Cybersecurity
Cybersecurity news covering vulnerabilities, malware, privacy, breaches and security updates that matter to users and organizations.
Cybersecurity news, vulnerabilities and digital protection
This hub covers actively exploited vulnerabilities, malware, data breaches, privacy incidents and security updates from vendors and agencies including Microsoft, Google and CISA. Coverage explains who is affected, what changed and whether a patch or mitigation is available.
Explore related coverage: web security, apps and software, computing, artificial intelligence.
Go deeper: the cybersecurity, vulnerabilities and protection guide.
Latest stories
Cybersecurity news covering vulnerabilities, malware, privacy, breaches and security updates that matter to users and organizations.
Browse full section archiveBinance Details $6.3B Crypto Heist Linked to Fake Job Interview
Cryptocurrency exchange Binance details how North Korean hackers used social engineering, malware, and a fake job interview to pull off a massive heist.
Frontline Education Breach Exposes Data of 1.3 Million
A Frontline Education breach exposed personal information belonging to more than 1.3 million school staff and students.
Google Adds $250,000 Cloud VRP Reward for Architectural Flaws
Google expands its Cloud Vulnerability Reward Program with a $250,000 top-tier reward targeting high-impact Root-in-Cloud architectural security bugs.
Mobile Carriers Store Years of Call Logs and Metadata
Mobile carriers retain years of call and text metadata, exposing sensitive customer relationships, routines, and locations during breaches.
Google shuts down malware backdoor on Android TV boxes
Google has cut ties with device maker Videostrong after discovering a malware backdoor on certified Android TV and Google TV boxes.
NVIDIA Brev Hit by Breach Over 16-Day Window
NVIDIA investigates a security incident on its Brev cloud platform involving unauthorized activity that potentially exposed customer SSH keys.
Revolve Data Breach Exposes Data of Over 180,000 People
Online fashion retailer Revolve discloses a data breach impacting at least 180,000 individuals after hackers accessed its e-commerce platform.
Ivanti Patches Two Zero-Days in Connect Secure Attack Chain
Ivanti has issued security updates for two additional Connect Secure zero-days that attackers chained with a previously disclosed VPN vulnerability.
How to Tell If Your Smart TV Has a Built-in Camera
Learn how to check if your smart TV has a built-in camera, how to inspect the frame for lenses, and how to disable or cover it for privacy.
Alpine Linux Rebuilds GitLab Server After Attack
Alpine Linux rebuilt its GitLab development server and forced password resets following an attempted remote code execution attack.
Male Insecurity Over Penis Size Fuels Booming Business
A new documentary explores how wellness professionals and clinics are profiting from male insecurity through extreme girth enhancement procedures.
Reddit to Become Logged-In Service to Fight Scrapers
Reddit has announced plans to gradually shift into a logged-in service, restricting visitor access to fight content scrapers and improve personalization.
Learning Cybersecurity and Bug Hunting in the AI Era
Discover how beginners can build practical cybersecurity skills, use AI responsibly, and navigate modern bug bounty challenges.
New Android SMS of Death Exploit Remotely Crashes Phones
A security researcher released a proof-of-concept exploit for an Android SMS of Death flaw that remotely crashes unpatched phones and cellular service.
TeamViewer Flaw Lets Malicious Hosts Target Support
A high-severity integer overflow vulnerability in TeamViewer could allow malicious hosts to execute arbitrary code or crash support technicians' systems.
Fresh WordPress Vulnerability Targeted by Attackers
Threat actors are actively targeting a high-severity unauthenticated race condition vulnerability in WordPress leading to remote code execution.
FBI Seizes Domain of Russian Bulletproof Host Virtualine
The FBI has seized the domain of Virtualine, a Russian-speaking bulletproof hosting provider linked to ransomware, infostealers, and illicit services.
SS7 and Diameter Flaws Expose Mobile Networks
Explore how vulnerabilities in SS7 and Diameter signaling protocols allow attackers to track phone locations, intercept calls, and bypass 2FA.
Critical Linux Kernel Flaw Allows Remote Root Attacks
A critical use-after-free vulnerability in the Linux kernel allows unauthenticated attackers to achieve remote root execution on servers with MPTCP listeners.
Linux Kernel Exploit Enables Remote Root Attacks on MPTCP
Security researchers demonstrate a critical Linux kernel exploit allowing remote root code execution on servers running Multipath TCP listeners.
Try a different search phrase or explore one of the technology sections.