Around 500,000 WordPress websites could be at risk from crucial plugin security flaw — here’s what we know

Hackers can read arbitrary files, including those containing passwords, with this newly discovered WordPress flaw.

Another worrying macOS malware scheme has been discovered — here’s how to stay safe

Malwarebytes discovers Infiniti Stealer – a new piece of malware targeting macOS devices.

Apple will hide your email address from apps and websites, but not cops

Demands for Apple customer records by federal agents in recent months underscore the privacy limitations of email.

Major compromise of the telnyx PyPI library could put millions of users at risk

TeamPCP strikes again, with almost identical code to LiteLLM.

Okta’s CEO is betting big on AI agent identity
Okta’s CEO is betting big on AI agent identity

Today, I’m talking with Todd McKinnon, who is co-founder and CEO of Okta, a platform that lets big companies manage security and identity across all the apps and services their employees use. Think of it like login management — actually, that’s a great way to think about it because the way most people encounter Okta […]

GitHub developers targeted by fake VS Code alerts spreading malware

GitHub ‘Discussions’ section is being manipulated into delivering malware to software devs.

European Commission confirms platform data breach — admits ‘data have been taken’ from official websites

Unnamed attackers claim to have taken 350GB of European Commission data and plan to leak it.

‘From 16 hours to under 5 minutes’: How Gen AI is turning fraud into a $400B+ global industry — and experts warn that it’s just the beginning

Fraud has scaled into an organized system driven by AI speed, complex deception methods, and limited response windows for institutions worldwide.

Iranian Hackers Breached Kash Patel’s Email—but Not the FBI’s

Plus: Apple makes big claims about the effectiveness of its Lockdown Mode anti-spyware feature, Russia moves to implement homegrown encryption for 5G, and more.

European Commission confirms cyberattack after hackers claim data breach 

The European Union’s top executive body has confirmed a cyberattack after hackers reportedly stole reams of data from the European Commission’s cloud storage.