPs still have no answer on the group's budget or how its members were chosen

200+ C2 servers linked to StealC and Amadey shut down

A third-party supplier breach has exposed LastPass customer names, phone numbers, and other data. Here's how to protect yourself.

Secure Boot has always been a nuisance for Linux users, but Microsoft's expiring 2011 certificate authorities are making it a real pain.

If League of Legends and Valorant players have the right hardware and elect to opt into "pre-boot security mechanisms and Windows' own native protection feature

Brussels wants to double the agency’s staff and widen its data powers. Rights groups say it has written the surveillance before drawing the safeguards. The Euro

The Federal Communications Commission has raised about $3.5 billion from an auction of mid-band wireless spectrum, with most of the proceeds earmarked to fund t

Unexplained GSM-R failure at Deutsche Bahn caused confusion and delay

LastPass is notifying customers that their personal information and customer support case data were stolen after hackers breached Klue, a competitive intelligen

Don't let the most essential device in your life become a liability. Our one-hour wellness check will keep your phone secure for another year.

Cybersecurity has never been better at finding risk. Organizations can identify vulnerable servers, dormant user accounts, excessive privileges, exposed cloud a

A ransomware group says it lifted more than 630 gigabytes from the Indian manufacturer, including purported design files belonging to two of its biggest custome

The Model Capability Initiative, which logs mouse movements and keystrokes to train Meta’s AI, is on hold after sensitive staff data was left accessible to the

Package dependencies can create vulnerabilities that are fiendishly hard to find and stamp out

OpenAI is attempting to tackle the security issues of the open source software community.

Cloudflare has announced a joint initiative with Mozilla Firefox, Google Chrome, and Microsoft Edge to develop a new internet protocol that verifies whether web

The move comes after the company left potentially sensitive data from the initiative exposed internally.

Makers of Chrome, Edge, Firefox back bot-fraud defense called Private Access Control Tokens

As yet another extortion crew Icarus exploits Salesforce-linked integrations