Every reply to a scam text tells cybercriminals your number is active, which makes it worth more on the dark web and a better target for fraud.

Advertising company Xandr has been fined $9.6 million over data sharing that could reveal Grindr users’ sexual orientation.

BlueKit puts account-hijacking tools in more criminals’ hands, making it easier to target you with convincing fake login pages and scam messages.

If you use an AI assistant to summarize your inbox, hidden instructions could turn a phishing email you wisely ignored into your next to-do item.

Stolen ASOS data includes shopping searches as well as personal details, so customers should watch out for convincing phishing messages.

Cybercriminals compromised three country-code namespaces to get certificates that could help them impersonate trusted sites.

Amazon thinks it knows your body, your family, and your life. You didn't sign up for it, and we couldn't find a way to opt-out.

Google released a new update for the Chrome browser and ChromeOS. There are a lot of security fixes in them so don't delay.

A fabricated screenshot of a Facebook Marketplace listing sent as a text message asking "is this still available" is a conversation lure

Domino's is warning customers by email that their accounts are compromised by a credential stuffing attack.

Google has frozen the OSS VRP product vulnerability submissions to stop the flood of AI generated vulnerability reports

Two sets of US lawmakers introduced bills in late September and early October to tackle the growing concerns about ALPRs

Revolut customers received phishing texts only days after the digital bank acknowledged disclosing customer data to a government impostor.

A fake iPhone Duo preorder page promises a $500 voucher. Open it on a vulnerable iPhone, and it tries to break in before you fill out the form.

A buyer chatted and negotiated with Muse, which shared the seller’s address and arranged a pickup. The seller knew nothing about it.

A malicious file could trigger the vulnerability. Apple says it may already have been used against iPhone users.

An OpenAI agent bypassed internet restrictions and kept running after an alert. It's another case of AI misalignment no one can afford to ignore.

Google has released Chrome 154 for desktop and begun rolling out Chrome 155 for Android. Here’s what to check on your device.

Spot dangerous sites before you click—and check for scams once you’re there.

Turning off Location History did not necessarily stop Google from recording where users went. Ireland’s privacy regulator has now fined the company €403 million.

The extortion group says it stole sensitive data on FBI agents and job applicants, and wants the bureau to retract a warning about its tactics.

A simple terminal command can hijack Muse and use its extensive permissions to spy on Mac users and control their connected accounts.

Claude helped researchers break into OpenAI in under 72 hours, and exposed how quickly AI is lowering the bar for sophisticated hacking.

Hackers hacked the hackers as a feud between two cybercrime groups escalated, leaving ShinyHunters with the upper hand over rival Clop.

RatHat can navigate infected phones while stealing bank logins, authentication codes, and screen-lock PINs.

The largest known celebrity deepfake seizure has taken 12 websites offline, disrupting access to videos depicting some 1,200 people.

Google’s September Pixel update fixes 110 vulnerabilities, including a modem flaw being used in limited, targeted attacks.

Cybercriminals used HBO Max’s verified Reddit account to run 108 malicious ads that tricked people into installing information stealers.

A mother says Meta AI pieced together names, birth details, photos, and location information about her young daughters from years of family posts.

Fake Bitrefill checkout pages are appearing in search results and tricking people into sending cryptocurrency directly to scammers.

The digital bank was tricked into releasing sensitive customer information, including IDs, to an attacker using a legitimate government email domain.

A breach at email marketing company Brevo exposed Trezor, CoinTracking, and BitBox customers to phishing emails, but others may also be at risk.

The Gigabud banking Trojan can clone a banking app into a separate work profile on an Android device to help hide fraudulent transactions.

AI researchers are warning that the technology could kill us all within the next decade, although they say the risk from current models is low.

Chrome issues another monster update, fixing an actively exploited V8 vulnerability and 229 other flaws.

Scammers are filing fraudulent copyright complaints to suspend Instagram accounts, then demanding payment to withdraw them.

Australia is proposing a law that gives people a choice over what fills their feeds. It may not be long before other countries demand the same.

Grindr has settled a UK lawsuit alleging that it shared sensitive user data, including HIV status, with advertising companies.

Attackers are exploiting critical RouterOS flaws to take control of routers with SSH exposed to the internet.

Testing found that LG smart TVs can track viewing and scan home networks, while security flaws could let attackers record conversations.

Personalized replies and voice notes make it increasingly difficult to tell whether you’re talking to a human, chatbot, or AI agent.

As X expands into payments, users are receiving password-reset emails they didn’t request. Here’s what may be happening and how to stay safe.

Researchers found that apps available on SuperBox devices could add your household connection to a residential proxy network.

California and Colorado will require operating systems to collect users’ ages, but open-source software like Linux may be exempt.

Tech support scams have evolved beyond fake virus warnings. Here’s how scammers reach their targets now, and how to stay safe.

Update Chrome now: Two critical vulnerabilities could allow a malicious website to run code on your device.

What you tell an AI chatbot could come back to haunt you in court. The Washington Post found chat histories already used in 12 legal cases.

Anthropic has warned that infostealers are stealing Claude session cookies to access users’ accounts and consume usage at their expense.

Healthcare company McKesson acknowledged a data breach. ShinyHunters claims to have stolen hundred of millions of records