23andMe successor pays California $6 million over DNA data breach
The deal settles the state's claim over the 2023 breach that exposed data of nearly 7 million people. Here is what to do with your genetic data.
Your lighthouse in cybersecurity
Cybersecurity news explained in plain language, with practical tips to keep you safe.
Latest posts
Ahold Delhaize confirms hack and takes online grocery shopping offline across chains
Malicious activity took down systems at brands such as Food Lion, Stop & Shop and Albert Heijn. Physical stores stayed open, and no data theft is evident for now.
BlackX: bootkit bypasses Windows Secure Boot even on updated PCs
A new firmware-level malware exploits an old flaw that the update alone does not close. Why the manual revocation matters.
Capcom confirms breach of 11.7 million emails; 196 accounts had their password changed
Attackers got into CAPCOM ID, the account used for games like Resident Evil and Street Fighter. Capcom says passwords did not leak; here is what to do.
Google policy change: Gmail and Photos data may personalize ads
If you connect Gmail or Google Photos to Google's AI, that content can help pick the ads you see. Here is what changed and how to switch it off.
Heartbreaker ransomware recompiles itself to dodge antivirus on Mac
A sample analyzed by a researcher encrypts the Downloads folder and changes its own signature. The risk is low for now, and files can be recovered.
Interpol operation arrests 1,462 and recovers $105 million from scams
Serengeti III, across Africa, took down online fraud, ransomware and investment scam networks. Here are the scams it hit and how to avoid them.
Hacker exploits firewalls and VPNs, gathering over 70,000 credentials; Latin America is 32% of victims
Researchers link the actor k0t to ransomware groups. Nearly a third of victims are in Latin America, and the way in is exposed devices.
Meta fined $25 billion over Cambridge Analytica case; company will appeal
A New Mexico judge ordered Meta to pay $25 billion for misleading users about their data. The company says it will appeal.
Microsoft takes down network behind more than 1 billion phishing messages
Three services sold scam kits, with 2,300 templates imitating banks and government agencies in over 150 countries. What changed and how to defend yourself.
Two critical PHP flaws threaten millions of sites, including WordPress; update now
The flaws let attackers run code on servers running PHP and are already being exploited. Who is at risk and which versions carry the fix.
Pix: window to contest a refund grows from 30 to 80 days, hitting the double-refund scam
Brazil's central bank extended the time a Pix recipient has to contest a refund made through MED. How the mechanism works and what it does not cover.
Abandoned Popcorn Time put millions of PCs at risk; researchers switched it off
A forgotten Popcorn Time updater would accept code from anyone. A security firm disabled it on millions of computers. Here is what to do.
Quest Diagnostics takes lab ordering system offline after intrusion; patient data may have been accessed
The largest US lab network says it believes some data was accessed but does not yet know which. The case and what to do about health data.
Ransomware crew used AI to hit 62 companies, then left its tools exposed online
Researchers found the control panel of a group using AI agents in attacks. The most common way in was the usual one: reused passwords.
FBI probes ransom negotiator tied to ShinyHunters extortion site
Arrests in the Netherlands and the US raise suspicions about firms that negotiate ransomware payments. Much of it is still allegation, not conviction.
Signal flaw could keep your microphone on after you hung up a call
A serious bug in Signal's calling library let an attacker stop a call from ending. The fix is out; here is how to update.
A tenth of Tor's exit capacity was hijacked to steal SSH passwords
A researcher showed that 333 exit relays redirected SSH connections to criminal servers. The Tor Project removed the relays within three days.
Two-factor authentication: the extra lock that stops most account takeovers
What two-factor authentication is, why it stops someone who stole your password, and how to turn it on for WhatsApp, Instagram and Google.
Microsoft fixes a record number of Windows flaws, one already used by criminals
Microsoft's October update fixes more than 1,400 flaws, including one already exploited in attacks. Here is how to check that your PC is protected.