Cybersecurity

Software updates are rolling out now for iPhone, iPad, and Mac, bringing fixes that weren't supposed to arrive so soon. Here's why.

For years Apple released most of its security fixes the way it releases everything else, on a schedule, bundled into the next big version of iOS and delivered w

Israel logged roughly 4,800 hostile cyber incidents in June 2026, up from about 1,600 a year earlier, the head of its National Cyber Directorate told a German n

The FBI and CISA have warned that Russian intelligence hackers are now targeting Signal users’ backup recovery keys, an escalation of a phishing campaign that h

A high-severity flaw in Amazon Q Developer allowed a malicious code repository to silently execute commands on a developer’s machine and steal their AWS credent

Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers

Don't let the most essential device in your life become a liability. Our one-hour wellness check will keep your phone secure for another year.

The Model Capability Initiative, which logs mouse movements and keystrokes to train Meta’s AI, is on hold after sensitive staff data was left accessible to the

Package dependencies can create vulnerabilities that are fiendishly hard to find and stamp out

OpenAI is attempting to tackle the security issues of the open source software community.

Cloudflare has announced a joint initiative with Mozilla Firefox, Google Chrome, and Microsoft Edge to develop a new internet protocol that verifies whether web

The move comes after the company left potentially sensitive data from the initiative exposed internally.

Attackers are actively exploiting a vulnerability in the Gravity SMTP WordPress plugin that exposes API keys, OAuth tokens, and detailed system configuration da

The cybercrime group ShinyHunters has published 45 gigabytes of data stolen from Madison Square Garden Entertainment after the company missed a June 15 ransom d

For the last 30 years, stopping the flow of cybersecurity-related software has proven to be ineffective. It's unclear why it would work now with Anthropic’s cyb

Bulgaria’s export control authority licensed a Sofia-based surveillance firm to sell phone-tracking tools, interception systems, and monitoring infrastructure t

Learn how to spot the signs of account monitoring and compromise - and take back control.

The European Union’s cybersecurity agency was due to meet Anthropic on Thursday, the European Commission confirmed, a meeting arranged before Washington made it

Most cybersecurity startups sell shields. Twenty sells the sword, and investors just valued that at $1bn. The company, which describes itself as America’s first

The figure that reframes the problem is a share, not a sum. In more than half the countries Interpol surveyed for its latest Asia and South Pacific cyber-threat

For the second time in a week, the AUR was found to contain malicious applications. What can Arch Linux users do about this?

Security researchers at Zimperium’s zLabs have documented a new Android banking trojan that targets 217 banking and cryptocurrency applications and carries 137

Your Android keyboard may be collecting more than you realize. Here are two ways to take back your privacy, but I only trust one.

A China-linked espionage group spent more than a year inside North American medical, academic, and military research networks, stealing sensitive data and defen

Three days after the US government ordered Anthropic to shut down Fable 5 and Mythos 5, roughly 100 of the world’s most prominent cybersecurity professionals ha

AMD has silently disabled a security feature on its consumer Ryzen processors that protected users against physical attacks on their computer’s memory. The feat

Security researchers at Varonis Threat Labs have disclosed a vulnerability chain in Microsoft 365 Copilot Enterprise Search that could have let an attacker stea

Global financial fraud cost victims an estimated $442 billion in 2025, roughly equivalent to the economic output of Denmark, according to Interpol’s 2026 Global

The FBI has revealed a 22,000 square-foot replica town on its Huntsville, Alabama, campus built to train law enforcement in simulating and investigating real-wo

Google has filed a lawsuit against a suspected Chinese cybercrime operation it calls the Outsider Enterprise, alleging the group sent more than 2.5 million frau

University of Nottingham is first of many, Shiny tells The Reg

South Korea’s privacy watchdog has slapped e-commerce giant Coupang with a record-breaking 624.7 billion won ($409 million) fine, the largest data breach penalt

The US has found a new use for Europe’s swelling defence budgets: tearing out Huawei. Whether its allies are listening is another matter. The State Department’s

Hackers likely took over 20,225 Instagram accounts using Meta's AI support chatbot, the company confirmed in a notice filed with the state of Maine. In the noti

The most oversubscribed sporting event in history is also the most phished. With more than 150 million ticket requests in the first 15 days and just six million

Blue Badge holders exposed to each other after BCC function proves too complex

When the Trump administration sanctioned the International Criminal Court’s top prosecutor earlier this year, Microsoft cancelled his email account. The inciden

FSB claims large-scale snoop op compromised phones of senior officials, but gives no technical evidence to back allegations

Hackers hijacked Instagram accounts over the weekend by tricking Meta’s own AI-powered support chatbot into granting them access. The attack required no access

A critical vulnerability in WP Maps Pro, a commercial WordPress plugin with more than 15,000 sales on the Envato Market, is being actively exploited by attacker

A new security feature in Chrome will thwart attackers who try to impersonate you by using your stolen browser cookies on their own devices.

Quantum is coming soon to an enterprise near you. But that shift brings significant security concerns.

Project Lightwell is an AI‑powered initiative to find and fix vulnerabilities in open-source software at an industrial scale. Here's what we know so far.

Ever wonder what a VPN audit is or why they're always announced to the public? Here's why.

The AI company's Bumblebee tool tackles your most urgent question after any supply‑chain advisory: Do your programmers have this malware installed?

Dutch financial crime investigators have seized 800 servers and arrested two men in a crackdown on hosting companies that provided infrastructure for Russian st

After using multiple security cameras over the years, I've found the best arrangement for my home - but that doesn't make it right for everyone.

Now that doesn't mean Linux stable kernel maintainer Greg Kroah-Hartman thinks Rust is magic.